-----Ursprüngliche Nachricht----- Von: Dominik Sk?adanowski [mailto:dominik.skladanowski@ch.pw.edu.pl] Gesendet: Montag, 7. Juli 2003 12:24 An: SuSE-Security Betreff: [suse-security] [Apache - SuSE 8.2 Pro] 2 different WWW virtual hosts, 2 different certs
Hello
I tried to startup 2 SSL virtual hosts (every virtual host has it's own cert) on the same machne with 1 IP. Apparently it looks fine...
The problem is: when I connect to https://virtual1.domain.com/ cert is for domain virtual1.domain.com, but when I connect to https://virtual2.domain.com/ cert is for domain virtual1.domain.com too.
Isn't it strange? Or maybe I made a mistake.
Hi, each Virtual Host needs it´s own IP Adress.
CU Stefan
Here is fragment on my /etc/httpd/httpd.conf: -------------------------------------------------------------- --------- NameVirtualHost xxx.xxx.xxx.xxx:443
<VirtualHost virtual1.domain.com:443>
DocumentRoot "/srv/www/virtual1/htdocs" ServerName virtual1.domain.com ServerAdmin root@domain.com ErrorLog /var/log/httpd/error_log TransferLog /var/log/httpd/access_log
SSLEngine on
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
SSLCertificateFile /etc/httpd/virtual1cert.pem
SSLCertificateKeyFile /etc/httpd/virtual1req.pem
SSLCACertificatePath /usr/share/ssl/misc/demoCA SSLCACertificateFile /usr/share/ssl/misc/demoCA/cacert.pem
SSLOptions +StdEnvVars </Files> SSLOptions +StdEnvVars </Directory> SetEnvIf User-Agent ".*MSIE.*" \ nokeepalive ssl-unclean-shutdown \ downgrade-1.0 force-response-1.0
CustomLog /var/log/httpd/ssl_request_log \ "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>
<VirtualHost virtual2.domain.com:443>
DocumentRoot "/srv/www/virtual2" ServerName virtual2.domain.com ServerAdmin root@domain.com ErrorLog /var/log/httpd/error_log TransferLog /var/log/httpd/access_log
SSLEngine on
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
SSLCertificateFile /etc/httpd/virtual2cert.pem SSLCertificateKeyFile /etc/httpd/virtual2req.pem
SSLCACertificatePath /usr/share/ssl/misc/demoCA SSLCACertificateFile /usr/share/ssl/misc/demoCA/cacert.pem
SSLOptions +StdEnvVars </Files> SSLOptions +StdEnvVars </Directory> SetEnvIf User-Agent ".*MSIE.*" \ nokeepalive ssl-unclean-shutdown \ downgrade-1.0 force-response-1.0
CustomLog /var/log/httpd/ssl_request_log \ "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost> -------------------------------------------------------------- ---------
-- ++++++++++++++++++++++++++++++++++++++++++
Dominik Skladanowski
++++++++++++++++++++++++++++++++++++++++++
-- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help@suse.com Security-related bug reports go to security@suse.de, not here