Hello,
using apache and mod_ssl, can i configure multiple ssl certificates for
the same host.

e.g. Two DNS entries for the same IP namely www1 and www2 and if I get
two server ssl certificates one for each domain, would that work? If
not what alternatives would you suggest?


/usr/local/apache/bin $ ./httpd -v
Server version: Apache/1.3.12 (Unix)
Server built: Jun 10 2002 15:10:19

Thanks
sd

On 7 Jul 2005 12:15:16 -0700, danths <danths@gmail.com> wrote:
> Hello,
> using apache and mod_ssl, can i configure multiple ssl certificates for
> the same host.
>
> e.g. Two DNS entries for the same IP namely www1 and www2 and if I get
> two server ssl certificates one for each domain, would that work? If
> not what alternatives would you suggest?

No, that would not work with name based virtual hosts.

SSL is established before any HTTP conversation takes place and
since the virtual host name hasn't been transmitted yet (SSL doesn't
provide mechanism for this), the server has no way of knowing which
cert it should use.

Using separate IP's or different ports for all SSL hosts would work.

/Tero

On Thu, 7 Jul 2005, danths wrote:
> using apache and mod_ssl, can i configure multiple ssl certificates for
> the same host.

Yes.

> e.g. Two DNS entries for the same IP namely www1 and www2 and if I get
> two server ssl certificates one for each domain, would that work? If
> not what alternatives would you suggest?

No. The certificates must be on different IP:port combinations. "Named
virtual hosts" sharing an IP:port will not work.