bind apache ssl port with different port with same openssl port 443

Question

I have a server (linux base) in which i installed dotcms and it runs on port 80 and openssl is on port 443. both are started in running process. Recently i installed apache on my server. and when i started apache it stuck because default ssl port on apache is 443 and apache is 80, both of them are already running. Just for my task i started only apache without ssl on port 90. but i want to start ssl with apache as well obviously on different port. Is is possible to bind apache ssl with same openssl?

I need my default dotcms in running process i can't stop it in any case, i can only restart my dotcms service if apache start required. but i need dotcms and apache to run both parallel.

see image on that link (because of less reputation i could not upload image) http://developers89.byethost14.com/images/ssl.png

Answer 1

Yes, it is possible to bind Apache to different port and still use SSL.

Replace the Listen directives in your apache config. The config should contain line like

Listen 80
Listen 443

Apache will listen on the ports defined with these configuration options. Replace them, and Apache will listen on a different port.

However, you still need to tell Apache what to serve on the ports above. Suppose you want Apache to start listening on port 8080 (plain), and 4433 (ssl). Then you need to replace the Listen directives to

Listen 8080
Listen 4433

After this, define two VirtualHosts on these ports like this:

NameVirtualHost 0.0.0.0:8080
NameVirtualHost 0.0.0.0:4433

<VirtualHost 0.0.0.0:8080>
    ServerName the.server.name
    ServerAlias *
    DocumentRoot /var/www/plain
</VirtualHost>

<VirtualHost 0.0.0.0:4433>
    ServerName the.server.name
    ServerAlias *
    DocumentRoot /var/www/ssl

    SSLEngine On
    SSLCertificateFile /the/certificate/file
    SSLCertificateKeyFile /the/key/file
</VirtualHost>

If you don't have any more VirtualHost definition, you don't have to include the ServerAlias directive (or the ServerName, for that matter).

If you restart Apache, it will listen on 8080 for unencrypted connections, and on port 4433 for SSL. Be sure not to have any old VirtualHost definition which contain the wrong port number.