Re: [users@httpd] Re: Multi-domain with SSL - Virtualhost all need IPs?

2022-05-20 Thread Frank Gingras
Charles, No, you are completely incorrect. You should never define vhosts as :. On Fri, 20 May 2022 at 13:09, Yehuda Katz wrote: > That is not correct. That causes httpd to try to look up the matching IP > address using DNS. Use only IP addresses or wildcards. > > - Y > > On Fri, May 20, 2022 a

Re: [users@httpd] Re: Multi-domain with SSL - Virtualhost all need IPs?

2022-05-20 Thread Yehuda Katz
That is not correct. That causes httpd to try to look up the matching IP address using DNS. Use only IP addresses or wildcards. - Y On Fri, May 20, 2022 at 1:06 PM Bender, Charles wrote: > Your virtual host is defined wrong. Use the names not IP addresses > > http://1.1.1.13:443/>> > Servername

Re: [users@httpd] Re: Multi-domain with SSL - Virtualhost all need IPs?

2022-05-20 Thread Bender, Charles
Your virtual host is defined wrong. Use the names not IP addresses http://1.1.1.13:443/>> Servername example2.com

Re: [users@httpd] Re: Multi-domain with SSL - Virtualhost all need IPs?

2022-05-20 Thread Yehuda Katz
> > It will have a different set of cert files. I let it have an IP which > nothing else shares. I'm keenly aware of this IP as I've set it up in DNS as well. If you have , it will use ALL IPs - if you want to dedicate an IP for a site, you need to specify IPs for every other site too. I am not

Re: [users@httpd] Re: Multi-domain with SSL - Virtualhost all need IPs?

2022-05-20 Thread frank picabia
I'm trying hard to get the lay of the land logic here, and it isn't happening. I'm bouncing between what I read here, and what apache actually does, and it doesn't add up. In my case we tried to introduce a new domain, let's call it example2.com It will have a different set of cert files. I let

Re: [users@httpd] Re: Multi-domain with SSL - Virtualhost all need IPs?

2022-05-20 Thread Frank Gingras
As mentioned, name-based vhosts will work with SNI and *:443 provided that you have the correct certificate assigned to each vhost. In rare cases, you can use IP:443 vhosts if you want specific handling based on the IP used to handle the request, such as https://IP1/ or https://IP2/. However, it i

[users@httpd] Re: Multi-domain with SSL - Virtualhost all need IPs?

2022-05-20 Thread frank picabia
Sorry, that should not have said "top level domains". I meant domains. Like example.com, example.net. On Fri, May 20, 2022 at 7:05 AM frank picabia wrote: > > It looks like there are two requirements for multiple top level domains > with SSL > on the same apache. > > 1. IP values must be used

[users@httpd] Re: Multi-domain with SSL - Virtualhost all need IPs?

2022-05-20 Thread frank picabia
It looks like there are two requirements for multiple top level domains with SSL on the same apache. 1. IP values must be used inside VirtualHost, not *:443 2. All IP values must be unique, even on the same top level domain Is the above conjecture true? We have many setup like this example...