[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#267477: debdiff to enable SSL for new Installs



On Wednesday 09 January 2008, Adam Sommer wrote:
> Attached is a debdiff for apache2_2.2.6 that uses the snakeoil
> certificate and key generated by the ssl-cert package.  I tested
> this in a sid chroot environment and it worked fine.  There are
> definitely multiple ways of accomplishing this, so if adjustments
> are needed please let me know.

For a reasonable default configuration, most directives in the *:80 
virtualhost would have to be copied into the ssl virtual host.

But I am also not comfortable using *:443 for ssl, because * is for 
NameVirtualHosts and ssl does not support name-based virtualhosts 
(yet). _default_:443 would be more appropriate.

On the other hand, support for SSL Server Name Indication will 
hopefully come in one of the next apache 2.2 releases. I think I will 
just wait with a ssl default configuration until apache supports SNI.

Cheers,
Stefan



Reply to: