Re: Squirrelmail

[Brian Candler <B.Candler at pobox.com>]

On Fri, Aug 30, 2002 at 09:48:21AM +0300, Patrick J Okui wrote:
> *I THINK* you need two sets entries, one for the virtual host with ssl,
> and another for the virtual host without ssl. So, make sure you have
> lines like
> 
> NameVirtualHost 1.2.3.4:80
> NameVirtualHost 1.2.3.4:443

Warning: name-based virtual hosting doesn't really work for SSL. This is
because the SSL session is negotiated as soon as the TCP connection is made,
_before_ the Host: header is sent. So the webserver has no idea which
certificate to use for authentication, unless each virtual host is on a
different IP.

Having said that, it will work if you don't mind getting warnings about host
name not matching the certificate name - or if you are only hosting one SSL
site, of course.

B.

-----
This is the afnog mailing list, managed by Majordomo 1.94.5

To send a message to this list, e-mail afnog at afnog.org
To send a request to majordomo, e-mail majordomo at afnog.org and put
your request in the body of the message (i.e use "help" for help)

This list is maintained by owner-afnog at afnog.org