LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 01-09-2011, 04:57 PM   #1
struct
Member
 
Registered: Feb 2009
Posts: 68

Rep: Reputation: 10
SSL certs and Virtual Hosts on Apache


I run couple of sites on a virtual hosting environment and I am in need of adding additional SSL for a different domain name.

From what I read on some forum topics indicate that SSL cert requires different IP address. meaning one cert for each IP. Is this true? If so, then I'm having some difficulties understanding the benefits of running virtual host if a server can't host multiple secured site through single IP.

please do let me know if there is a way to run multiple ssl site within virtual host environment. I'm hoping for a possible workaround.

Thanks in advance

Last edited by struct; 01-09-2011 at 05:12 PM. Reason: additional info
 
Old 01-09-2011, 05:10 PM   #2
rayfordj
Member
 
Registered: Feb 2008
Location: Texas
Distribution: Fedora, RHEL, CentOS
Posts: 488

Rep: Reputation: 78
SSL with Virtual Hosts Using SNI
 
Old 01-09-2011, 05:15 PM   #3
struct
Member
 
Registered: Feb 2009
Posts: 68

Original Poster
Rep: Reputation: 10
Thank you sir.
I'll definitely check it out.
 
Old 01-09-2011, 06:03 PM   #4
Nominal Animal
Senior Member
 
Registered: Dec 2010
Location: Finland
Distribution: Xubuntu, CentOS, LFS
Posts: 1,723
Blog Entries: 3

Rep: Reputation: 948Reputation: 948Reputation: 948Reputation: 948Reputation: 948Reputation: 948Reputation: 948Reputation: 948
Quote:
Originally Posted by struct View Post
From what I read on some forum topics indicate that SSL cert requires different IP address. meaning one cert for each IP. Is this true? If so, then I'm having some difficulties understanding the benefits of running virtual host if a server can't host multiple secured site through single IP.
IP-based Apache virtual hosts are really not that different to name-based ones. Other than obtaining the needed IP addresses, they are just as easy to configure and maintain. (Actually, having separate IP addresses does allow for traffic shaping and greater control with e.g. firewall rules, so personally I prefer IP-based Apache virtual hosts.)

Traditionally (without SNI or "wildcard" certificates) each secure site requires a fixed IP address. Fortunately, aliasing multiple IP addresses to a single Linux server is very easy, as is configuring Apache virtual hosts to listen on specific IP addresses. It's not like you need more than one network interface.

If your user base has e.g. Windows XP users, you may still have to use IP-based virtual hosts, because not all browsers support SNI. Or, if all your virtual host names have a matching pattern, e.g. *.example.com, you can use a single IP address and a wildcard certificate.
Nominal Animal

Last edited by Nominal Animal; 03-21-2011 at 01:59 AM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Multiple SSL Virtual Hosts with Apache/mod_ssl/SNI ddenton Linux - Server 3 12-03-2008 02:20 AM
Apache + Virtual Hosts + SSL = PLEASE HELP neocontrol Linux - Server 5 05-25-2007 09:33 AM
apache-ssl setup virtual hosts notolerance Linux - Software 3 12-22-2005 04:20 PM
Apache + SSL + Virtual Hosts otisthegbs Linux - Software 3 10-05-2004 07:59 PM
Mulltiple SSL Virtual Hosts w/Apache jrbush82 Linux - Software 3 04-12-2004 02:49 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 02:13 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration