Re: [users@httpd] Name-based SSL virtual hosts

2011-01-24 Thread Wolfgang . Miska
AM Please respond to users@httpd.apache.org To users@httpd.apache.org cc Subject Re: [users@httpd] Name-based SSL virtual hosts Hi Wolfgang, there is a chicken-and-egg problem with name-based virtual hosts and SSL. The SSL connection is established *before* HTTP communication, so the SSL

Re: [users@httpd] Name-based SSL virtual hosts

2011-01-24 Thread Tom Evans
On Mon, Jan 24, 2011 at 9:13 AM, Martin Kuba wrote: > Hi Wolfgang, > > there is a chicken-and-egg problem with name-based virtual hosts > and SSL. The SSL connection is established *before* HTTP communication, > so the SSL server does not know what Host: HTTP header will be sent > in the moment it

Re: [users@httpd] Name-based SSL virtual hosts

2011-01-24 Thread Martin Kuba
Hi Wolfgang, there is a chicken-and-egg problem with name-based virtual hosts and SSL. The SSL connection is established *before* HTTP communication, so the SSL server does not know what Host: HTTP header will be sent in the moment it decides which SSL server certificate to send. So for SSL HTTP

[users@httpd] Name-based SSL virtual hosts

2011-01-21 Thread Wolfgang . Miska
Hi, I am not too familiar with Apache, so the following message has stumped me. [warn] Init: Name-based SSL virtual hosts only work for clients with TLS server name indication support (RFC 4366) Can somebody explain what that means and what are the consequences? Thanks so much! Wolfgang