Re: Moving files around on a https repository

At Thu, 18 Nov 2004 10:25:09 -0600, Andrew Leeper wrote:

> What confuses me about this, though, is that I have different
> https virtual hosts that.. work. I'm not arguing the validity of
> the Apache ssl faq.. I'm just stating why it's odd to me.. ;)

I assume you have the same server key for all your name
virtual hosts? In that case, httpd-error.log probably
complains that the server name and the DN of the certificate
contradicts one another (for at least some of the servers),
and so could the client browser.

If you simply want a different namespace I think that's
fine, but if you want the server authentication to work for
the general public based on the certificate, it'd be a
problem. An encryption without server authentication
probably isn't the kind of security that SSL is designed to
establish (but users can make their choises, I'd say :) ).

I'm no expert at this, but that's the way I understood it.
I wouldn't be surprised if some one proved me wrong, though.

-- 
Hiroharu Tamaru
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org