From owner-freebsd-isp  Thu Sep 21  9:44: 0 2000
Delivered-To: freebsd-isp@freebsd.org
Received: from peony.ezo.net (peony.ezo.net [206.102.130.11])
	by hub.freebsd.org (Postfix) with ESMTP id 7EC8237B424
	for <freebsd-isp@FreeBSD.ORG>; Thu, 21 Sep 2000 09:43:56 -0700 (PDT)
Received: from localhost (jflowers@localhost)
	by peony.ezo.net (8.11.0.Beta3/8.11.0.Beta3) with ESMTP id e8LH0OY56367;
	Thu, 21 Sep 2000 13:00:25 -0400 (EDT)
Date: Thu, 21 Sep 2000 13:00:24 -0400 (EDT)
From: Jim Flowers <jflowers@peony.ezo.net>
To: James Housley <jim@thehousleys.net>
Cc: Neil Blakey-Milner <nbm@mithrandr.moria.org>,
	freebsd-isp@FreeBSD.ORG
Subject: Re: named virtual hosts
In-Reply-To: <39CA3425.BA0E4B4@thehousleys.net>
Message-ID: <Pine.BSF.4.21.0009211242560.56056-100000@peony.ezo.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

OTOH, you can use the same IP# and unique ports (443. 444, 445 etc).  Just
assign an alias IP# to your interface and direct unsecure access to one
IP# with named hosts and secure access to the alias.  For example:

www.wondershop.com A xxx.xxx.xxx.19
my.secure.server.com A xxx.xxx.xxx.20
secure.wondershop.com CNAME my.secure.server.com.

then

<VirtualHost xxx.xxx.xxx.20:445>
DocumentRoot "/home/vhosts/wondershop.com/secure"
ServerName "secure.wondershop.com"

etc.

The named hosts require:

NameVirtualHost xxx.xxx.xxx.19

But otherwise work as documented.

All your really have to do is configure dns to get the packets there, do
named virtual hosts on one IP# (even mass virtual hosts) and separate the
SSL on the other IP# with unique ports.

Jim Flowers <jflowers@ezo.net>
#4 ranked ISP on C|NET #1 in Ohio

On Thu, 21 Sep 2000, James Housley wrote:

> Neil Blakey-Milner wrote:
> > 
> > On Wed 2000-09-20 (18:35), Tony Finch wrote:
> > > Steve Price <sprice@hiwaay.net> wrote:
> > > >
> > > >NameVirtualHost 192.168.21.21
> > > ><VirtualHost 192.168.21.21>
> > > ></VirtualHost>
> > > ><IfDefine SSL>
> > > > <VirtualHost 192.168.21.21:443>
> > > > </VirtualHost>
> > > ></IfDefine>
> > >
> > > You can't do SSL with name-based virtual hosts.
> > 
> > Why not?
> > 
> The SSL specification does not allow it. 
> https://www.thawte.com/support/server/apachessl.html and look at #8
> 
> Jim
> -- 
> Hi! I'm a .signature virus! Copy me in your ~/.signature
> to help me spread!             <- Save this lifeform ;-)



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message