Re: Multiple SSL certs and domains on same iSeries

Aaron,

Yes, you have the right idea. IP-based virtual hosts DO support a separate SSL certificate for each virtual host. (They're also more compatible with old browsers than the name-based ones.)

I believe that your config should work, as well, but haven't tested it. You have the right idea, but if you didn't get the syntax of one of the fields right, I'm not sure that I would've noticed it.

Though, I did notice that both virtual hosts have the same DocumentRoot. Was that intentional?




albartell wrote:

Thanks Matt!

So then the following would work, correct?

<VirtualHost 192.168.0.20:443>
ServerName WWW.company1.COM
DocumentRoot /www/company1/v1.0
DirectoryIndex index.html
SSLEngine On
SSLAppName QIBM_HTTP_SERVER_MYAPP1
</VirtualHost>
<VirtualHost 192.168.0.21:443>
ServerName WWW.company2.COM
DocumentRoot /www/company1/v1.0
DirectoryIndex uindex.html
SSLEngine On
SSLAppName QIBM_HTTP_SERVER_MYAPP2
</VirtualHost>

Aaron Bartell

-----Original Message-----
From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx] On
Behalf Of matt.haas@xxxxxxxxxxx
Sent: Friday, October 05, 2007 2:36 PM
To: web400@xxxxxxxxxxxx
Subject: Re: [WEB400] Multiple SSL certs and domains on same iSeries

Aaron,

What you have will not work. You can only have one SSL certificate per
IP/port combination. The reason is that the HTTP headers are encrypted so
you can't determine the server name until after it's been decrypted and that
can't happen until you know the host name.

Once you have separate IP addresses, you can use IP based virtual hosting to
run everything in the same HTTP server instance.

Matt

-----Original Message-----
From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx]
On Behalf Of albartell
Sent: Friday, October 05, 2007 3:03 PM
To: 'Web Enabling the AS400 / iSeries'
Subject: [WEB400] Multiple SSL certs and domains on same iSeries

Hi all,
Working with a client that has need to run two SSL web sites (separate
domains) on the same iSeries. I have done two SSL domains before, but seem
to remember it requiring separate ports for each SSL cert. Is there a way
to use virtual hosts so requests coming in on https://www.company1.com and
https://www.company2.com can both use port 443?
I would rather not switch the DNS over to the backup iSeries to test this,
so that is why I am asking you guys :-) Would the below work with both
virtual hosts listening on port 443?
<VirtualHost *:443>
ServerName <http://www.company1.COM> WWW.company1.COM
DocumentRoot /www/company1/v1.0
DirectoryIndex index.html
SSLEngine On
SSLAppName QIBM_HTTP_SERVER_MYAPP1
</VirtualHost>
<VirtualHost *:443>
ServerName <http://www.company2.COM> WWW.company2.COM
DocumentRoot /www/company1/v1.0
DirectoryIndex uindex.html
SSLEngine On
SSLAppName QIBM_HTTP_SERVER_MYAPP2
</VirtualHost>
TIA,
Aaron Bartell
http://mowyourlawn.com
--
This is the Web Enabling the AS400 / iSeries (WEB400) mailing list To post a
message email: WEB400@xxxxxxxxxxxx To subscribe, unsubscribe, or change list
options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at
http://archive.midrange.com/web400.