http and https on same server - 1 ip

External Since: Feb 15, 2004 Posts: 8

I have to install SSL on a remote server with only 1 ip address.

Right now i am doing tests on a local server, that explains the
weird domain names in this post.

I already have spend 3 days googling and reading all kind of
docs. It should work but it does not.

My config:
---------------------
Mandrake 9.2
Server Version: Apache-AdvancedExtranetServer/2.0.48 (Mandrake
Linux/5mdk) mod_perl/1.99_11 Perl/v5.8.2 mod_ssl/2.0.48
OpenSSL/0.9.7c PHP/4.3.4
Machine name: mohicanie.zaq

--------------------
I created the certificate and key, that seems to work, actually,
that works too much.

I added a secured subdomain (secure.mohicanie.zaq) in
/etc/httpd/conf.d/40_mod_sss.conf, like this:

--------------------------------------------
<VirtualHost secure.mohicanie.zaq:443>

DocumentRoot "/home/marcnado/www/secure"
ServerName secure.mohicanie.zaq:443
ServerAdmin marcus.TakeThisOut@mohicanie.zaq
ErrorLog logs/error_log
TransferLog logs/access_log

SSLEngine on

SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+\
HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL

SSLCertificateFile /etc/httpd/certificats/server.crt

SSLCertificateKeyFile /etc/httpd/certificats/server.key

<Files ~ "\.(cgi|shtml|phtml|php|php3?)$">
SSLOptions +StdEnvVars
</Files>

SetEnvIf User-Agent ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0

CustomLog logs/ssl_request_log \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>

--------------------------------------------

The whole test site (all subdomains) is now available only using
https addresses.
The standard http subdomain addresses do not work anymore.

BUT i just want some subdomains to be secured through SSL.

So, i added in the other subdomains a 'SSLengine off' directive.

Like this:

------------------------------

<VirtualHost 192.168.100.10:80>
DocumentRoot /home/marcnado/www/bd-girls
ServerName bd-girls.mohicanie.zaq
ServerPath /bd-girls/
RewriteEngine On
RewriteRule ^(/bd-girls/.*) /home/marcnado/www/bd-girls$1
ServerAdmin marcus.TakeThisOut@mohicanie.zaq
ErrorLog /home/marcnado/logs/bd-girls-25mars2004.log
LogLevel warn

SSLengine off

</VirtualHost>

------------------------------

But to no avail, the subdomains are only available through SSL.

What did i miss?

So, the question:

How to have only certains subdomains secured with SSl with only
1 ip address?

TIA

--
mv sco /dev/null
Marc Nadeau# La Pagerie /* http://www.pagerie.com */

External Since: Nov 03, 2003 Posts: 2907

Marc Nadeau <marcnadoNOSPAM RemoveThis @yahoo.fr> wrote:
> It should work but it does not.

Meaning of 'it does not' ?

> ServerName secure.mohicanie.zaq:444

Your servername does not contain "444" and the https port is 443!

> The standard http subdomain addresses do not work anymore.

Meaning of 'do not work' ? Do you get an error? Do you get a
'permission denied'? What??

> How to have only certains subdomains secured with SSl with only
> 1 ip address?

Using Name Based Virtual Host.

Something like this:
NameVirtualHost *

<VirtualHost *>
ServerAdmin someone RemoveThis @averybadplace.org
DocumentRoot /somewhere/over/there
ServerName some.badplace.org
<Directory "/...">
   ...options...
</Directory>
</VirtualHost>

<IfDefine SSL>
<VirtualHost _default_:443>
DocumentRoot /some/other/plsce
ServerName thesafeplace.org
SSLEngine on
   ..other SSL related stuff...
<Directory "...">
   ...options...
</Directory>
</VirtualHost>
</IfDefine>

Davide

--
| Am I ranting? I hope so. My ranting gets raves.
|
|
|