[FX.php List] [OFF] SSL Cert problem on OS X Server

[Leo R. Lundgren]

You will have to seperate that client's virtual ssl-host from the rest  
of your server either by IP or by PORT.

The problem is your various virtual hosts are seperated based on their  
Host: HTTP header, and this header is part of the actual data that is  
to be encrypted. It's a chicken and egg problem.

There was an in-depth discussion about it on this list about a year  
ago or something.


1 jun 2009 kl. 16.15 skrev Bob Patin:

> I put server-wide SSL certs on all my web servers by purchasing a  
> cert that resolves to the domain name of the particular web server.  
> By doing this, my web clients can use the cert if they wish, without  
> having to buy one for their particular domain. So instead of their  
> using
>
> https://www.mydomain.com
>
> they would use
>
> https://xs7.longtermsolutions.com/mydomain/index.php
>
> which takes them into their directory and to their site.
>
> Here's the problem:
>
> (This is in OS X Server 10.4.11)
>
> I have a client who has bought his own cert for use on his site; no  
> matter where I put his site in the list of sites, it won't use his  
> cert, but instead invokes the "server-wide" cert.
>
> If I put his site at the top of the list, all of the sites on the  
> server will try to use his certificate, which means an error message.
>
> Is there a way to do what I am describing, or do I need to move him  
> to a server that doesn't have its own server-wide SSL cert?
>
> Any help would be greatly appreciated; thanks,
>
> Bob Patin
> Longterm Solutions
> bob at longtermsolutions.com
> 615-333-6858
> http://www.longtermsolutions.com
> iChat: bobpatin
> AIM: longterm1954
> FileMaker 9 Certified Developer
> Member of FileMaker Business Alliance and FileMaker TechNet
> --------------------------
> FileMaker hosting and consulting for all versions of FileMaker
> PHP • Full email services • Free DNS hosting • Colocation • Consulting
>
> _______________________________________________
> FX.php_List mailing list
> FX.php_List at mail.iviking.org
> http://www.iviking.org/mailman/listinfo/fx.php_list


-|