Re: Does anyone know if this is valid in Apache

Crispin,

That depends on your internal network and DNS. You can actually use
dynamic DNS to route the public traffic to private IPs on the server.
The case in point assumes that the iSeries is Internet facing. With
firewalls and DNS, you can route the traffic to an internal IP, and
translate SSL traffic to specific ports on the firewall.

Tom Armbruster

-----Original Message-----
From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx]
On Behalf Of Crispin Bates
Sent: Wednesday, December 19, 2007 10:28 AM
To: Web Enabling the AS400 / iSeries
Subject: Re: [WEB400] Does anyone know if this is valid in Apache

Matt,

Ok, so it's the IP/Port combination that can only support a single
certificate. I knew it was something like that (and our machine has only
one
public ip address, hence my confusion). Sorry I mispoke there.

But, in that case, what Mike was asking won't work, based on what you
stated, because he said - "With the key part being both listening on
:443."

Is that a correct statement?

Thanks,

Crispin.


----- Original Message -----
From: "Haas, Matt (CL Tech Sv)" <matt.haas@xxxxxxxxxxx>
To: "Web Enabling the AS400 / iSeries" <web400@xxxxxxxxxxxx>
Sent: Wednesday, December 19, 2007 1:20 PM
Subject: Re: [WEB400] Does anyone know if this is valid in Apache

That's never been true. You can have as many certificates as you need.

I

have 5 certificates on one machine but each certificate has to have a
unique combination of IP address and port because you can't do name

based

virtual hosting with SSL.

Matt

-----Original Message-----
From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx]

On

Behalf Of Crispin Bates
Sent: Wednesday, December 19, 2007 12:58 PM
To: Web Enabling the AS400 / iSeries
Subject: Re: [WEB400] Does anyone know if this is valid in Apache

Mike,

I'm pretty sure you can only have one certificate per machine. This

isn't

an
i5 thing either, iirc. I may be mistaken and proven wrong here, but

that's

what I remember...

Crispin.

----- Original Message -----
From: "Mike Cunningham" <mcunning@xxxxxxx>
To: "'Web Enabling the AS400 / iSeries'" <web400@xxxxxxxxxxxx>
Sent: Wednesday, December 19, 2007 12:49 PM
Subject: [WEB400] Does anyone know if this is valid in Apache

<VirtualHost 9.5.61.228:443>
ServerName www.SIS.org<http://www.SIS.org>
DocumentRoot /www/jkltest/earnings/
SSLEnable
SSLAppName QIBM_HTTP_SERVER_SIS
SSLClientAuth None
<Directory /www/jkltest/earnings>
Order Allow,Deny
Allow From all
Require valid-user
PasswdFile %%SYSTEM%%
UserID %%SERVER%%
AuthType Basic
AuthName "Projected Earnings"
</Directory>
Alias /earnings/ /www/jkltest/earnings/
</VirtualHost>


<VirtualHost 9.5.61.228:443>
ServerName www.EIS.org<http://www.EIS.org>
DocumentRoot /www/jkltest/earnings/
SSLEnable
SSLAppName QIBM_HTTP_SERVER_EIS
SSLClientAuth None
<Directory /www/jkltest/earnings>
Order Allow,Deny
Allow From all
Require valid-user
PasswdFile %%SYSTEM%%
UserID %%SERVER%%
AuthType Basic
AuthName "Projected Earnings"
</Directory>
Alias /earnings/ /www/jkltest/earnings/
</VirtualHost>


And have two different certificates. One for
www.SIS.org<http://www.SIS.org> attached to QIBM_HTTP_SERVER_SIS and

one

for www.EIS.org<http://www.EIS.org> attached to QIBM_HTTP_SERVER_EIS.

With the key part being both listening on :443.
--
This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/web400.

--
This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/web400.

--
This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/web400.