Re: Multiple SSL certs and domains on same iSeries

[<matt.haas@xxxxxxxxxxx>]

Aaron,

What you have will not work. You can only have one SSL certificate per
IP/port combination. The reason is that the HTTP headers are encrypted
so you can't determine the server name until after it's been decrypted
and that can't happen until you know the host name.

Once you have separate IP addresses, you can use IP based virtual
hosting to run everything in the same HTTP server instance.

Matt

-----Original Message-----
From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx]
On Behalf Of albartell
Sent: Friday, October 05, 2007 3:03 PM
To: 'Web Enabling the AS400 / iSeries'
Subject: [WEB400] Multiple SSL certs and domains on same iSeries

Hi all,
 
Working with a client that has need to run two SSL web sites (separate
domains) on the same iSeries.  I have done two SSL domains before, but
seem
to remember it requiring separate ports for each SSL cert.  Is there a
way
to use virtual hosts so requests coming in on https://www.company1.com
and
https://www.company2.com can both use port 443?
 
I would rather not switch the DNS over to the backup iSeries to test
this,
so that is why I am asking you guys :-)   Would the below work with both
virtual hosts listening on port 443?
 
<VirtualHost *:443>
   ServerName  <http://www.company1.COM> WWW.company1.COM
   DocumentRoot /www/company1/v1.0
   DirectoryIndex index.html
   SSLEngine On
   SSLAppName QIBM_HTTP_SERVER_MYAPP1
</VirtualHost>
 
<VirtualHost *:443>
   ServerName  <http://www.company2.COM> WWW.company2.COM
   DocumentRoot /www/company1/v1.0
   DirectoryIndex uindex.html
   SSLEngine On
   SSLAppName QIBM_HTTP_SERVER_MYAPP2
</VirtualHost>
 
TIA,
Aaron Bartell
http://mowyourlawn.com