Linux

Linux operating system tutorials and information.

Reason that you cannot have multiple SSL certificates with Apache

I just recently was looking at creating two separate SSL protected domains on an Apache webserver, but ran into a roadblock.  One of the sites (domain2) seemed to be trying to use the SSL certificate that I configured for the other domain (domain1).  SSL worked just fine for domain1, it used the correct certificate.  But domain2 always pointed to domain1's certificate no matter what I did.

It turns out that it isn't possible due to two things.  One being my version of Apache and OpenSSL, and another being that I only have a single IP address for the machine that hosts my sites.

How did I find this out?  A google search for apache multiple ssl virtual hosts eventually brought me to this apache SSL FAQ page: Why is it not possible to use Name-Based Virtual Hosting to identify different SSL virtual hosts?

If I were to still want to host two unique SSL protected domains, I could either get another IP address for my web server so I could create a separate virtual host for that different IP, or I could upgrade to the versions of Apache and OpenSSL that would allow SNI (Server Name Indication) as mentioned in the article above.

Oh well, hopefully you are fortunate enough to be reading this before you go out and buy 2 SSL certificates right away like I did.

Syslog-ng Remote Logging using stunnel

Secure remote logging design and implementation guide for Linux that utilizes syslog-ng, logrotate, and stunnel.

Syndicate content