	[x] Posted via EE Mobile
	Search, ask, and monitor your questions on the go with EE Mobile. Visit Experts Exchange from your mobile device and never be out of touch again.

Question

	[x] Attachment Details

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

4.2

How can I setup 2 Virtual Hosts with 2 seperate SSL Certificates on Apache 2

Asked by RickKnight in Apache Web Server

Tags: Apache, Apache 2, 2.2.9, Multiple SSL Certificates, One server

I'm trying to setup my web server to run 2 secure sites. I have 2 SSL certificates and I have configured Apache with 2 Virtual Hosts. I've tried both Name based and IP based settings. The sites work except both sites use the certificate for the first site. How can I get the second site to use just the certificate for the second site?

View the Solution FREE for 30 Days

         
           
             1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:
64:
65:
66:
67:
68:
69:
70:
71:
72:
73:
74:
75:
76:
77:
78:
79:
80:
81:
82:
83:
84:
85:
86:
87:
88:
89:
90:
91:
92:
93:
94:
95:
96:
97:
98:
99:
100:
101:
102:
103:
104:
105:
106:
107:
108:
109:
110:
111:
112:
113:
114:
115:
116:
117:
118:
119:
120:
121:
122:
123:
124:
125:
126:
127:
128:
129:
130:
131:
132:
133:
134:
135:
136:
137:
138:
139:
140:
141:
142:
143:
144:
145:
146:

           
           
             #
# Virtual hosts and directory directives
#
 
#NameVirtualHost *:443
#ServerName secure.domain1.com
 
## secure.domain1.com
<VirtualHost 172.16.88.6:443>
 
     RewriteEngine On
     ReWriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)
     ReWriteRule .* - [F]
     
        <Location />
        # Insert filter
        SetOutputFilter DEFLATE
 
        # Netscape 4.x has some problems...
        BrowserMatch ^Mozilla/4 gzip-only-text/html
 
        # Netscape 4.06-4.08 have some more problems
        BrowserMatch ^Mozilla/4\.0[678] no-gzip
 
        # MSIE masquerades as Netscape, but it is fine
        # BrowserMatch \bMSIE !no-gzip !gzip-only-text/html
 
        # NOTE: Due to a bug in mod_setenvif up to Apache 2.0.48
        # the above regex won't work. You can use the following
        # workaround to get the desired effect:
        BrowserMatch \bMSI[E] !no-gzip !gzip-only-text/html
 
        # Don't compress images
        SetEnvIfNoCase Request_URI \
	     \.(?:gif|jpe?g|png)$ no-gzip dont-vary
 
        # Make sure proxies don't deliver the wrong content
        Header append Vary User-Agent env=!dont-vary
     </Location> 
     
    <Directory /var/www/catalog2>
	Options Indexes FollowSymlinks Multiviews
	AllowOverride all
	Order allow,deny
	Allow from all
    </Directory>
 
	ServerName secure.domain1.com
	DocumentRoot /var/www/catalog1
	ErrorLog "|/usr/sbin/rotatelogs /var/log/httpd/catalog1_ssl_error_log 604800"
	CustomLog "|/usr/sbin/rotatelogs /var/log/httpd/catalog1_ssl_access_log 604800" combined
	CustomLog "|/usr/sbin/rotatelogs /var/log/httpd/catalog1_ssl_request_log 604800" ssl_request
	#CustomLog logs/store.ssl_request_log "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
	
        # SSL engine Switch:
	SSLEngine on
	SSLProtocol -all +SSLv3 +TLSv1
	SSLCipherSuite SSLv3:!ADH:!NULL:!EXPORT56:+HIGH:-MEDIUM:-LOW:-EXP
 
	# SSL Certificate:
	SSLCertificateFile /etc/httpd/certs/ssl.crt/domain1.crt
 
	# SSL Private Key:
	SSLCertificateKeyFile /etc/httpd/certs/ssl.key/domain1.key
	
	<Files ~ "\.(cgi|shtml|phtml|php3?)$">
	    SSLOptions +StdEnvVars
	</Files>
	<Directory "/usr/local/httpd/cgi-bin">
	    SSLOptions +StdEnvVars
	</Directory>
	SetEnvIf User-Agent ".*MSIE.*" \
	    nokeepalive ssl-unclean-shutdown \
	    downgrade-1.0 force-response-1.0
	
</VirtualHost>
 
## secure.domain2.com
<VirtualHost 172.16.88.9:444>
 
     RewriteEngine On
     ReWriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)
     ReWriteRule .* - [F]
     
        <Location />
        # Insert filter
        SetOutputFilter DEFLATE
 
        # Netscape 4.x has some problems...
        BrowserMatch ^Mozilla/4 gzip-only-text/html
 
        # Netscape 4.06-4.08 have some more problems
        BrowserMatch ^Mozilla/4\.0[678] no-gzip
 
        # MSIE masquerades as Netscape, but it is fine
        # BrowserMatch \bMSIE !no-gzip !gzip-only-text/html
 
        # NOTE: Due to a bug in mod_setenvif up to Apache 2.0.48
        # the above regex won't work. You can use the following
        # workaround to get the desired effect:
        BrowserMatch \bMSI[E] !no-gzip !gzip-only-text/html
 
        # Don't compress images
        SetEnvIfNoCase Request_URI \
	     \.(?:gif|jpe?g|png)$ no-gzip dont-vary
 
        # Make sure proxies don't deliver the wrong content
        Header append Vary User-Agent env=!dont-vary
     </Location> 
     
    <Directory /var/www/catalog2>
	Options Indexes FollowSymlinks Multiviews
	AllowOverride all
	Order allow,deny
	Allow from all
    </Directory>
 
	ServerName secure.domain2.com
	DocumentRoot /var/www/catalog2
	ErrorLog "|/usr/sbin/rotatelogs /var/log/httpd/catalog2_ssl_error_log 604800"
	CustomLog "|/usr/sbin/rotatelogs /var/log/httpd/catalog2_ssl_access_log 604800" combined
	CustomLog "|/usr/sbin/rotatelogs /var/log/httpd/catalog2_ssl_request_log 604800" ssl_request
	#CustomLog logs/store.ssl_request_log "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
	
        # SSL engine Switch:
	SSLEngine on
	SSLProtocol -all +SSLv3 +TLSv1
	SSLCipherSuite SSLv3:!ADH:!NULL:!EXPORT56:+HIGH:-MEDIUM:-LOW:-EXP
 
	# SSL Certificate:
	SSLCertificateFile /etc/httpd/certs/ssl.crt/domain2.crt
 
	# SSL Private Key:
	SSLCertificateKeyFile /etc/httpd/certs/ssl.key/domain2.key
	
	<Files ~ "\.(cgi|shtml|phtml|php3?)$">
	    SSLOptions +StdEnvVars
	</Files>
	<Directory "/usr/local/httpd/cgi-bin">
	    SSLOptions +StdEnvVars
	</Directory>
	SetEnvIf User-Agent ".*MSIE.*" \
	    nokeepalive ssl-unclean-shutdown \
	    downgrade-1.0 force-response-1.0
	
</VirtualHost>

           
         

	Title
1	How to add multi SSL certificate - Ap…
2	Configuring Apache to use mulitple IPs …
3	How to configure Apache Web Server …
4	Enable SSL in Apache 2.2.4 after …
5	SSL Apache Problem
6	How to Setup Multiple SSL Certificates …

How can I setup 2 Virtual Hosts with 2 seperate SSL Certificates on Apache 2

Asked by RickKnight in Apache Web Server

Tags: Apache, Apache 2, 2.2.9, Multiple SSL Certificates, One server

About this solution