From owner-freebsd-questions@FreeBSD.ORG Fri Jan 2 12:03:42 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id BE33616A4CE for ; Fri, 2 Jan 2004 12:03:42 -0800 (PST) Received: from agoron.net (mail.agoron.net [206.181.233.113]) by mx1.FreeBSD.org (Postfix) with ESMTP id DE0A943D54 for ; Fri, 2 Jan 2004 12:03:40 -0800 (PST) (envelope-from marius@agoron.net) Received: (qmail 36901 invoked by uid 85); 2 Jan 2004 20:03:44 -0000 Received: from marius@agoron.net by mail.agoron.net by uid 89 with qmail-scanner-1.16 (clamscan: 0.54. spamassassin: 2.55. Clear:. Processed in 0.305506 secs); 02 Jan 2004 20:03:44 -0000 Received: from unknown (HELO MK) (206.181.233.90) by agoron.net with SMTP; 2 Jan 2004 20:03:43 -0000 From: "Marius Kirschner" To: "'Matthew Seaman'" Date: Fri, 2 Jan 2004 15:03:39 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook, Build 11.0.5510 In-Reply-To: <20040102184635.GA32364@happy-idiot-talk.infracaninophile.co.uk> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 Thread-Index: AcPRYMui/uWLpIljR8mhAB/GuReWNwACNC3Q X-Qmail-Scanner-Message-ID: <107307382352636895@mail.agoron.net> Message-Id: <20040102200340.DE0A943D54@mx1.FreeBSD.org> cc: 'FreeBSD Questions' Subject: RE: Changing Apache X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Jan 2004 20:03:42 -0000 > > Also, if I get a certificate for www.whatever.com will I be able to > > refer to it via http:// and https://? > > Well, ish. When you compile the port, you will be given the > option to generate several flavours of test key. These will > permit the HTTPS server to work, but visitors will get > pop-ups all the time warning that your site isn't trusted. > You will have to generate a .csr (Certificate Signing > Request) and send it off to one of the CAs to get it signed > by a recognised key, and then everything will work smoothly. Well, I realize I need to get an "official" certificate to avoid those annoying pop-ups, but what I'm not sure about is whether I can go with a cert for www.whatever.com and use that for my https pages, or if I need to get a cert for something like secure.whatever.com and use that for https while the www.whatever.com will remain strictly http? I guess what I'm asking is, in the httpd.conf can I have 1 entry for the same virtualhost - one for port 80 and the other for 443? ---Marius