Re: Multiple SSL certs and domains on same iSeries

[Scott Klement <web400@xxxxxxxxxxxxxxxx>]

Aaron,

Yes, you have the right idea.  IP-based virtual hosts DO support a 
separate SSL certificate for each virtual host.  (They're also more 
compatible with old browsers than the name-based ones.)

I believe that your config should work, as well, but haven't tested it. 
 You have the right idea, but if you didn't get the syntax of one of 
the fields right, I'm not sure that I would've noticed it.

Though, I did notice that both virtual hosts have the same DocumentRoot. 
 Was that intentional?




albartell wrote:
> Thanks Matt!
>
> So then the following would work, correct?
>
> <VirtualHost 192.168.0.20:443>
>    ServerName  WWW.company1.COM
>    DocumentRoot /www/company1/v1.0
>    DirectoryIndex index.html
>    SSLEngine On
>    SSLAppName QIBM_HTTP_SERVER_MYAPP1
> </VirtualHost>
>  
> <VirtualHost 192.168.0.21:443>
>    ServerName  WWW.company2.COM
>    DocumentRoot /www/company1/v1.0
>    DirectoryIndex uindex.html
>    SSLEngine On
>    SSLAppName QIBM_HTTP_SERVER_MYAPP2
> </VirtualHost>
>
> Aaron Bartell
>
> -----Original Message-----
> From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx] On
> Behalf Of matt.haas@xxxxxxxxxxx
> Sent: Friday, October 05, 2007 2:36 PM
> To: web400@xxxxxxxxxxxx
> Subject: Re: [WEB400] Multiple SSL certs and domains on same iSeries
>
> Aaron,
>
> What you have will not work. You can only have one SSL certificate per
> IP/port combination. The reason is that the HTTP headers are encrypted so
> you can't determine the server name until after it's been decrypted and that
> can't happen until you know the host name.
>
> Once you have separate IP addresses, you can use IP based virtual hosting to
> run everything in the same HTTP server instance.
>
> Matt
>
> -----Original Message-----
> From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx]
> On Behalf Of albartell
> Sent: Friday, October 05, 2007 3:03 PM
> To: 'Web Enabling the AS400 / iSeries'
> Subject: [WEB400] Multiple SSL certs and domains on same iSeries
>
> Hi all,
>  
> Working with a client that has need to run two SSL web sites (separate
> domains) on the same iSeries.  I have done two SSL domains before, but seem
> to remember it requiring separate ports for each SSL cert.  Is there a way
> to use virtual hosts so requests coming in on https://www.company1.com and
> https://www.company2.com can both use port 443?
>  
> I would rather not switch the DNS over to the backup iSeries to test this,
> so that is why I am asking you guys :-)   Would the below work with both
> virtual hosts listening on port 443?
>  
> <VirtualHost *:443>
>    ServerName  <http://www.company1.COM> WWW.company1.COM
>    DocumentRoot /www/company1/v1.0
>    DirectoryIndex index.html
>    SSLEngine On
>    SSLAppName QIBM_HTTP_SERVER_MYAPP1
> </VirtualHost>
>  
> <VirtualHost *:443>
>    ServerName  <http://www.company2.COM> WWW.company2.COM
>    DocumentRoot /www/company1/v1.0
>    DirectoryIndex uindex.html
>    SSLEngine On
>    SSLAppName QIBM_HTTP_SERVER_MYAPP2
> </VirtualHost>
>  
> TIA,
> Aaron Bartell
> http://mowyourlawn.com
> --
> This is the Web Enabling the AS400 / iSeries (WEB400) mailing list To post a
> message email: WEB400@xxxxxxxxxxxx To subscribe, unsubscribe, or change list
> options,
> visit: http://lists.midrange.com/mailman/listinfo/web400
> or email: WEB400-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives at
> http://archive.midrange.com/web400.