Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I read through some guides on this and I believe it is possible to have apache respond to a subdomain through ssl. I have responding on 80 and I do not need responding on 443. Rather, the only use I have for ssl is for the subdomain

So my site should be

My CNAME records are as follows

The A record exists but should not matter for the example.

I set up a separate config file in sites-enabled for


    SSLEngine on
    SSLStrictSNIVHostCheck on
    SSLProtocol -ALL +SSLv3 +TLSv1


    DocumentRoot /usr/local/www/ssl/documents/

    SSLCertificateFile /root/
    SSLCertificateKeyFile /root/

    Alias /robots.txt /usr/local/www/ssl/documents/robots.txt
    Alias /favicon.ico /usr/local/www/ssl/documents/favicon.ico

    Alias /js/libs /usr/local/www/ssl/documents/js/libs
    Alias /media/ /usr/local/www/documents/media/
    Alias /img/ /usr/local/www/ssl/documents/img/
    Alias /css/ /usr/local/www/ssl/documents/css/

    <Directory /usr/local/www/ssl/documents/>
    Order allow,deny
    Allow from all

    WSGIDaemonProcess processes=2 threads=7 display-name=%{GROUP}

    WSGIScriptAlias / /usr/local/www/wsgi-scripts/script.wsgi

    <Directory /usr/local/www/wsgi-scripts>
    Order allow,deny
    Allow from all

Now, it is important to mention that responds with what I have running from script.wsgi above instead of on It does not respond to checking causes a 105 error. This is a DNS error but I am convinced the DNS does not have a problem with the CNAME records, they just point to my IP. Am I doing something that Apache can not do?

share|improve this question
I was able to solve the problem by changing the CNAME records to my domain from my ip. – compucuke Dec 12 '12 at 22:27
up vote 1 down vote accepted

You do not use CNAME to point a dns name to an IP addreses, You'll need an A record here. You can only use CNAME to point a canonical name to another canonical name:


A RECORD: --->

Or you can use a DNAME, a DNAME record creates an alias for one or more subdomains of a domain. In contrast, the CNAME record creates an alias only of a single name

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.