|
|
Subject:
With an Apache2 server, how do I setup my ssl.conf for multiple domains?
Category: Computers > Internet Asked by: pfreet-ga List Price: $50.00 |
Posted:
24 Aug 2006 05:29 PDT
Expires: 23 Sep 2006 05:29 PDT Question ID: 759037 |
Apache/SSL does not allow one to use name based virtual hosting. You must use IP based virtual hosting. However, our server is behind a firewall and all trafiic to the server is on 10.10.1.1. So, how do I configure my ssl.conf file to be able to support multiple sercure domains? I currently have this setup and it works quite well for secrue.foo.com: Listen 443 <VirtualHost _default_:443> DocumentRoot /www/foo/ ServerName secure.foo.com:443 SSLEngine on ... </VirtualHost> However, the following does not work and I have tried every permutation of it. I think it may be because the server is behind a NAT firewall. <VirtualHost 12.34.56.78:443> ServerName secure.foo.com:443 DocumentRoot /www/foo/ SSLEngine on ... </VirtualHost> <VirtualHost 98.76.54.32:443> ServerName secure.bar.com:443 DocumentRoot /www/bar/ SSLEngine on ... </VirtualHost> Please suggest a setting for SSL.conf that will woprk in this instance. Thank you! |
|
There is no answer at this time. |
|
Subject:
Re: With an Apache2 server, how do I setup my ssl.conf for multiple domains?
From: rhinst-ga on 26 Aug 2006 21:57 PDT |
In general, each SSL site needs it's own IP address, since the reverse DNS of the ip address has to match the domain specified in the SSL certificate. If your server is NAT'ed behind a firewall and only has one IP address available to it, your best bet might be to translate multiple external ip addresses to different ports on the apache server. For example, assume you have 3 domains that require SSL: domain1.com, domain2.com, and domain3.com. domain1.com resolves to 1.2.3.4 which gets translated through the firewall to 10.10.1.1:10443. domain2.com resolves to 1.2.3.5, which gets translated through the firewall to 10.10.1.1:10444. domain3.com resolves to 1.2.3.6, which gets translated through the firewall to 10.10.1.1:10445. Then you can create the following in your conf file: Listen 10443 Listen 10444 Listen 10445 <VirtualHost _default_:10443> DocumentRoot /www/domain1/ ServerName domain1.com SSLEngine on ... </VirtualHost> <VirtualHost _default_:10444> DocumentRoot /www/domain2/ ServerName domain2.com SSLEngine on ... </VirtualHost> <VirtualHost _default_:10445> DocumentRoot /www/domain3/ ServerName domain3.com SSLEngine on ... </VirtualHost> Hope this helps. |
If you feel that you have found inappropriate content, please let us know by emailing us at answers-support@google.com with the question ID listed above. Thank you. |
Search Google Answers for |
Google Home - Answers FAQ - Terms of Service - Privacy Policy |