Discuss March 2006

discuss@lists.centos.org

274 participants
422 discussions

multiple signed ssl certificatess on single IP address
by Ara Avvali 19 Mar '06

19 Mar '06

Good afternoon everyone, This is my first post here. I was wondering if someone could clear my mind about this. I have a dedicated server with a single ip address assigned to it. I want to host couple of site which are hosted somewhere else and they have signed certificates. Now I want to host them all on this single server. Is it possible to bound more than one cert to a single IP based apache server and host multiple virtual directories? I did a research on line and found couple answers which are all confusing me. One suggested that I need to get additional ip's and assign different sites to it. (Not a very practical solution) Other one says we can use the same cert and ip but have secondary host on different port number than default. Something likes https://www.abc.com <https://www.abc.com/> and https://www.def.com:444 <https://www.def.com:444/> and so on. But this will cause people a warning regarding the certificate error on second path, is that correct? Some one suggested a wild card certificate but how can I do that since dedicated server name is a.dedicated.hostingcompany.com and I need to generate certificates covering *.abc.com and *.def.com Would someone kindly clear my mind on this issue?

6 6

RE: [CentOS] multiple signed ssl certificatess on single IP address
by Ara Avvali 19 Mar '06

19 Mar '06

Hi Thanks for fast response. A: is expensive and I can't do it. They want 10/ ip per month so for a bout 10 site we are talking 100 dollars a month B: is better if I could convince them, but as you stated we might face problem with none standard port numbers C: sound fair and I need to search for it. We have plesk and I just saw this article. Do you think it is the solution for my question? http://www.digicert.com/ssl-certificate-installation-plesk.htm appreciated the help -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Maciej Zenczykowski Sent: Saturday, March 18, 2006 4:45 PM To: CentOS mailing list Subject: Re: [CentOS] multiple signed ssl certificatess on single IP address Due to the SSL specification it is _IMPOSSIBLE_ to have more than one certificate on a given ip:port pair. Why? Because the certificate has to be sent immediately after a connection to the ip:port pair _BEFORE_ the client sends information about _which_ website it intends to contact (thus the server has no way to know which certificate, if many sites are hosted on a given ip:port pair, to supply and must choose ONE). As such virtual nameservers and https are impossible to get working with different certificates. However, there are some solutions: a) get more IP's and host each https site on a different IP b) use different port numbers on the same IP BOTH a and b allow different certificates per site, since they use different host:ip pairs c) use a single wildcard certificate or a certificate for more than one site. Basically a single certificate which is valid for both abc.com and def.com. Searching around on Google should reveal a wiki with more information about how to do this and remain compatible with the major web browsers (I think the link should also be in the CentOS list archives). It should be noted that solution (b) is impractical, many places allow https traffic only on the default https/443 port. Solution (a) is feasible and easy, however requires extra public IPs and will likely increase hosting costs. Solution (c) is the cheapest, however I've yet to try implementing it. [Further note: it is possible to run https over http on port 80 with transparent upgrade, but most web browsers and proxies don't support this and as such this is also not a viable solution...] Cheers, MaZe. On Sat, 18 Mar 2006, Ara Avvali wrote: > Good afternoon everyone, > > This is my first post here. I was wondering if someone could clear my > mind about this. > > I have a dedicated server with a single ip address assigned to it. I > want to host couple of site which are hosted somewhere else and they > have signed certificates. Now I want to host them all on this single > server. > > > > Is it possible to bound more than one cert to a single IP based apache > server and host multiple virtual directories? > > I did a research on line and found couple answers which are all > confusing me. > > > > One suggested that I need to get additional ip's and assign different > sites to it. (Not a very practical solution) > > > > Other one says we can use the same cert and ip but have secondary host > on different port number than default. Something likes > https://www.abc.com <https://www.abc.com/> and https://www.def.com:444 > <https://www.def.com:444/> and so on. But this will cause people a > warning regarding the certificate error on second path, is that correct? > > > > > Some one suggested a wild card certificate but how can I do that since > dedicated server name is a.dedicated.hostingcompany.com and I need to > generate certificates covering *.abc.com and *.def.com > > > > Would someone kindly clear my mind on this issue? > > _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

2 1

Mirror mirror on the wall, who is the best of them all? CentOS
by Collins Richey 19 Mar '06

19 Mar '06

Just to set the record straight. -- Collins Richey If you fill your heart with regrets of yesterday and the worries of tomorrow, you have no today to be thankful for.

2 1

two tier Internet and open source
by ryan 18 Mar '06

18 Mar '06

Does anyone have any links on what Verizon/SBC's plan for a two-tier Internet will do to Open Source projects that need to move around large files?

2 2

Updating kernel and RAID
by Fajar Priyanto 18 Mar '06

18 Mar '06

Hi all, Is there any pitfall when updating kernel with a software RAID-1 configuration? Thanks. -- Fajar Priyanto | Reg'd Linux User #327841 | Linux tutorial http://linux2.arinet.org 23:01:19 up 8:24, 2.6.15-1.1830_FC4 GNU/Linux Let's use OpenOffice. http://www.openoffice.org

3 3

Re: Re: [CentOS] Mirror Mirror on the wall, who is the slowest of them all? CentOS
by edukes＠alltel.net 18 Mar '06

18 Mar '06

Tell us again WHY you use CentOS. Why not one that gives you updates at your speed??? > > From: Jim Smith <jim_smith2006(a)yahoo.com> > Date: 2006/03/18 Sat AM 11:26:44 EST > To: CentOS mailing list <centos(a)centos.org> > Subject: Re: [CentOS] Mirror Mirror on the wall, > who is the slowest of them all? CentOS > > --- Johnny Hughes <mailing-lists(a)hughesjr.com> wrote: > > > Name one distro ... other than Lineox ... that has respun CDs for > > EL4 > > update3 out right now. > > > > Piebox released theirs on March 10th. See distrowatch weekly or > http://www.piebox.com/news.php#2006-03-10 > > Some of you are taking this way too personally, take the truth one > pinch at a time. > > > > __________________________________________________ > Do You Yahoo!? > Tired of spam? Yahoo! Mail has the best spam protection around > http://mail.yahoo.com > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos >

1 0

Mplayer
by Sam Drinkard 18 Mar '06

18 Mar '06

Looking for the mplayer, and a yum list mplayer returned this: Available Packages mplayer.i386 1.0-0.20.pre7.2.el4.rf dag Will this package work on the x86_64 architecture? Does it need anything else to be functional? The mplayer web page does list availability for the I386 system, and there are a whole bunch of I guess, add-ons, like skins, codecs, & fonts. I would like something simple to install for the few times I would use the player if my windows machine is down. Regards, Sam

1 0

Postfix + MySQL + IMAP + Squirrelmail + Virtual Domains + Web Management.
by Brent DiNicola 18 Mar '06

18 Mar '06

Greetings, I have long read and followed this list. I have also spent a considerable time with our good friend Google. I am a long time Sendmail user, about 15 yrs now. I have recently been looking into the newer services and the Postfix setup seems to be a very nice one. I am migrating a mail server from 3.x to 4.x and was intending on trying out Postfix on the 4.x server. I have found /alot/ of HowTo's covering various Postfix implementations. I have tried a few of these to various stages, some completely, some partially. I have not however found one that would take a CentOS 4.x system from Sendmail to Postfix completely. I can get Postfix to work. I can get MySQL to work with in some cases Cyrus and Courier for the IMAP services. I can get some Virtual Domain working but not completely. I can't however get it to actually work all together. I have a bit of ignorance with Cyrus/Courier IMAP as I have previously just had a simple Squirrelmail to Sendmail with stock IMAP services and all my users previously were real UNIX accounts, which I am trying to not require now. Does anyone have a real HowTO that goes from a stock 4.x load to Postfix etc.? I have follow Hughes HOWTO but it also skips the Courier/Cyrus part. I have gotten it all working except it doesn't make any MailDirs so then Squirrelmail freaks with Invalid Mailbox errors. It's quite frustrating to me because most of the HowTO's skip steps, like getting users into the SQL (which I have figured out a few times). It would be nice to have a real HOWTO that does /all/ the steps from stock to this configuration. If I have missed previously posted good HowTo's please point me to them and I apologize for the oversight. I have done many google/mailing list searches and they all seem to be 'almost' a how to. Thanks for the Help. Brent

5 5

Re: swap_free messages in log
by Jerry Geis 17 Mar '06

17 Mar '06

>Jerry Geis spake the following on 3/17/2006 4:46 AM: >>/ This morning I noticed the following message in my log file. />>>/ swap_free: bad swap file entry 10000000 />>/ swap_free: bad swap file entry 20000000 />>/ swap_free: bad swap file entry 10000000 />>/ swap_free: bad swap file entry 20000000 />>/ a few more times... /.>/ />>/ After rebooting I no longer see it. />>/ I have an intel 865 motherboard, 2.4 celeron, />>/ 2 - 300GIG seagate sata drives as software RAID-1. />>/ />>/ I have had to reboot the machine sometimes />>/ but there were never any messages on the console />>/ or the log files. />>/ />>/ Before my 300GIG drives I used to run 2-120GIG drives />>/ and had the same problem. An occasional reboot fixed it. />>/ I got new drives and I still have some issue? />>/ />>/ Any thoughts on something to try? Thanks. />>/ />>/ Jerry />Is swap mounted on a raid1 device or something else? I had formatted sda2 and sdb2 as swap partitions not part of RAID. This is for centos 4.2 with all latest updates. # This file is edited by fstab-sync - see 'man fstab-sync' for details /dev/md0 / ext3 defaults 1 1 none /dev/pts devpts gid=5,mode=620 0 0 none /dev/shm tmpfs defaults 0 0 /dev/md1 /home ext3 defaults 1 2 none /proc proc defaults 0 0 none /sys sysfs defaults 0 0 LABEL=SWAP-sdb2 swap swap defaults 0 0 LABEL=SWAP-sda2 swap swap defaults 0 0

2 1

Re: [CentOS] Whereis system-config-kickstart
by Robert Moskowitz 17 Mar '06

17 Mar '06

At 10:13 PM 3/16/2006, Jim Perrin wrote: > > To use Kickstart Configurator, you must be running the X Window System. To > > start Kickstart Configurator, select Applications (the main menu on the > > panel) => System Tools => Kickstart, or type the command > > /usr/sbin/system-config-kickstart. > > > > Can't find it. > >It's not installed. > > > So where is it hiding? > >yum install system-config-kickstart got it thanks. Now how do I figure out the packages and applications? Something about the base/comps.xml ? And once I find that on the CD, how to read/interpret it?

4 6

← Newer
1
...
19
20
21
22
23
24
25
...
43
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss March 2006