I want to move my systems from CentOS4 to 5 and am currently checking out
the differences going from Apache 2.0 to 2.2. Basically I don't find much
and can reuse most of my configuration. But I found a showstopper issue
with the SSL module. It cannot identify name-based virtual hosts anymore.
I see there is an FAQ at
http://httpd.apache.org/docs/2.2/ssl...q.html#vhosts2
and I see this FAQ is available for 2.0 as well. Just that it is wrong at
least for 2.0.
This *was* possible with Apache 2.0 and I don't see that change listed in
the Upgrade 2.2 guide.
In case you don't believe me that this was possible on Apache 2.0 just
configure two name-based virtual hosts on same IP and port no. and use the
same certificate for both (*). It was possible with 1.3 as well. On 2.2 it
goes straight to the first virtual host.
Obviously earlier Apache versions grabbed the Host: header after the SSL
negotiation and used that to identify the virtual host. This functionality
must have been dropped. Anyone knows if there a way to reenable it without
changes to the code?
(*) which means it's only useful for use with wildcard certificates, but
then it really makes sense and saves on a lot of IP numbers.
Kai