You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by "Gold, Samuel (Contractor)" <Go...@ncr.disa.mil> on 2004/04/09 17:49:33 UTC
[users@httpd] SSL and IP addresses.
Hey all,
I have a question about having multiple IP addresses for SSL enabled sites.
I have one box with 1 ip address. I have 4 sites that point to that
address. I have been asked to SSL enable all 4 sites. I have been using
NamedVirtualHosts and with SSL you have to use IP based virtual hosts. My
question is can I have the user go to the http site first then be redirected
to the SSL site and use the /etc/hosts file to define the additional ip
addresses that I need?
Example /etc/host
123.123.123.123 myhost.ncr.disa.mil
192.168.1.1 www.sslsite1.ncr.disa.mil
192.168.1.2 www.sslsite2.ncr.disa.mil
Apache 2.0.49
OpenSSL 0.9.7d
Solaris 2.8
Thanks,
Sam Gold
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] SSL and IP addresses.
Posted by Joshua Slive <jo...@slive.ca>.
On Fri, 9 Apr 2004, Gold, Samuel (Contractor) wrote:
> Hey all,
>
> I have a question about having multiple IP addresses for SSL enabled sites.
> I have one box with 1 ip address. I have 4 sites that point to that
> address. I have been asked to SSL enable all 4 sites. I have been using
> NamedVirtualHosts and with SSL you have to use IP based virtual hosts. My
> question is can I have the user go to the http site first then be redirected
> to the SSL site and use the /etc/hosts file to define the additional ip
> addresses that I need?
No. If you do an "external" redirect (ask the client to fetch data from
the new address), then it won't work because the 192 addresses are not
routable from the internet. If you do an "internal" redirect, or you
proxy the requests, then the connection from the internet would remain
non-encrypted.
One option is to put each SSL-vhost on a different port. Port-based
virtual hosts work exactly like IP virtual hostes, so this allows you to
use SSL.
Joshua.
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org