Re: Does anyone know if this is valid in Apache -- WEB400

Matt,

Ok, so it's the IP/Port combination that can only support a single certificate. I knew it was something like that (and our machine has only one public ip address, hence my confusion). Sorry I mispoke there.

But, in that case, what Mike was asking won't work, based on what you stated, because he said - "With the key part being both listening on :443."

Is that a correct statement?

Thanks,

Crispin.

----- Original Message ----- From: "Haas, Matt (CL Tech Sv)" <matt.haas@xxxxxxxxxxx>
To: "Web Enabling the AS400 / iSeries" <web400@xxxxxxxxxxxx>
Sent: Wednesday, December 19, 2007 1:20 PM
Subject: Re: [WEB400] Does anyone know if this is valid in Apache

That's never been true. You can have as many certificates as you need. I have 5 certificates on one machine but each certificate has to have a unique combination of IP address and port because you can't do name based virtual hosting with SSL.

Matt

-----Original Message-----
From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx] On Behalf Of Crispin Bates
Sent: Wednesday, December 19, 2007 12:58 PM
To: Web Enabling the AS400 / iSeries
Subject: Re: [WEB400] Does anyone know if this is valid in Apache

Mike,

I'm pretty sure you can only have one certificate per machine. This isn't an
i5 thing either, iirc. I may be mistaken and proven wrong here, but that's
what I remember...

Crispin.

----- Original Message -----
From: "Mike Cunningham" <mcunning@xxxxxxx>
To: "'Web Enabling the AS400 / iSeries'" <web400@xxxxxxxxxxxx>
Sent: Wednesday, December 19, 2007 12:49 PM
Subject: [WEB400] Does anyone know if this is valid in Apache

<VirtualHost 9.5.61.228:443>
ServerName www.SIS.org<http://www.SIS.org>
DocumentRoot /www/jkltest/earnings/
SSLEnable
SSLAppName QIBM_HTTP_SERVER_SIS
SSLClientAuth None
<Directory /www/jkltest/earnings>
Order Allow,Deny
Allow From all
Require valid-user
PasswdFile %%SYSTEM%%
UserID %%SERVER%%
AuthType Basic
AuthName "Projected Earnings"
</Directory>
Alias /earnings/ /www/jkltest/earnings/
</VirtualHost>

<VirtualHost 9.5.61.228:443>
ServerName www.EIS.org<http://www.EIS.org>
DocumentRoot /www/jkltest/earnings/
SSLEnable
SSLAppName QIBM_HTTP_SERVER_EIS
SSLClientAuth None
<Directory /www/jkltest/earnings>
Order Allow,Deny
Allow From all
Require valid-user
PasswdFile %%SYSTEM%%
UserID %%SERVER%%
AuthType Basic
AuthName "Projected Earnings"
</Directory>
Alias /earnings/ /www/jkltest/earnings/
</VirtualHost>

And have two different certificates. One for
www.SIS.org<http://www.SIS.org> attached to QIBM_HTTP_SERVER_SIS and one
for www.EIS.org<http://www.EIS.org> attached to QIBM_HTTP_SERVER_EIS.

With the key part being both listening on :443.
--
This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/web400.

--
This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/web400.

--
This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/web400.