Web Server Configuration
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
 
User Name:
Password:
Remember me
 
Go Back   Dev Articles Community ForumsWeb DesignWeb Server Configuration

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Display Modes
 
Unread Dev Articles Community Forums Sponsor:
  #1  
Old September 29th, 2005, 10:49 PM
LongStone LongStone is offline
Registered User
Dev Articles Newbie (0 - 499 posts)
 
Join Date: Sep 2005
Posts: 1 LongStone User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 18 m 35 sec
Reputation Power: 0
Exclamation Help needed Apache mod_ssl named virtual hosts

after many many hours of googling i'm getting a bit frustrated.
Our production box is Win server 2003 running Apache + php.
we have one client we site set up with SSL that is running fine adding the second one is a nightmare.
here are the relevant conf directives.


ssl.conf:
Listen 443
Listen 444

#domain 1
<VirtualHost XXX.XXX.XXX.XXX:443>
DocumentRoot "c:/webpath../https/"
ServerName www.domain_1.ca:443
ServerAdmin user@domain_1.ca
ErrorLog logs/error_log
TransferLog logs/access_log
SSLEngine on
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSL v2:+EXP:+eNULL
SSLCertificateFile "c:/apachepath/apache2/conf/ssl/www.domain_1.ca.crt"
SSLCertificateKeyFile "c:/apachepath/apache2/conf/ssl/www.domain_1.ca.key"
<Files ~ "\.(cgi|shtml|phtml|php3?)$">
SSLOptions +StdEnvVars
</Files>
SetEnvIf User-Agent ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
CustomLog logs/ssl_request_log \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>


#domain 2
<VirtualHost XXX.XXX.XXX.XXX:444>
DocumentRoot "c:/webpath../https/"
ServerName www.domain_1.ca:444
ServerAdmin user@domain_1.ca
ErrorLog logs/error_log
TransferLog logs/access_log
SSLEngine on
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSL v2:+EXP:+eNULL
SSLCertificateFile "c:/apachepath/apache2/conf/ssl/www.domain_2.ca.crt"
SSLCertificateKeyFile "c:/apachepath/apache2/conf/ssl/www.domain_2.ca.key"
<Files ~ "\.(cgi|shtml|phtml|php3?)$">
SSLOptions +StdEnvVars
</Files>
SetEnvIf User-Agent ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
CustomLog logs/ssl_request_log \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>



httpd.conf
Listen XXX.XXX.XXX.XXX:80
Listen XXX.XXX.XXX.XXX:443
Listen XXX.XXX.XXX.XXX:444

.....

#<IfModule mod_ssl.c>
Include conf/ssl.conf
#</IfModule>

NameVirtualHost XXX.XXX.XXX.XXX:443

<VirtualHost XXX.XXX.XXX.XXX:443>
ServerName www.domain_1.ca
DocumentRoot "C:/webpath/https/"
Alias assets "C:/webpath/client_1dir/assets/"
SSLEngine on
SSLCipherSuite ALL:!ADH:!EXP56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2: +EXP:+eNULL
SSLCertificateFile "c:/apachepath/apache2/conf/ssl/domain_1.ca.crt"
SSLCertificateKeyFile "c:/apachepath/apache2/conf/ssl/domain_1.ca.key"
</VirtualHost>

NameVirtualHost XXX.XXX.XXX.XXX:444

<VirtualHost XXX.XXX.XXX.XXX:444>
ServerName www.domain_2.ca
DocumentRoot "C:/webpath/https/"
Alias assets "C:/webpath/client_2dir/assets/"
SSLEngine on
SSLCipherSuite ALL:!ADH:!EXP56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2: +EXP:+eNULL
SSLCertificateFile "c:/apachepath/apache2/conf/ssl/www.domain_2.ca.crt"
SSLCertificateKeyFile "c:/apachepath/apache2/conf/ssl/www.domain_2.ca.key"
</VirtualHost>



<VirtualHost www.domain_1.ca:80>
DocumentRoot "C:/webpath/client_1dir"
ServerName www.shopsickkids.ca
<Directory "C:/webpath/client_1dir">
allow from all
Options +Indexes
</Directory>
ServerAlias domain_1.ca
</VirtualHost>


<VirtualHost www.domain_2.ca:80>
ServerName www.domain_2.ca
DocumentRoot "C:/webpath/client_2dir"
<Directory "C:/webpath/client_2dir">
allow from all
Options +Indexes
</Directory>
ServerAlias domain_2.ca
</VirtualHost>

/end conf info

both domains apps off to the "C:/webpath/https/" for a secure checkout...

when the conf directives for the second domain are uncommented I get
SSLPassPhraseDialog builtin is not supported on Win32
in the apache error log, no problem with the first domain only. the apache and mod_ssl docs are pretty useless as far a what to do in that the don't explain what
SSLPassPhraseDialog exec:/path/to/program
is supposed to point to other than the generic example "pp-filter".

both keys were created in the same fashion so I don't understand where the issue is or what program I can use for PassPhrase-filter. A dialogue for passphrase does not come up on a manual restart

Reply With Quote
Reply

Viewing: Dev Articles Community ForumsWeb DesignWeb Server Configuration > Help needed Apache mod_ssl named virtual hosts


Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump


Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 





© 2003-2008 by Developer Shed. All rights reserved. DS Cluster 3 hosted by Hostway