I'm attempting to do VirtualHosting with SSL (two different secured sites on one server). Obviously they have different certificates. Unfortunately, Apache is using the certificate of one for the other. Now it's getting the DocumentRoot fine, though, so I'm wondering what's up? NameVirtualHost www.shad.ca:443 <VirtualHost shadnet.shad.ca:443> ServerName shadnet.shad.ca DocumentRoot /web/ShadNet/sys/cvs/webdocs ServerAdmin shadnetadmin@shad.ca SSLCertificateFile /etc/apache/ssl.crt/server.crt SSLCertificateKeyFile /etc/apache/ssl.key/server.key (other stuff) </VirtualHost> <VirtualHost www.shad.ca:443> ServerName www.shad.ca DocumentRoot /home/darren/www.shad.ca/secure ServerAdmin shadnetadmin@shad.ca SSLCertificateFile /etc/apache/ssl.crt/shad.crt SSLCertificateKeyFile /etc/apache/ssl.key/shad.key (other stuff) </VirtualHost> Even more disturbing is that if I go to the first site, and then to the second site, netscape doesn't warn me that the domain name in the certificate is incorrect! I suppose that's a netscape bug, though, and unrelated to my problem (Just big security implications, I believe). Can anyone help me figure out why my server is using the same key for both domains? TIA -Dan -- "... the most serious problems in the Internet have been caused by unenvisaged mechanisms triggered by low-probability events; mere human malice would never have taken so devious a course!" - RFC 1122
Attachment:
pgpxoxD9_b2ev.pgp
Description: PGP signature