Krist van Besien wrote:
On Tue, Oct 27, 2009 at 7:41 PM, Joseph S <j...@selectacast.net> wrote:


Now here's the kicker: When I click through the warning in Firefox my logs
show that I am going to the second virtual host, the one with the
that *.a certificate, even though I'm using the *.* certificate.  So how is
it apache is sending me to the correct virtual host but serving up the wrong
certificate?

At the moment that the SSL handshake takes place apache does not yet
know which Virtual Host you want to be served by, so it used the
certificate of the first host.

Read this:
http://httpd.apache.org/docs/2.2/ssl/ssl_faq.html#vhosts2

That documentation is old and needs to be updated. Since apache 2.2.12 you can have ssl name virtual hosts if you have a recent openssl library that supports RFC 4366. Like I said this is working for all my other *.a domains, just today it stopped working for this one.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Reply via email to