Security and Cryptography
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me
Go Back   Dev Shed Forums > System Administration > Security and Cryptography
Reload this Page

More than 1 SSL certificate on a server

Discuss More than 1 SSL certificate on a server in the Security and Cryptography forum on Dev Shed.
More than 1 SSL certificate on a server Security and Cryptography forum discussing issues related to coding, server applications, network protection, data protection, firewalls, ciphers and the like.

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
« Previous Thread | Next Thread »  
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
  #1  
Old February 29th, 2004, 10:06 AM
ab-tools ab-tools is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
  
Join Date: May 2001
Posts: 3 ab-tools User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
More than 1 SSL certificate on a server
Hello together!
I've got the following problem:
At our server there should be 2 different domains with SSL, of course, with 2 different IP addresses.
In the file "ssl_vhost.conf" (we are using Confixx 2.0 Prof.) I have added 2 virtual hosts for that reasons, each with a different self-made ssl certificate.

The "ssl_vhost.conf"-file looks as following:
----
NameVirtualHost *IP1*:443
NameVirtualHost *IP2*:443
<VirtualHost *IP1*:443>
[...]
SSLEngine on
SSLCertificateFile /etc/apache/ssl.crt/certificate1.crt
SSLCertificateKeyFile /etc/apache/ssl.key/certificate1.key
</VirtualHost>
<VirtualHost *IP2*:443>
[...]
SSLEngine on
SSLCertificateFile /etc/apache/ssl.crt/certificate2.crt
SSLCertificateKeyFile /etc/apache/ssl.key/certificate2.key
</VirtualHost>
----

Although as it can be seen above both IPs have different SSL certificates the browser always gets the "certificate1" that causes that the 1. page opens without error, but the 2. one displays an error message that the domain name is invalid.
What have I done wrong in the configuration or what could the problem be so that the server send always the first certificate to the browser?

Thanks in advance for your help
Reply With Quote
  #2  
Old April 11th, 2004, 01:49 PM
Kronuz's Avatar
Kronuz Kronuz is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
  
Join Date: Apr 2004
Posts: 3 Kronuz User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Exactly the same problem here... I'm using OpenSSL v0.9.7d and Apache 2.0.49

Anyone knows how to solve this? Is it possible to have multiple certificates for different names in the same server?
Reply With Quote
  #3  
Old April 11th, 2004, 02:18 PM
ab-tools ab-tools is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
  
Join Date: May 2001
Posts: 3 ab-tools User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Not solved
Hello!

Great to find someone who have the same problem!
I couldn't solve it until now myself...

Hopefully someone can help, thanks again
Reply With Quote
  #4  
Old April 11th, 2004, 02:48 PM
Kronuz's Avatar
Kronuz Kronuz is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
  
Join Date: Apr 2004
Posts: 3 Kronuz User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Cool Not solved
Someone has said to me that you can't configure more than a single SSL server per IP. He said this is an inherent limitation of the SSL architecture, which works at IP level. He said that the only solutions are either get more IPs or use different ports for each certificate.

Any other suggestion? It's really hard to believe that this is it

I saw this
Code:
<VirtualHost *:443>
    ServerName cvs.company.com
    ServerAlias *.cvs.company.com

    ...

    SSLEngine on
    SSLCertificateFile    conf/ssl/cvs.cronos.be.crt
    SSLCertificateKeyFile /conf/ssl/cvs.cronos.be.key
</VirtualHost>


at URL
which suggests there's a possibility for multiple names on a single secure server....
Last edited by Kronuz : April 11th, 2004 at 02:56 PM.
Reply With Quote
  #5  
Old April 12th, 2004, 03:00 PM
M.Hirsch M.Hirsch is offline
Contributing User
Dev Shed God 1st Plane (5500 - 5999 posts)
  
Join Date: Oct 2000
Location: Back in the real world.
Posts: 5,969 M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level) 
Time spent in forums: 1 Month 1 Day 22 h 42 m 50 sec
Reputation Power: 185
Quote:
Originally Posted by Kronuz
Any other suggestion? It's really hard to believe that this is it


Quote:
From the first post of this thread:
of course, with 2 different IP addresses.

Quote:
From the URL you posted
TODO: Documentation about setting up https

For now, read the docs included with the package (it's not difficult)

And, follow-up from the apache homepage here:
Quote:
Name-based virtual hosting cannot be used with SSL secure servers because of the nature of the SSL protocol.


so: you better believe it...

HTH,
M.
__________________
--
Manuel Hirsch - Linux, FreeBSD, programming, administration articles, tutorials and more.
Reply With Quote
  #6  
Old May 9th, 2004, 04:34 AM
ab-tools ab-tools is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
  
Join Date: May 2001
Posts: 3 ab-tools User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
There are two IPs
Hello!

Of course, it's not possible to have 2 SSL certificates for ONE IP, but as I wrote I have TWO IPs for this server, but it even doesn't want to work with two IPs!?

Does anybody have an idea what the problem might be?

Thanks again
Reply With Quote
Reply

Viewing: Dev Shed Forums > System Administration > Security and Cryptography > More than 1 SSL certificate on a server

« Previous Thread | Next Thread »

Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Linear Mode Linear Mode
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump


Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 





© 2003-2008 by Developer Shed. All rights reserved. DS Cluster 4 hosted by Hostway. 
Stay green...Green IT