Re: Does anyone know if this is valid in Apache

["Haas, Matt (CL Tech Sv)" <matt.haas@xxxxxxxxxxx>]

Mike,

I didn't notice this before but you'll need different IP addresses or ports for the configuration you posted to work. SSL does not allow name based virtual hosting because the host header is encrypted and to decrypt it, you need to know which certificate to use but you can't know that until you know the host header which, as I mentioned, it encrypted.

Matt

-----Original Message-----
From: Haas, Matt (CL Tech Sv)
Sent: Wednesday, December 19, 2007 12:57 PM
To: 'Web Enabling the AS400 / iSeries'
Subject: RE: [WEB400] Does anyone know if this is valid in Apache

This works perfectly. I have a site set up to do exactly this.

Matt

-----Original Message-----
From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx] On Behalf Of Mike Cunningham
Sent: Wednesday, December 19, 2007 12:49 PM
To: 'Web Enabling the AS400 / iSeries'
Subject: [WEB400] Does anyone know if this is valid in Apache

<VirtualHost 9.5.61.228:443>
       ServerName www.SIS.org<http://www.SIS.org>
       DocumentRoot /www/jkltest/earnings/
       SSLEnable
       SSLAppName QIBM_HTTP_SERVER_SIS
       SSLClientAuth None
       <Directory /www/jkltest/earnings>
               Order Allow,Deny
               Allow From all
               Require valid-user
               PasswdFile %%SYSTEM%%
               UserID %%SERVER%%
               AuthType Basic
               AuthName "Projected Earnings"
       </Directory>
       Alias /earnings/ /www/jkltest/earnings/
</VirtualHost>


<VirtualHost 9.5.61.228:443>
       ServerName www.EIS.org<http://www.EIS.org>
       DocumentRoot /www/jkltest/earnings/
       SSLEnable
       SSLAppName QIBM_HTTP_SERVER_EIS
       SSLClientAuth None
       <Directory /www/jkltest/earnings>
               Order Allow,Deny
               Allow From all
               Require valid-user
               PasswdFile %%SYSTEM%%
               UserID %%SERVER%%
               AuthType Basic
               AuthName "Projected Earnings"
       </Directory>
       Alias /earnings/ /www/jkltest/earnings/
</VirtualHost>


And have two different certificates. One for www.SIS.org<http://www.SIS.org> attached to QIBM_HTTP_SERVER_SIS and one for www.EIS.org<http://www.EIS.org> attached to QIBM_HTTP_SERVER_EIS.

With the key part being both listening on :443.
--
This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/web400.