Re: Apache SSL named based virtual hosts

2011-01-25 Thread Jochen Schulz
Bob Proulx: > Jochen Schulz wrote: > >> Modern browsers appear to support that TLS extension: >> https://secure.wikimedia.org/wikipedia/en/wiki/Server_Name_Indication#Browser\ > s > > I will implement this in a test installation and get some experience > with this feature. The future looks bright

Re: Apache SSL named based virtual hosts

2011-01-24 Thread Bob Proulx
Jochen Schulz wrote: > The problem is/was that the TLS handshake was initiated before the > HTTP request was sent. Since only the request included the > Host-Header, the web server couldn't show a certificate for the > requested domain name. A better explanation can be found here: > > http://httpd

Re: Apache SSL named based virtual hosts

2011-01-24 Thread Boyd Stephen Smith Jr.
In <201101241443.22084@iguanasuicide.net>, Boyd Stephen Smith Jr. wrote: >http://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI > >I believe Lenny does actually have a recent enough version of both apache2 >and libssl0.9.8, but I've not tried using SNI with Lenny's version of >Apache. (Correc

Re: Apache SSL named based virtual hosts

2011-01-24 Thread Jochen Schulz
Bob Proulx: > Boyd Stephen Smith Jr. wrote: > >> ... Apache (from upstream) has supported it for a while and I've had >> it in production (system based on Ubuntu Maverick) for a number of >> months. > > Re: NameVirtualHost *:443 > > This is good to hear but if so then how do they pull that off?

Re: Apache SSL named based virtual hosts

2011-01-24 Thread Boyd Stephen Smith Jr.
In <20110124202335.ga5...@hysteria.proulx.com>, Bob Proulx wrote: >In another thread: >Boyd Stephen Smith Jr. wrote: >> ... Apache (from upstream) has supported it for a while and I've had >> it in production (system based on Ubuntu Maverick) for a number of >> months. > >Re: NameVirtualHost *:443

Re: Apache SSL named based virtual hosts

2011-01-24 Thread David Sastre
On Mon, Jan 24, 2011 at 01:23:35PM -0700, Bob Proulx wrote: > In another thread: > Boyd Stephen Smith Jr. wrote: > Is there a way to have all of the browsers use starttls > for https ... > and to be able to share virtual hosts with SSL on a single > IP address? That would be awesome! Where can I