SSL with Namebased Virtual Hosting

sushantchawla2005 · 05-15-2010, 11:07 AM

Dear All

Please let me know the detailed reason that why we can't use name based virtual hosting with SSL.

Regds
Sushant Chawla
Linux Administrator

TB0ne · 05-15-2010, 11:39 AM

Quote:

Originally Posted by sushantchawla2005

Dear All
Please let me know the detailed reason that why we can't use name based virtual hosting with SSL.

Regds
Sushant Chawla
Linux Administrator

Please Google and look up things for yourself.

http://httpd.apache.org/docs/2.0/ssl...aq.html#vhosts

Quote:

Why can't I use SSL with name-based/non-IP-based virtual hosts?

The reason is very technical, and a somewhat "chicken and egg" problem. The SSL protocol layer stays below the HTTP protocol layer and encapsulates HTTP. When an SSL connection (HTTPS) is established Apache/mod_ssl has to negotiate the SSL protocol parameters with the client. For this, mod_ssl has to consult the configuration of the virtual server (for instance it has to look for the cipher suite, the server certificate, etc.). But in order to go to the correct virtual server Apache has to know the Host HTTP header field. To do this, the HTTP request header has to be read. This cannot be done before the SSL handshake is finished, but the information is needed in order to complete the SSL handshake phase. Bingo!