[vox-tech] apache2: NameVirtualHost and VirtualHost

[Rod Roark]

On Saturday 18 November 2006 22:14, Micah Cowan wrote:
...
> Actually, at the start of that page, you may notice: "Name-based virtual
> hosting cannot be used with SSL secure servers because of the nature of
> the SSL protocol." However:
> 
>   1. It goes on to say a couple paragraphs later that if you plan to use
> named virtual hosts with SSL, you should add the port to the
> NamedVirtualHost directive (as I mentioned).
>   2. That phrase appears in the "when to use IP vs. Named virtual
> hosts".
> 
> Because of this, I think what is meant by the phrase is not that
> you /can't/ use it with SSL, but that doing so gives up the server
> authentication part of the security that SSL offers, leaving just the
> encryption benefits.

You really do need a separate IP for each SSL server.  There is some
further explanation here:

  http://httpd.apache.org/docs/2.0/ssl/ssl_faq.html#vhosts

Cheers,

Rod