[FX.php List] [OFF] SSL Cert problem on OS X Server

Leo R. Lundgren leo at finalresort.org
Mon Jun 1 08:28:49 MDT 2009


Here it is:

http://www.iviking.org/pipermail/fx.php_list/2009-January/008944.html
http://www.iviking.org/pipermail/fx.php_list/2009-January/008948.html

1 jun 2009 kl. 16.23 skrev Leo R. Lundgren:

> You will have to seperate that client's virtual ssl-host from the  
> rest of your server either by IP or by PORT.
>
> The problem is your various virtual hosts are seperated based on  
> their Host: HTTP header, and this header is part of the actual data  
> that is to be encrypted. It's a chicken and egg problem.
>
> There was an in-depth discussion about it on this list about a year  
> ago or something.
>
>
> 1 jun 2009 kl. 16.15 skrev Bob Patin:
>
>> I put server-wide SSL certs on all my web servers by purchasing a  
>> cert that resolves to the domain name of the particular web server.  
>> By doing this, my web clients can use the cert if they wish,  
>> without having to buy one for their particular domain. So instead  
>> of their using
>>
>> https://www.mydomain.com
>>
>> they would use
>>
>> https://xs7.longtermsolutions.com/mydomain/index.php
>>
>> which takes them into their directory and to their site.
>>
>> Here's the problem:
>>
>> (This is in OS X Server 10.4.11)
>>
>> I have a client who has bought his own cert for use on his site; no  
>> matter where I put his site in the list of sites, it won't use his  
>> cert, but instead invokes the "server-wide" cert.
>>
>> If I put his site at the top of the list, all of the sites on the  
>> server will try to use his certificate, which means an error message.
>>
>> Is there a way to do what I am describing, or do I need to move him  
>> to a server that doesn't have its own server-wide SSL cert?
>>
>> Any help would be greatly appreciated; thanks,
>>
>> Bob Patin
>> Longterm Solutions
>> bob at longtermsolutions.com
>> 615-333-6858
>> http://www.longtermsolutions.com
>> iChat: bobpatin
>> AIM: longterm1954
>> FileMaker 9 Certified Developer
>> Member of FileMaker Business Alliance and FileMaker TechNet
>> --------------------------
>> FileMaker hosting and consulting for all versions of FileMaker
>> PHP • Full email services • Free DNS hosting • Colocation •  
>> Consulting
>>
>> _______________________________________________
>> FX.php_List mailing list
>> FX.php_List at mail.iviking.org
>> http://www.iviking.org/mailman/listinfo/fx.php_list
>
>
> -|
>
> _______________________________________________
> FX.php_List mailing list
> FX.php_List at mail.iviking.org
> http://www.iviking.org/mailman/listinfo/fx.php_list


-|



More information about the FX.php_List mailing list