[CentOS] SSL and virtual hosts?

Sun Sep 20 14:27:24 UTC 2009
Benjamin Franz <jfranz at freerun.com>



Christoph Maser wrote:
> Am Sonntag, den 20.09.2009, 11:36 +0200 schrieb Niki Kovacs:
>   
>> Hi,
>>
>> I successfully managed to use SSL on a local webserver for testing
>> purposes, following the section "Using SSL" in the Chapter "Using
>> Apache" of the "Definitive Guide to CentOS". Now I wonder: how can I use
>> SSL with virtual hosts?
>>     
>
> You can't. At least not with name based virtual hosts and classic SSL.
> See http://httpd.apache.org/docs/2.0/ssl/ssl_faq.html#vhosts.
>   
That is outdated information. There are at least two ways to use virtual 
hosts with SSL on Apache.

1) Use a wildcard cert. You can use *.somedomain certs to serve multiple 
SSL domains on a single IP so long as they fit in the *.somedomain pattern.

2) Use the SNI extension. 
http://hvera.wordpress.com/2009/09/02/apache-ssl-with-virtual-hosts-using-sni/

Note, however, that SNI does not work with older version of MSIE.

-- 
Benjamin Franz