enterprise-support team mailing list archive

Thread
Date

Re: [Question #233966]: Clients cannot connect with SSL enabled in Apache2. Seems to be related to either Name Virtual hosts or SNI in Ubuntu 12.04

To: enterprise-support@xxxxxxxxxxxxxxxxxxx
From: Thomas Krüger <question233966@xxxxxxxxxxxxxxxxxxxxx>
Date: Wed, 14 Aug 2013 09:06:29 -0000
Reply-to: question233966@xxxxxxxxxxxxxxxxxxxxx
Sender: bounces@xxxxxxxxxxxxx

Question #233966 on apache2 in Ubuntu changed:
https://answers.launchpad.net/ubuntu/+source/apache2/+question/233966

    Status: Open => Answered

Thomas Krüger proposed the following answer:
You have to use Name Virtual Hosts to distinguish the requested site by
hostname.

You should define two  virtual hosts per site. One for port 80 and one for port 443 (with the SSL directives), preferably with the IP that is used:
<VirtualHost 1.2.3.4:80> and <VirtualHost 1.2.3.4:443>

The sections MUST contain a ServerName line, which SHOULD match the CN of the certificate.
It can contain a ServerAlias line with additional hostnames.

http://httpd.apache.org/docs/2.2/vhosts/name-based.html

-- 
You received this question notification because you are a member of
Ubuntu Server/Client Support Team, which is an answer contact for
apache2 in Ubuntu.