You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Darryl Cook <dl...@cs.appstate.edu> on 2004/05/11 14:10:52 UTC
[users@httpd] SSL and Virtual hosts
I ran into a problem which I need your help with. I am running Mailman
over Apache 2.x successfully with ssl support. Today I merged all of
our web pages over to that machine and ran into the following
problem....in our httpd.conf file we have a couple of virtual hosts
defined so that two different departments have their own web area. This
is no problem by itself when ssl support is not included but when you
include ssl support with it, you get the error :
Tue May 11 08:09:27 2004] [error] VirtualHost _default_:443 -- mixing *
ports and non-* ports with a NameVirtualHost address is not supported,
proceeding with undefined results
What happens is that it ignores the virtual hosts and serves from the
default pages. Anyone know why and how to combine ssl and virtual
hosts on the same machine.
thanks
darryl cook
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] SSL and Virtual hosts
Posted by Darryl Cook <dl...@cs.appstate.edu>.
Joey,
You are the man! Worked like a charm, thanks for the info!!
darryl
Joey Hewitt wrote:
>Quoting Milan Andric <ma...@eecs.berkeley.edu>:
>
>
>
>>On Tue, May 11, 2004 at 08:10:52AM -0400, Darryl Cook wrote:
>>
>>
>>>I ran into a problem which I need your help with. I am running Mailman
>>>over Apache 2.x successfully with ssl support. Today I merged all of
>>>our web pages over to that machine and ran into the following
>>>problem....in our httpd.conf file we have a couple of virtual hosts
>>>defined so that two different departments have their own web area. This
>>>is no problem by itself when ssl support is not included but when you
>>>include ssl support with it, you get the error :
>>>
>>>Tue May 11 08:09:27 2004] [error] VirtualHost _default_:443 -- mixing *
>>>ports and non-* ports with a NameVirtualHost address is not supported,
>>>proceeding with undefined results
>>>
>>>What happens is that it ignores the virtual hosts and serves from the
>>>default pages. Anyone know why and how to combine ssl and virtual
>>>hosts on the same machine.
>>>
>>>
>>you need to do IP based vhosting as opposed to name based virtual hosting.
>>if
>>you search the maillist archive you'll find more info about it. one solution
>>is to assign more than one ip to the network card, aka ip aliasing.
>>
>>
>>
>
>I'm not sure about the implications of SSL certificates and this issue, but I
>was seeing this error you described while trying to do something similar. I
>think the trick was to have 2 NameVirtualHost directives -- one for port 80 and
>the other for port 443. See my vhosts file at
>http://www.joeyhewitt.com/chunked_bug/vhosts/vhosts.conf to see how I did it.
>
>Just beware that I only use SSL to secure my little personal web page's webmail,
>i.e. I don't expect any browser other than my own with my own root CA imported
>in, to be able to authenticate the server correctly. Maybe it's not a good
>idea to serve over HTTP *and* HTTP/SSL on the same server using virtual
>hosts... HTH,
>==Joey
>
>----------------------------------------------------------------
>This message was sent using IMP, the Internet Messaging Program.
>
>
>---------------------------------------------------------------------
>The official User-To-User support forum of the Apache HTTP Server Project.
>See <URL:http://httpd.apache.org/userslist.html> for more info.
>To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
>For additional commands, e-mail: users-help@httpd.apache.org
>
>
>
Re: [users@httpd] SSL and Virtual hosts
Posted by Joey Hewitt <jo...@joeyhewitt.com>.
Quoting Milan Andric <ma...@eecs.berkeley.edu>:
> On Tue, May 11, 2004 at 08:10:52AM -0400, Darryl Cook wrote:
> > I ran into a problem which I need your help with. I am running Mailman
> > over Apache 2.x successfully with ssl support. Today I merged all of
> > our web pages over to that machine and ran into the following
> > problem....in our httpd.conf file we have a couple of virtual hosts
> > defined so that two different departments have their own web area. This
> > is no problem by itself when ssl support is not included but when you
> > include ssl support with it, you get the error :
> >
> > Tue May 11 08:09:27 2004] [error] VirtualHost _default_:443 -- mixing *
> > ports and non-* ports with a NameVirtualHost address is not supported,
> > proceeding with undefined results
> >
> > What happens is that it ignores the virtual hosts and serves from the
> > default pages. Anyone know why and how to combine ssl and virtual
> > hosts on the same machine.
>
> you need to do IP based vhosting as opposed to name based virtual hosting.
> if
> you search the maillist archive you'll find more info about it. one solution
> is to assign more than one ip to the network card, aka ip aliasing.
>
I'm not sure about the implications of SSL certificates and this issue, but I
was seeing this error you described while trying to do something similar. I
think the trick was to have 2 NameVirtualHost directives -- one for port 80 and
the other for port 443. See my vhosts file at
http://www.joeyhewitt.com/chunked_bug/vhosts/vhosts.conf to see how I did it.
Just beware that I only use SSL to secure my little personal web page's webmail,
i.e. I don't expect any browser other than my own with my own root CA imported
in, to be able to authenticate the server correctly. Maybe it's not a good
idea to serve over HTTP *and* HTTP/SSL on the same server using virtual
hosts... HTH,
==Joey
----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] SSL and Virtual hosts
Posted by Milan Andric <ma...@eecs.berkeley.edu>.
On Tue, May 11, 2004 at 08:10:52AM -0400, Darryl Cook wrote:
> I ran into a problem which I need your help with. I am running Mailman
> over Apache 2.x successfully with ssl support. Today I merged all of
> our web pages over to that machine and ran into the following
> problem....in our httpd.conf file we have a couple of virtual hosts
> defined so that two different departments have their own web area. This
> is no problem by itself when ssl support is not included but when you
> include ssl support with it, you get the error :
>
> Tue May 11 08:09:27 2004] [error] VirtualHost _default_:443 -- mixing *
> ports and non-* ports with a NameVirtualHost address is not supported,
> proceeding with undefined results
>
> What happens is that it ignores the virtual hosts and serves from the
> default pages. Anyone know why and how to combine ssl and virtual
> hosts on the same machine.
you need to do IP based vhosting as opposed to name based virtual hosting. if
you search the maillist archive you'll find more info about it. one solution
is to assign more than one ip to the network card, aka ip aliasing.
--
Milan
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org