Apache2 i ogranicavanje SSL-a na samo jedan vhost.

Article View: hr.comp.programiranje.www

Article #9

Back to hr.comp.programiranje.www Previous Next

From: Vedran Furac
Date: Tue, 12 Oct 2004 20:53

32 lines
2236 bytes

Postavio sam apache2 server na linux, sredio certifikate i enableao SSL 
i sve radi, ali ne ba� onako kako bi ja htio. Imam defaultni vhost i 
htio sam dodati jo� jedan koji �e biti SSL-only. Dakle htio bi kad 
upi�em u browser dobiti:

http://ime.kompa - OK, defaultni ne-SSL vhost
https://ime.kompa - GRE�KA, Tu nije podr�an https, ve� *samo* http.
     ^
http://ssl.ime.kompa - GRE�KA, Tu nije podr�an http, ve� *samo* https.
https://ssl.ime.kompa - OK, SSL vhost
     ^

No ono �to ja uvijek dobijem je:

http://ime.kompa - OK, defaultni ne-SSL vhost
https://ime.kompa - dobijem isto �to i s https://ssl.ime.kompa.
     ^				   	     ^
http://ssl.ime.kompa - dobijem isto �to i s http://ime.kompa.
https://ssl.ime.kompa - OK, SSL vhost
     ^

Dakle �elim dvije stvari:
1. Da SSL protokol radi *samo* na jednom vhostu, a ne da https zahtjev 
na bilo koji vhost automatski resolva jedini konfigurirani ssl vhost.

2. Da se na SSL vhost mo�e spajati *samo* preko SSL protokola, a ne da 
http zahtjev na SSL vhost automatski resolva prvi (defaultni) ne-SSL vhost.

Ovo drugo bi se trebalo srediti preko SSLRequireSSL direktive, ali nisam 
uspio.

U /etc/hosts su ime.kompa i ssl.ime.kompa definirani kao 192.168.0.1

Technical Details

Message-ID: <7rst32xjac.ln2@firestorm.home>

Path: arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!fu-berlin.de!uni-berlin.de!not-for-mail

Show Full Headers

Complete Article Headers

X-Google-Thread: 110c93,378f10e865a2a07,start
X-Google-Thread: f8423,378f10e865a2a07,start
X-Google-Attributes: gid110c93,gidf8423,public
X-Google-Language: SERBIAN,Latin2
Path: arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!fu-berlin.de!uni-berlin.de!not-for-mail
From: Vedran Furac <vedranf@riteh.hr>
Newsgroups: hr.comp.programiranje.www,hr.comp.linux
Subject: Apache2 i ogranicavanje SSL-a na samo jedan vhost.
Followup-To: hr.comp.programiranje.www
Date: Tue, 12 Oct 2004 22:53:27 +0200
Organization: Home
Lines: 32
Message-ID: <7rst32xjac.ln2@firestorm.home>
Reply-To: vedranf@riteh.hr
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-2; format=flowed
Content-Transfer-Encoding: 8bit
X-Trace: news.uni-berlin.de v6tVG/GX2XlF2bkA/ABvLQXbF3uWq79PMh/6a/62pE+QQRkZ8C
X-Orig-Path: firestorm.home!not-for-mail
User-Agent: Mozilla Thunderbird 0.8 (X11/20040913)
X-Accept-Language: en-us, en
X-Leafnode-NNTP-Posting-Host: 192.168.0.1