[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: svn with virtual hosts

From: Daniel Patterson <danpat_at_danpat.net>
Date: 2005-03-10 08:52:27 CET

dave wrote:
> Hello,
> I'm not using IP-based virtual hosting, but name based such as:
> NameVirtualHost www.example.com:443
> <VirtualHost www.example.com:443>
> ...
> </VirtualHost>
> Thanks.
> Dave.

   You can't use name-based virtual hosting for SSL servers.

   Because Apache has no-way of knowing which SSL certificate to
   negotiate with before any HTTP traffic crosses the wire,
   and the SSL negotiation occurs before HTTP too, Apache can
   only serve up one certificate per IP address.

   It's described in detail here:

     http://www.onlamp.com/pub/a/apache/2005/02/17/apacheckbk.html

   along with some workarounds and their costs.

   You can configure a single virtual host like this, if you're
   prepared to have your users see warning messages about your
   certificates not matching:

   NameVirtualHost example.com:443
   <VirtualHost example.com:443>
     ServerName example.com
     ServerAlias example.org
     ServerAlias www.example.com

     .....
     ssl stuff....
     svn stuff....

   </VirtualHost>

daniel

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Thu Mar 10 08:56:18 2005

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.