Tagged Questions

-1
votes
1answer
22 views

Is it possible to log the IP address for SNI in apache logs on errors?

Is it possible to log the IP address associated with SNI in the apache logs? I realize that this is SSL when it connects, so if its not now, Im wondering if apache would add it so at least we could ...
0
votes
0answers
25 views

No SSLRequireSSL when ssl negotiation already happen

I am running an non-sni supported Apache server (2.2.3). The first virtualhost will always handle the ssl negotiation. Once the request is decrypted Apache can fine do the vhost handling. if I want to ...
0
votes
1answer
58 views

From suPHP to mod_php

I have a Centos6 64-bit server, Apache/2.2.15, PHP5.3.3, one IP and four name-based virtual hosts and SSL/SNI to provide https in addition to http. All those hosts are assigned to different linux ...
1
vote
1answer
56 views

Understand ssl setup

Goals: If the user support SNI and hit myurl1.server.com (https) or myurl2.server.com (https) it will match the right vhost. (the last 2 vhosts) If the user does not support SNI and hit ...
2
votes
1answer
69 views

Separate SSL certificate selection from virtual host configuration in apache

Currently, my apache configuration includes one SSL certificate (with all domains listed as Alternative Subject Names). I furthermore have one virtual host configuration per domain that serves both ...
1
vote
1answer
380 views

“Server should be SSL-aware but has no certificate configured [Hint: SSLCertificateFile]” error

After recently upgrading Apache2 to version 2.2.31 I found a strange behaviour in SSL VirtualHost setup. A few of the website I'm hosting were showing the certificate for the default host even if the ...
0
votes
1answer
291 views

Plesk 11: install Apache with SNI support

If I try to update from standard Apache to Apache with SNI support with the Plesk installation program (example.com:8447), I get an error, that I have to remove apr-util-ldap-1.4.1-1.el5.x86_64 It's ...
0
votes
2answers
630 views

Can't turn off SNI on apache

When I go to: http://web-sniffer.net/ and check the headers of my site (https://www.example.org), I get a status code 200 But when I use the radio button HTTP/1.0 (without Host header), I get a ...
0
votes
2answers
198 views

Apache with suexec, fcgid shows content from wrong vHost over ssl

I changed my Apache setup to worker mode, suexec und fcgid as described in this tutorial: https://wiki.hetzner.de/index.php/Apache_PHP5_fcgi_und_SuExec. Allmost everything works fine. I wrote a ...
7
votes
5answers
1k views

Redirect to SSL only if browser supports SNI

I have Apache 2.2 with mod_ssl and a bunch of sites in HTTPS on the same IP/port with VirtualHosting, so client must support SNI to connect to those virtual hosts. I would like to configure my server ...
3
votes
1answer
380 views

For enabling SSL for a single domain on a server with muliple vhosts, will this configuration work?

I just purchased an SSL certificate to secure/enable only ONE domain on a server with multiple vhosts. I plan on configuring as shown below (non SNI). In addition, I still want to access phpMyAdmin, ...
0
votes
1answer
147 views

Setup SSL for only a Single website on Linux server with Multiple vhosts

Without configuring apache to support SNI, can I purchase a SSL cert and use on a Centos Linux server that has 2 name-based Vhost? I'm only interested in securing ONE of the two domains. Could this be ...
1
vote
1answer
1k views

Jenkins reports reverse proxy setup incorrect with Apache using virtual hosts with SNI

I'm setting up a Jenkins server, to run under Tomcat behind Apache. I'm using virtual hosts with SSL using SNI so I can access it at https://jenkins.example.com, and serve something else on, say, ...
1
vote
1answer
854 views

Set default TLS SNI vhost for Apache 2.2 on CentOS 6

I have a CentOS 6 server with Apache (httpd-2.2.15-15.el6.centos.x86_64). Now I configured TLS SNI using OpenSSL and that was pretty easy. Now I have two TLS vhosts on the same ip and I want to ...
3
votes
3answers
1k views

Problems with multiple SSL on same IP, but only in select clients

I know there are tons of posts about multiple SSL on same IP, but I promise I'm not beating a dead horse. My question is very clear. First, a little background... Our organization has several ...
2
votes
1answer
207 views

Resolve a many-SSL-to-one IP for clients browsers that doesn't support SNI

Whoa, acronyms :) So according to this question you can have multiple SSL subdomains on one IP address as long as your server supports TLS (which Apache 2.2x does). Another answer to that question ...
1
vote
1answer
659 views

Is it possible to get a wildcard cert and use SNI?

I'd like to make setting up new subdomains easy (at least for the development side) and getting one wildcard cert, setting up a wildcard dns (which is done and works great) and setting up SNI (Server ...
0
votes
1answer
149 views

Apache2 crashes with Firefox on SSL requests and works fine with IE

We have a server with multiple SSL-enabled vhosts, certificate is the same for all of them. SNI does not seem to be enabled. When I try to open any url (even the one which is supposed to throw 404 ...
0
votes
1answer
399 views

is a wildcard SSL the only option in this multiple VHOST/1IP setup?

I have a web app set up that needs the following SSL encryption: secure.myapp.com -> SSL www.myapp.com/login -> SSL www.myapp.com/signup -> SSL If I'm correct, I could run one SSL ...
2
votes
2answers
509 views

Windows Vista Wrong Certificate With SNI

I'm setting up SNI on an apache server and I thought things were going well. I have two URLs from different domains that point at the same site. I have one virtual host setup for each with the ...
1
vote
1answer
407 views

Setup Apache 2.2 With SNI Under Ubuntu 8.04

I am trying to setup SNI on a server running Ubuntu 8.04 with openssl 0.9.8g and apache 2.2.8. I know that I need either mod_gnutils or openssl 0.9.8j (I think) to support SNI. Is it possible to do ...
-1
votes
2answers
2k views

Setting Up SNI with Apache 2.2.12 and openssl

I am running Apache 2.2.12 and openssl 0.9.8g all of my Apache are in /etc/apache2/sites-available/default and i have 2 domains with certificates www.site.com & d7.site.com my <VirtualHost ...
56
votes
5answers
34k views

Multiple SSL domains on the same IP address and same port?

This is a Canonical Question about Hosting multiple SSL websites on the same IP. I was under the impression that each SSL Certificate required it's own unique IP Address/Port combination. But the ...
2
votes
1answer
1k views

How to configure SNI so as to have benifits of SNI

How can i configure SNI to get the benifts ...........I am using openssl 1.0.0 beta5 and apache 2.2.14. Can anyone tell me the complete procedure . I am configuring virtual host in ssl.conf files and ...