You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Pete Houston <ph...@openstrike.co.uk> on 2012/06/06 11:51:56 UTC

Re: [users@httpd] trouble with virtualhost in http/https

You cannot have 2 https sites with different certificates sharing the
same IP+port combination. This is a restriction of how https works and
is outlined in the documentation here:
http://httpd.apache.org/docs/2.4/ssl/ssl_faq.html#vhosts

If you ensure that your https vhosts have either different IP addresses
or different ports then they can be correctly served.

Pete

On Sat, May 26, 2012 at 09:43:18PM +0200, Alain Roger wrote:
> I did as in the documentation:
> # Ensure that Apache listens on port 80
> Listen 80
> 
> # Listen for virtual host requests on all IP addresses
> NameVirtualHost *:80
> 
> <VirtualHost *:80>
> DocumentRoot /www/example1
> ServerName www.example1.com
> 
> # Other directives here
> 
> </VirtualHost>
> 
> <VirtualHost *:80>
> DocumentRoot /www/example2
> ServerName www.example2.org
> 
> # Other directives here
> 
> </VirtualHost>
> 
> everything in the httpd-vhosts.conf file of xampp... but both website have
> https...and basically the first defined is the default one...and this is
> something i can't allow...
> so how to do to be sure that if user is in http://www.website2..loc and
> select clicks on link as https...he goes to https://www.website2.loc and
> not https://www.website1.loc ?

-- 
Openstrike - improving business through open source
http://www.openstrike.co.uk/ or call 01722 770036 / 07092 020107

Re: [users@httpd] trouble with virtualhost in http/https

Posted by Frank Gingras <fr...@gmail.com>.

On 06/06/2012 05:51 AM, Pete Houston wrote:
> You cannot have 2 https sites with different certificates sharing the
> same IP+port combination. This is a restriction of how https works and
> is outlined in the documentation here:
> http://httpd.apache.org/docs/2.4/ssl/ssl_faq.html#vhosts
>
> If you ensure that your https vhosts have either different IP addresses
> or different ports then they can be correctly served.
>
> Pete
>
> On Sat, May 26, 2012 at 09:43:18PM +0200, Alain Roger wrote:
>> I did as in the documentation:
>> # Ensure that Apache listens on port 80
>> Listen 80
>>
>> # Listen for virtual host requests on all IP addresses
>> NameVirtualHost *:80
>>
>> <VirtualHost *:80>
>> DocumentRoot /www/example1
>> ServerName www.example1.com
>>
>> # Other directives here
>>
>> </VirtualHost>
>>
>> <VirtualHost *:80>
>> DocumentRoot /www/example2
>> ServerName www.example2.org
>>
>> # Other directives here
>>
>> </VirtualHost>
>>
>> everything in the httpd-vhosts.conf file of xampp... but both website have
>> https...and basically the first defined is the default one...and this is
>> something i can't allow...
>> so how to do to be sure that if user is in http://www.website2..loc and
>> select clicks on link as https...he goes to https://www.website2.loc and
>> not https://www.website1.loc ?
>

Actually, that's incorrect. You can do so, and provided that you use SNI 
and SNI-capable HTTP clients, the correct certificate will be used, too!

Just set up regular *:443 name-based vhosts.

Frank

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org