You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Jason Lixfeld <ja...@lixfeld.ca> on 2004/05/19 20:07:53 UTC
[users@httpd] Parsing ssl virtual hosts & webdav
I've got my ssl.conf configured with 2 VirtualHost entries, one with
dav. I can open a browser to the dav vhost directly, login and
everything is fine. When I try access the dav vhost via an stunnel
config I have setup, it tries to auth me via the NMS Access realm via
the first VirtualHost entry below.
The stunnel config is very simple and I had it working pointing to a
different machine so I'm thinking my apache config is messed up
somehow. Here's the stunnel config and the ssl.conf from my webserver.
Any help is appreciated.
[foo.bar.com]
accept = 80
connect = foo.bar.com:443
<VirtualHost 10.0.0.1:443>
SSLEngine on
SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
SSLCertificateFile /usr/local/etc/apache2/cacert.pem
SSLCertificateKeyFile /usr/local/etc/apache2/privkey.pem
<Files ~ "\.(cgi|shtml|phtml|php3?)$">
SSLOptions +StdEnvVars
</Files>
<Directory "/usr/local/www/cgi-bin">
SSLOptions +StdEnvVars
</Directory>
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
downgrade-1.0 force-response-1.0
ServerName foo.bar.com:443
DocumentRoot /usr/local/www/data/nms
ErrorLog /var/log/foo.bar.com-ssl_error.log
TransferLog /var/log/foo.bar.com-ssl_access.log
CustomLog /var/log/foo.bar.com-ssl_request.log "%t %h
%{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
<Location />
AllowOverride AuthConfig
AuthName "NMS Access"
AuthType Basic
AuthUserFile "/usr/local/www/data/nms/htpasswd.users"
require valid-user
Order allow,deny
Allow from all
</Location>
</VirtualHost>
<VirtualHost 10.0.0.1:443>
# DEFAULT VHOST CONFIG START
SSLEngine on
SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
SSLCertificateFile /usr/local/etc/apache2/cacert.pem
SSLCertificateKeyFile /usr/local/etc/apache2/privkey.pem
<Files ~ "\.(cgi|shtml|phtml|php3?)$">
SSLOptions +StdEnvVars
</Files>
<Directory "/usr/local/www/cgi-bin">
SSLOptions +StdEnvVars
</Directory>
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
downgrade-1.0 force-response-1.0
# CUSTOM VHOST CONFIG START
ServerName dav.bar.com:443
DocumentRoot /usr/local/www/data/dav/test
ErrorLog /var/log/dav.bar.com-ssl_error.log
TransferLog /var/log/dav.bar.com-ssl_access.log
CustomLog /var/log/dav.bar.com-ssl_request.log "%t %h
%{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
<Location />
Dav On
AuthType Basic
AuthName "WebDAV"
AuthUserFile /usr/local/www/data/dav/passwd
Require valid-user
</Location>
DavLockDB /usr/local/www/data/dav/lock.db
DavDepthInfinity on
</VirtualHost>
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Parsing ssl virtual hosts & webdav
Posted by Joshua Slive <jo...@slive.ca>.
On Wed, 19 May 2004, Jason Lixfeld wrote:
> I've got my ssl.conf configured with 2 VirtualHost entries, one with
> dav. I can open a browser to the dav vhost directly, login and
> everything is fine. When I try access the dav vhost via an stunnel
> config I have setup, it tries to auth me via the NMS Access realm via
> the first VirtualHost entry below.
It looks like you are trying to use name-based virtual hosts with SSL.
This is not possible. Check the mod_ssl FAQ.
Joshua.
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org