mass ip virtual host & mod_ssl?

mass ip virtual host & mod_ssl?

am 19.02.2003 15:40:06 von Ray a PowerWeb Tech

is it possible using either mod_rewrite, mod_vhosts_alias or some trick i=
n=20
mod_ssl to have multiple virtual hosts by ip address and there keys

was thinking something like=20
# get the server name from the Host: header
UseCanonicalName Off

# this log format can be split per-virtual-host based on the first field
LogFormat "%V %h %l %u %t \"%r\" %s %b" vcommon
CustomLog logs/access_log vcommon

# include the server name in the filenames used to satisfy requests
VirtualDocumentRoot /www/hosts/%0/docs
VirtualScriptAlias /www/hosts/%0/cgi-bin

as per=20
http://httpd.apache.org/docs/vhosts/mass.html#ipbased

but some of the domains have SSL, and it doesn't seem like this will cove=
r it=20
as is. how do i setup a folder for keys that will be used?
ie /www/certs/%0.key
or does it automagicly pick the correct key for the ip/domain?

i'm hoping to get it so that by droping files into the correct places, ou=
r=20
customer will be able to add/remove domains without having to have the=20
ability to restart apache (as its on windows, he would need nearly total=20
control of the machine to do this)

--=20
Eternity is a terrible thought. I mean, where's it going to end?
-- Tom Stoppard

____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: mass ip virtual host & mod_ssl?

am 19.02.2003 16:37:23 von Cliff Woolley

On Wed, 19 Feb 2003, Ray a PowerWeb Tech wrote:

> but some of the domains have SSL, and it doesn't seem like this will
> cover it as is. how do i setup a folder for keys that will be used? ie
> /www/certs/%0.key or does it automagicly pick the correct key for the
> ip/domain?
>
> i'm hoping to get it so that by droping files into the correct places,
> our customer will be able to add/remove domains without having to have
> the ability to restart apache (as its on windows, he would need nearly
> total control of the machine to do this)

Nope, sorry, you can't do that. You have to have real virtual hosts set
up for each SSL vhost; mod_vhost_alias won't cut it. That's not to
mention the fact that changing or adding SSL keys/certs requires
restarting Apache anyway to reinitialize OpenSSL.

--Cliff

____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org