View Single Post

  #1 (permalink)  
Old 02-10-2008
Kai Schaetzl
 
Posts: n/a
Default Apache 2.2 lost some SSL functionality from 2.0?

I want to move my systems from CentOS4 to 5 and am currently checking out
the differences going from Apache 2.0 to 2.2. Basically I don't find much
and can reuse most of my configuration. But I found a showstopper issue
with the SSL module. It cannot identify name-based virtual hosts anymore.
I see there is an FAQ at
http://httpd.apache.org/docs/2.2/ssl...q.html#vhosts2
and I see this FAQ is available for 2.0 as well. Just that it is wrong at
least for 2.0.
This *was* possible with Apache 2.0 and I don't see that change listed in
the Upgrade 2.2 guide.

In case you don't believe me that this was possible on Apache 2.0 just
configure two name-based virtual hosts on same IP and port no. and use the
same certificate for both (*). It was possible with 1.3 as well. On 2.2 it
goes straight to the first virtual host.
Obviously earlier Apache versions grabbed the Host: header after the SSL
negotiation and used that to identify the virtual host. This functionality
must have been dropped. Anyone knows if there a way to reenable it without
changes to the code?

(*) which means it's only useful for use with wildcard certificates, but
then it really makes sense and saves on a lot of IP numbers.

Kai