From owner-freebsd-isp  Thu Sep 21  9:15:40 2000
Delivered-To: freebsd-isp@freebsd.org
Received: from mcp.csh.rit.edu (mcp.csh.rit.edu [129.21.60.9])
	by hub.freebsd.org (Postfix) with ESMTP id BFC8337B423
	for <freebsd-isp@freebsd.org>; Thu, 21 Sep 2000 09:15:35 -0700 (PDT)
Received: from fury.csh.rit.edu (fury.csh.rit.edu [129.21.60.5])
	by mcp.csh.rit.edu (Postfix) with ESMTP id 96E362BF
	for <freebsd-isp@freebsd.org>; Thu, 21 Sep 2000 12:15:34 -0400 (EDT)
Received: (from jon@localhost)
	by fury.csh.rit.edu (8.9.3+Sun/8.9.1) id MAA20634
	for freebsd-isp@freebsd.org; Thu, 21 Sep 2000 12:15:21 -0400 (EDT)
Date: Thu, 21 Sep 2000 12:15:21 -0400
From: Jon Parise <jon@csh.rit.edu>
To: freebsd-isp@freebsd.org
Subject: Re: named virtual hosts
Message-ID: <20000921121520.B20273@csh.rit.edu>
Mail-Followup-To: freebsd-isp@freebsd.org
References: <20000912184042.D55208@bsd.planetwe.com> <20000916041934.B769@hand.dotat.at> <20000921111406.A11386@mithrandr.moria.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <20000921111406.A11386@mithrandr.moria.org>; from nbm@mithrandr.moria.org on Thu, Sep 21, 2000 at 11:14:06AM +0200
X-Operating-System: SunOS 5.7 (sun4u)
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

On Thu, Sep 21, 2000 at 11:14:06AM +0200, Neil Blakey-Milner wrote:

> > >NameVirtualHost 192.168.21.21
> > ><VirtualHost 192.168.21.21>
> > ></VirtualHost>
> > ><IfDefine SSL>
> > > <VirtualHost 192.168.21.21:443>
> > > </VirtualHost>
> > ></IfDefine>
> > 
> > You can't do SSL with name-based virtual hosts.
> 
> Why not?

The SSL layer wraps around the HTTP protocol.  The Host: header that
makes NameVirtualHost work is part of the HTTP protocol (HTTP 1.1?),
so the SSL code never gets to the NameVirtualHost stuff in time.

In a nutshell, in order to use SSL-enabled virtual hosts, you'll have
to assign each virtual host its own IP address and use Apache's IP-based
virtual hosting system.

-- 
Jon Parise (jon@csh.rit.edu)  .  Rochester Inst. of Technology
http://www.csh.rit.edu/~jon/  :  Computer Science House Member


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message