Dan Poirier | 8 Apr 2009 20:37
Picon
Favicon
Gravatar

Documentation started for virtual hosts with SNI

[Please followup to docs <at> httpd.apache.org]

I've started a documentation page for using virtual hosts
over SSL with SNI at

http://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI

Comments are welcome, or make improvements directly on
the wiki.

--

-- 
Dan Poirier <poirier <at> pobox.com>
Ruediger Pluem | 8 Apr 2009 21:06
Picon
Favicon

Re: Documentation started for virtual hosts with SNI


On 04/08/2009 08:37 PM, Dan Poirier wrote:
> [Please followup to docs <at> httpd.apache.org]
> 
> I've started a documentation page for using virtual hosts
> over SSL with SNI at
> 
> http://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI

Cool work Dan. Thanks. If I find some time and have further
things at hand I will contribute to this page.

Regards

Rüdiger
Frank Gingras | 8 Apr 2009 21:13
Picon

Re: Documentation started for virtual hosts with SNI

Ruediger Pluem wrote:
> On 04/08/2009 08:37 PM, Dan Poirier wrote:
>   
>> [Please followup to docs <at> httpd.apache.org]
>>
>> I've started a documentation page for using virtual hosts
>> over SSL with SNI at
>>
>> http://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI
>>     
>
> Cool work Dan. Thanks. If I find some time and have further
> things at hand I will contribute to this page.
>
> Regards
>
> Rüdiger
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: docs-unsubscribe <at> httpd.apache.org
> For additional commands, e-mail: docs-help <at> httpd.apache.org
>
>   
Dan,

Thank you very much for this. I will use it a lot for support in #httpd, 
for sure.

(Continue reading)

William A. Rowe, Jr. | 8 Apr 2009 21:32

Picked up something new today...

A while back, we attempted to lock down our documentation domain names into
example. where they belong... here's one I wasn't aware of we should likely
adopt, as well;

RFC 3330

   192.0.2.0/24 - This block is assigned as "TEST-NET" for use in
   documentation and example code.  It is often used in conjunction with
   domain names example.com or example.net in vendor and protocol
   documentation.  Addresses within this block should not appear on the
   public Internet.
Mario Brandt | 9 Apr 2009 08:59
Picon

Re: Documentation started for virtual hosts with SNI

Hi Dan,
isn't there a misconfig in the example?

Second host:

DocumentRoot /www/example2
ServerName www.example.org

shouldn't that be ServerName www.example2.org ?

Mario
Tero Lampiluoto | 9 Apr 2009 10:10
Picon

Re: Documentation started for virtual hosts with SNI

Hello,

Using SNI doesn't change the fact that you can only use
one certificate file (public and private key) per unique IP:port.
Right?

SNI is mostly useful when one is using wildcard and/or
SubjectAltName (SAN) extension certificate. In these cases you can
serve number different sites with the same certificate key pair.

I think this should be mentioned because otherwise we are facing
confusion.

--

-- 
 Tero Lampiluoto
 lampiluoto at gmail com

On Thu, Apr 9, 2009 at 9:59 AM, Mario Brandt <jblond <at> gmail.com> wrote:
> Hi Dan,
> isn't there a misconfig in the example?
>
> Second host:
>
> DocumentRoot /www/example2
> ServerName www.example.org
>
> shouldn't that be ServerName www.example2.org ?
>
> Mario
>
(Continue reading)

Eric Covener | 9 Apr 2009 12:22
Picon
Gravatar

Re: Documentation started for virtual hosts with SNI

On Thu, Apr 9, 2009 at 4:10 AM, Tero Lampiluoto <lampiluoto <at> gmail.com> wrote:
> Hello,
>
> Using SNI doesn't change the fact that you can only use
> one certificate file (public and private key) per unique IP:port.
> Right?

That's what it changes, becasue the Client Hello contains the same
data as the Host: header.

>
> SNI is mostly useful when one is using wildcard and/or
> SubjectAltName (SAN) extension certificate. In these cases you can
> serve number different sites with the same certificate key pair.

This works today (all SSL settings in default vhost)

--

-- 
Eric Covener
covener <at> gmail.com
Dan Poirier | 9 Apr 2009 15:39
Picon
Favicon
Gravatar

Re: Documentation started for virtual hosts with SNI

Mario Brandt <jblond <at> gmail.com> writes:

> isn't there a misconfig in the example?
>
> Second host:
>
> DocumentRoot /www/example2
> ServerName www.example.org
>
> shouldn't that be ServerName www.example2.org ?

Thanks, you're right.  I've fixed it.

--

-- 
Dan Poirier <poirier <at> pobox.com>
Dan Poirier | 9 Apr 2009 15:41
Picon
Favicon
Gravatar

Re: Documentation started for virtual hosts with SNI

Tero Lampiluoto <lampiluoto <at> gmail.com> writes:

> Using SNI doesn't change the fact that you can only use
> one certificate file (public and private key) per unique IP:port.

Actually that's exactly what it does change, but you're right in
that I never actually said that.  Fixed.

--

-- 
Dan Poirier <poirier <at> pobox.com>
Lucien GENTIS | 25 Apr 2009 18:32
Picon

translation problème

Hi to all,

I'm translating mod_proxy.xml, and I don't understand what the term 
"worker" means, for example on lines 548, 735, 773,...

Is it related to the MPM Worker ?

Or is it a little man who "works" during hours and hours inside of httpd 
to make it run ? :-)

Lucien

--

-- 
Lucien GENTIS
IUFM de Lorraine
Centre de Ressources Informatiques
5, Rue Paul Richard
C.O. 3 - MAXEVILLE
54528 LAXOU-CEDEX

Tél. 03 83 17 68 41
Email : lucien.gentis <at> lorraine.iufm.fr

Gmane