can we run two SSL domains on one IP

--001636e0b89380ab88047d7f54cc
Content-Type: text/plain; charset=ISO-8859-1

Hi,

can anyone tell me can i run my two different SSL domains ex: abc.com and
xyz.com on one IP address or i need second IP address to the server.

Also please brief on this as if i run 5 sites on one server should i need 5
IP addresses. Is their any appropriate solution to this.

Regards
Nasir

--001636e0b89380ab88047d7f54cc
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Hi,

can anyone tell me can i run my two different SSL domains ex: href=3D"http://abc.com">abc.com and xyz.com=
on one IP address or i need second IP address to the server.

A=
lso please brief on this as if i run 5 sites on one server should i need 5 =
IP addresses. Is their any appropriate solution to this.


Regards
Nasir


--001636e0b89380ab88047d7f54cc--

Re: can we run two SSL domains on one IP

On 01/19/2010 12:52 PM, Nasir Zia wrote:
> Hi,
>
> can anyone tell me can i run my two different SSL domains ex: abc.com
> and xyz.com on one IP address or i
> need second IP address to the server.
>
> Also please brief on this as if i run 5 sites on one server should i
> need 5 IP addresses. Is their any appropriate solution to this.
>
> Regards
> Nasir

Use NameVirtualHost :443

Then :443> ServerName abc.com ...
:443> ServerName xyz.com ...

This should do the job for u

Also you don't need 5 IPs to run 5 sites. Use the same technique as I
said above. NameVirtualHost :80

--
Nilesh Govindarajan
Site & Server Adminstrator
www.itech7.com

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: can we run two SSL domains on one IP

--0050450169f3f349d1047d7fe252
Content-Type: text/plain; charset=ISO-8859-1

As far as i know apache doesnt support name virtual hosting up to 2.2.13 or
2.2.14 not exactly sure. And after that supports it but only with SII.

On Jan 19, 2010 6:41 PM, "Nilesh Govindarajan" wrote:

On 01/19/2010 12:52 PM, Nasir Zia wrote:

> > > Hi, > > can anyone tell me can i run my two different SSL domains ex:
> abc.com
> and xyz.com on one IP address or i
>
> > need second IP address to the server. > > Also please brief on this as if
> i run 5 sites on one se...
>

Use NameVirtualHost :443

Then :443> ServerName abc.com ...
:443> ServerName xyz.com ...

This should do the job for u

Also you don't need 5 IPs to run 5 sites. Use the same technique as I said
above. NameVirtualHost :80

--
Nilesh Govindarajan
Site & Server Adminstrator
www.itech7.com

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

--0050450169f3f349d1047d7fe252
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

As far as i know apache doesnt support name virtual hosting up to 2.2.13=
or 2.2.14 not exactly sure. And after that supports it but only with SII.<=
br>

On Jan 19, 2010 6:41 PM, "Nilesh Govindar=
ajan" <>=
wrote:

On 01/19/2010 12:52 PM, Nasir Zia=
wrote:

der-left:1px #ccc solid;padding-left:1ex">

>
> Hi,
>
> can anyone tell me can i run my two different SSL domains ex: =3D"http://abc.com">abc.com

<> and=
< tp://xyz.com" target=3D"_blank">http://xyz.com> on one IP address or=
i

> need second IP address to the server.
>
> Also please brief on this as if i run 5 sites on one se...

<=
/blockquote>


Use NameVirtualHost <ip>:443



Then <VirtualHost <ip>:443> ServerName m" target=3D"_blank">abc.com ... </VirtualHost>

<VirtualHost <ip>:443> ServerName rget=3D"_blank">xyz.com ... </VirtualHost>



This should do the job for u



Also you don't need 5 IPs to run 5 sites. Use the same technique as I s=
aid above. NameVirtualHost <ip>:80



--

Nilesh Govindarajan

Site & Server Adminstrator





------------------------------------------------------------ ---------

The official User-To-User support forum of the Apache HTTP Server Project.<=
br>
See <URL: lank">http://httpd.apache.org/userslist.html> for more info.

To unsubscribe, e-mail: g" target=3D"_blank">users-unsubscribe@httpd.apache.org

=A0" =A0 from the digest: httpd.apache.org" target=3D"_blank">users-digest-unsubscribe@httpd.apache.o=
rg

For additional commands, e-mail: org" target=3D"_blank">users-help@httpd.apache.org

--0050450169f3f349d1047d7fe252--

Re: can we run two SSL domains on one IP

--0016e647eb4a6211f3047d7fea1e
Content-Type: text/plain; charset=ISO-8859-1

I mean SSL name virtual hosts...

On Jan 19, 2010 7:02 PM, "Igor Cicimov" wrote:

As far as i know apache doesnt support name virtual hosting up to 2.2.13 or
2.2.14 not exactly sure. And after that supports it but only with SII.

> > On Jan 19, 2010 6:41 PM, "Nilesh Govindarajan" wrote:
> > On 01/19/2010 12:52...

> >> >> > > Hi, > > can anyone tell me can i run my two different SSL domains
> ex: abc.com >> >> >
> > need second IP address to the server. > > Also please brief on this as if
> i run 5 sites on one se...
>
> > > Use NameVirtualHost :443 > > Then :443>
ServerName abc.com ...
--0016e647eb4a6211f3047d7fea1e
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

I mean SSL name virtual hosts...

On Jan 19, 2010 7:02 PM, "Igor Cicimov" < icicimov@gmail.com">icicimov@gmail.com> wrote:

As far as i=
know apache doesnt support name virtual hosting up to 2.2.13 or 2.2.14 not=
exactly sure. And after that supports it but only with SII.

>
> On Jan 19, 2010 6:41 PM, "Nilesh Govindarajan" < =3D"mailto:lists@itech7.com">lists@itech7.com> wrote:
>
> On 01/19/2010 12:52...

le=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">

nt color=3D"#500050">
>>
>> > > Hi, > > can anyone tell me can i run my two differ=
ent SSL domains ex:
>>
>> <http...

> need second IP address to the server.
>
> Also please brief on this as if i run 5 sites on one se...

<=
/blockquote>

>
>
> Use NameVirtualHost <ip>:443
>
> Then <VirtualHost <ip>:443> ServerName bc.com">abc.com ... </Virtual...

--0016e647eb4a6211f3047d7fea1e--

Re: can we run two SSL domains on one IP

> 2010/01/19 Nasir Zia
> can anyone tell me can i run my two different SSL domains ex:
> abc.com and xyz.com on one IP address or i need second IP
> address to the server.

Hi Nasir,

what you're looking for is an Apache >= 2.2.12 and an
SNI-enabled mod_ssl.

This also imposes restrictions on used client software.

This should get you started with some general information:
http://en.wikipedia.org/wiki/Server_Name_Indication

And this with all Apache specific details:
http://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI

Regards,
Edgar


------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: can we run two SSL domains on one IP

> 2010/01/19 Edgar Frank
> > 2010/01/19 Nasir Zia
> > can anyone tell me can i run my two different SSL domains ex:
> > abc.com and xyz.com on one IP address or i need second IP
> > address to the server.
>
> what you're looking for is an Apache >= 2.2.12 and an
> SNI-enabled mod_ssl.

Oh, I meant SNI-enabled OpenSSL installation and a mod_ssl/Apache
compiled against this installation.

As an alternative to SNI (if you have clients with
WinXP/Internet Explorer...), you could also use a wildcard
certificate with all its associated security risks or a
certificate with the subjectAltName extension.
Your cert-provider should be able to give you all the necessary
information.

Regards,
Edgar


------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: can we run two SSL domains on one IP

On 01/19/2010 01:32 PM, Igor Cicimov wrote:
> As far as i know apache doesnt support name virtual hosting up to 2.2.13
> or 2.2.14 not exactly sure. And after that supports it but only with SII.
>
>> On Jan 19, 2010 6:41 PM, "Nilesh Govindarajan" >> > wrote:
>>
>> On 01/19/2010 12:52 PM, Nasir Zia wrote:
>>
>> > > Hi, > > can anyone tell me can i run my two different SSL
>> domains ex: abc.com
>>
>> and xyz.com on
>> one IP address or i
>>
>> > need second IP address to the server. > > Also please brief on
>> this as if i run 5 sites on one se...
>>
>>
>> Use NameVirtualHost :443
>>
>> Then :443> ServerName abc.com ...
>>
>> :443> ServerName xyz.com ...
>>
>>
>> This should do the job for u
>>
>> Also you don't need 5 IPs to run 5 sites. Use the same technique as I
>> said above. NameVirtualHost :80
>>
>> --
>> Nilesh Govindarajan
>> Site & Server Adminstrator
>> www.itech7.com
>>
>> ------------------------------------------------------------ ---------
>> The official User-To-User support forum of the Apache HTTP Server Project.
>> See for more info.
>> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>>
>> " from the digest: users-digest-unsubscribe@httpd.apache.org
>>
>> For additional commands, e-mail: users-help@httpd.apache.org
>>
>>

Oops. My bad. SSL protocol doesn't give the Host: header. So apache
can't decide which Vhost to serve (from apache docs :D).

PS: If you're new to mailing lists, then please don't top post. Its very
irritating.

--
Nilesh Govindarajan
Site & Server Adminstrator
www.itech7.com

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: can we run two SSL domains on one IP

hello.

2010/1/19 Nilesh Govindarajan :
> .....
>
> Oops. My bad. SSL protocol doesn't give the Host: header. So apache can't
> decide which Vhost to serve (from apache docs :D).
>
>......

i think may be apache could if coded little other way, may be more
correctly. i have written about that in bugs site:
https://issues.apache.org/bugzilla/show_bug.cgi?id=48507
also i have found something related in user list:
unfortunately does not open currently and i cannot check it and select
first message:
http://httpd.markmail.org/message/cqlhaivligtu6ftx?q=apache+ ssl+virtual+host#query:apache%20ssl%20virtual%20host+page:1+ mid:cqlhaivligtu6ftx+state:results
http://httpd.markmail.org/message/wcaftm2flzzzhofo?q=apache+ ssl+virtual+host#query:apache%20ssl%20virtual%20host+page:1+ mid:4tbl3a4tavwokuh5+state:results

and i had found this:
http://www.networkworld.com/columnists/2006/011606internet.h tml - i
have not tried it, i think it may be does not work with scripts that
create links to itself in their output with "http://".

also you can make one vhost and make aliases for both domains and all
subdomains and so if there are 2 forums and one is /forum/ second need
to be with other alias like /support/ .

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: can we run two SSL domains on one IP

--00032555a7ee66b93d047d8b11ba
Content-Type: text/plain; charset=ISO-8859-1

On Tue, Jan 19, 2010 at 6:55 AM, Nilesh Govindarajan wrote:

>
> Oops. My bad. SSL protocol doesn't give the Host: header. So apache can't
> decide which Vhost to serve (from apache docs :D).
>

Though SSL doesn't itself provide a Host: header, the HTTP session on top if
it still does, so if you can get past the SSL layer virtual hosting will
work as usual. As others have suggested, wildcard certs and
"subjectAltName" certs are two ways to make the SSL layer accept multiple
certs. I have successfully used wildcard certs and name-based virtual
hosting together.

-----Scott.

--00032555a7ee66b93d047d8b11ba
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

On Tue, Jan 19, 2010 at 6:55 AM, Nilesh Govindarajan <=
&=
gt; wrote: