Re: name based virtual host and apache-ssl

[Ivan Brezina <ivan@cvut.cz>]

Haim Ashkenazi wrote:
> Hi
>
> I'm running a web (ssl) server with several virtual domains. at the moment
> they are name based (non-ip) which of course produce a warning in the
> user's browser when he try to connect to a host that is not the default one
> (key). I've looked in the documentation and found that ssl doesn't support
> name based virtual domains. I was wondering if there is a way around that
> (like using rewrite rules). say I want to offer web hosting, do I need to
> have different IP for every https domain I'm hosting? this could result in
> having to buy a few hundred IP's...

Best solution is to have IP for each virtual domain.

Tricky solution is to use X509v3 extension in certificate
called alternativeHostname. You can have many alternativeHostname
records in one certificate.
Usig this you can use one certificate for all domains.

But this is realy ugly solution. You have to regenarate certificate each 
time some of your domains changes. And of course some clients do not 
understand X509v3 extensions.


Ivan Brezina