You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Nasir Zia <na...@gmail.com> on 2010/01/19 08:22:18 UTC

[users@httpd] can we run two SSL domains on one IP

Hi,

can anyone tell me can i run my two different SSL domains ex: abc.com and
xyz.com on one IP address or i need second IP address to the server.

Also please brief on this as if i run 5 sites on one server should i need 5
IP addresses. Is their any appropriate solution to this.

Regards
Nasir

Re: [users@httpd] can we run two SSL domains on one IP

Posted by dinar qorbanof <qd...@gmail.com>.
hello.

2010/1/19 Nilesh Govindarajan <li...@itech7.com>:
> .....
>
> Oops. My bad. SSL protocol doesn't give the Host: header. So apache can't
> decide which Vhost to serve (from apache docs :D).
>
>......

i think may be apache could if coded little other way, may be more
correctly. i have written about that in bugs site:
https://issues.apache.org/bugzilla/show_bug.cgi?id=48507
also i have found something related in user list:
unfortunately does not open currently and i cannot check it and select
first message:
http://httpd.markmail.org/message/cqlhaivligtu6ftx?q=apache+ssl+virtual+host#query:apache%20ssl%20virtual%20host+page:1+mid:cqlhaivligtu6ftx+state:results
http://httpd.markmail.org/message/wcaftm2flzzzhofo?q=apache+ssl+virtual+host#query:apache%20ssl%20virtual%20host+page:1+mid:4tbl3a4tavwokuh5+state:results

and i had found this:
http://www.networkworld.com/columnists/2006/011606internet.html - i
have not tried it, i think it may be does not work with scripts that
create links to itself in their output with "http://".

also you can make one vhost and make aliases for both domains and all
subdomains and so if there are 2 forums and one is /forum/ second need
to be with other alias like /support/ .

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] can we run two SSL domains on one IP

Posted by Scott Gifford <sg...@suspectclass.com>.
On Tue, Jan 19, 2010 at 6:55 AM, Nilesh Govindarajan <li...@itech7.com>wrote:

>
> Oops. My bad. SSL protocol doesn't give the Host: header. So apache can't
> decide which Vhost to serve (from apache docs :D).
>

Though SSL doesn't itself provide a Host: header, the HTTP session on top if
it still does, so if you can get past the SSL layer virtual hosting will
work as usual.  As others have suggested, wildcard certs and
"subjectAltName" certs are two ways to make the SSL layer accept multiple
certs.  I have successfully used wildcard certs and name-based virtual
hosting together.

-----Scott.

Re: [users@httpd] can we run two SSL domains on one IP

Posted by Nilesh Govindarajan <li...@itech7.com>.
On 01/19/2010 01:32 PM, Igor Cicimov wrote:
> As far as i know apache doesnt support name virtual hosting up to 2.2.13
> or 2.2.14 not exactly sure. And after that supports it but only with SII.
>
>> On Jan 19, 2010 6:41 PM, "Nilesh Govindarajan" <lists@itech7.com
>> <ma...@itech7.com>> wrote:
>>
>> On 01/19/2010 12:52 PM, Nasir Zia wrote:
>>
>>     > > Hi, > > can anyone tell me can i run my two different SSL
>>     domains ex: abc.com <http://abc.com>
>>
>>     <http://abc.com> and xyz.com <http://xyz.com> <http://xyz.com> on
>>     one IP address or i
>>
>>     > need second IP address to the server. > > Also please brief on
>>     this as if i run 5 sites on one se...
>>
>>
>> Use NameVirtualHost <ip>:443
>>
>> Then <VirtualHost <ip>:443> ServerName abc.com <http://abc.com> ...
>> </VirtualHost>
>> <VirtualHost <ip>:443> ServerName xyz.com <http://xyz.com> ...
>> </VirtualHost>
>>
>> This should do the job for u
>>
>> Also you don't need 5 IPs to run 5 sites. Use the same technique as I
>> said above. NameVirtualHost <ip>:80
>>
>> --
>> Nilesh Govindarajan
>> Site & Server Adminstrator
>> www.itech7.com <http://www.itech7.com>
>>
>> ---------------------------------------------------------------------
>> The official User-To-User support forum of the Apache HTTP Server Project.
>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>> <ma...@httpd.apache.org>
>> "   from the digest: users-digest-unsubscribe@httpd.apache.org
>> <ma...@httpd.apache.org>
>> For additional commands, e-mail: users-help@httpd.apache.org
>> <ma...@httpd.apache.org>
>>

Oops. My bad. SSL protocol doesn't give the Host: header. So apache 
can't decide which Vhost to serve (from apache docs :D).

PS: If you're new to mailing lists, then please don't top post. Its very 
irritating.

-- 
Nilesh Govindarajan
Site & Server Adminstrator
www.itech7.com

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] can we run two SSL domains on one IP

Posted by Igor Cicimov <ic...@gmail.com>.
I mean SSL name virtual hosts...

On Jan 19, 2010 7:02 PM, "Igor Cicimov" <ic...@gmail.com> wrote:

As far as i know apache doesnt support name virtual hosting up to 2.2.13 or
2.2.14 not exactly sure. And after that supports it but only with SII.

> > On Jan 19, 2010 6:41 PM, "Nilesh Govindarajan" <li...@itech7.com> wrote:
> > On 01/19/2010 12:52...

> >> >> > > Hi, > > can anyone tell me can i run my two different SSL domains
> ex: abc.com >> >> <http...
>
> > need second IP address to the server. > > Also please brief on this as if
> i run 5 sites on one se...
>
> > > Use NameVirtualHost <ip>:443 > > Then <VirtualHost <ip>:443>
ServerName abc.com ... </Virtual...

Re: [users@httpd] can we run two SSL domains on one IP

Posted by Igor Cicimov <ic...@gmail.com>.
As far as i know apache doesnt support name virtual hosting up to 2.2.13 or
2.2.14 not exactly sure. And after that supports it but only with SII.

On Jan 19, 2010 6:41 PM, "Nilesh Govindarajan" <li...@itech7.com> wrote:

On 01/19/2010 12:52 PM, Nasir Zia wrote:

> > > Hi, > > can anyone tell me can i run my two different SSL domains ex:
> abc.com
> <http://abc.com> and xyz.com <http://xyz.com> on one IP address or i
>
> > need second IP address to the server. > > Also please brief on this as if
> i run 5 sites on one se...
>

Use NameVirtualHost <ip>:443

Then <VirtualHost <ip>:443> ServerName abc.com ... </VirtualHost>
<VirtualHost <ip>:443> ServerName xyz.com ... </VirtualHost>

This should do the job for u

Also you don't need 5 IPs to run 5 sites. Use the same technique as I said
above. NameVirtualHost <ip>:80

-- 
Nilesh Govindarajan
Site & Server Adminstrator
www.itech7.com

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
 "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: [users@httpd] can we run two SSL domains on one IP

Posted by Nilesh Govindarajan <li...@itech7.com>.
On 01/19/2010 12:52 PM, Nasir Zia wrote:
> Hi,
>
> can anyone tell me can i run my two different SSL domains ex: abc.com
> <http://abc.com> and xyz.com <http://xyz.com> on one IP address or i
> need second IP address to the server.
>
> Also please brief on this as if i run 5 sites on one server should i
> need 5 IP addresses. Is their any appropriate solution to this.
>
> Regards
> Nasir

Use NameVirtualHost <ip>:443

Then <VirtualHost <ip>:443> ServerName abc.com ... </VirtualHost>
<VirtualHost <ip>:443> ServerName xyz.com ... </VirtualHost>

This should do the job for u

Also you don't need 5 IPs to run 5 sites. Use the same technique as I 
said above. NameVirtualHost <ip>:80

-- 
Nilesh Govindarajan
Site & Server Adminstrator
www.itech7.com

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org