× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.



Aaron,

Yes, you have the right idea. IP-based virtual hosts DO support a separate SSL certificate for each virtual host. (They're also more compatible with old browsers than the name-based ones.)

I believe that your config should work, as well, but haven't tested it. You have the right idea, but if you didn't get the syntax of one of the fields right, I'm not sure that I would've noticed it.

Though, I did notice that both virtual hosts have the same DocumentRoot. Was that intentional?




albartell wrote:
Thanks Matt!

So then the following would work, correct?

<VirtualHost 192.168.0.20:443>
ServerName WWW.company1.COM
DocumentRoot /www/company1/v1.0
DirectoryIndex index.html
SSLEngine On
SSLAppName QIBM_HTTP_SERVER_MYAPP1
</VirtualHost>
<VirtualHost 192.168.0.21:443>
ServerName WWW.company2.COM
DocumentRoot /www/company1/v1.0
DirectoryIndex uindex.html
SSLEngine On
SSLAppName QIBM_HTTP_SERVER_MYAPP2
</VirtualHost>

Aaron Bartell

-----Original Message-----
From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx] On
Behalf Of matt.haas@xxxxxxxxxxx
Sent: Friday, October 05, 2007 2:36 PM
To: web400@xxxxxxxxxxxx
Subject: Re: [WEB400] Multiple SSL certs and domains on same iSeries

Aaron,

What you have will not work. You can only have one SSL certificate per
IP/port combination. The reason is that the HTTP headers are encrypted so
you can't determine the server name until after it's been decrypted and that
can't happen until you know the host name.

Once you have separate IP addresses, you can use IP based virtual hosting to
run everything in the same HTTP server instance.

Matt

-----Original Message-----
From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx]
On Behalf Of albartell
Sent: Friday, October 05, 2007 3:03 PM
To: 'Web Enabling the AS400 / iSeries'
Subject: [WEB400] Multiple SSL certs and domains on same iSeries

Hi all,
Working with a client that has need to run two SSL web sites (separate
domains) on the same iSeries. I have done two SSL domains before, but seem
to remember it requiring separate ports for each SSL cert. Is there a way
to use virtual hosts so requests coming in on https://www.company1.com and
https://www.company2.com can both use port 443?
I would rather not switch the DNS over to the backup iSeries to test this,
so that is why I am asking you guys :-) Would the below work with both
virtual hosts listening on port 443?
<VirtualHost *:443>
ServerName <http://www.company1.COM> WWW.company1.COM
DocumentRoot /www/company1/v1.0
DirectoryIndex index.html
SSLEngine On
SSLAppName QIBM_HTTP_SERVER_MYAPP1
</VirtualHost>
<VirtualHost *:443>
ServerName <http://www.company2.COM> WWW.company2.COM
DocumentRoot /www/company1/v1.0
DirectoryIndex uindex.html
SSLEngine On
SSLAppName QIBM_HTTP_SERVER_MYAPP2
</VirtualHost>
TIA,
Aaron Bartell
http://mowyourlawn.com
--
This is the Web Enabling the AS400 / iSeries (WEB400) mailing list To post a
message email: WEB400@xxxxxxxxxxxx To subscribe, unsubscribe, or change list
options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at
http://archive.midrange.com/web400.




As an Amazon Associate we earn from qualifying purchases.

This thread ...

Follow-Ups:
Replies:

Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.