[clue-tech] Multiple SSL VHosts in Apache on same port and IP

[Collins Richey]

On Sun, Mar 8, 2009 at 7:57 AM, Jed S. Baer <cluemail at jbaer.cotse.net> wrote:
> On Sat, 07 Mar 2009 23:20:00 -0700
> Mike Staver wrote:
>
>> I've seen this a lot over the years and always hoped for a resolution -
>> where you can't host multiple SSL enabled websites on the same IP using
>> Apache.  I found an informative article I wanted to share:
>>
>> http://daniel-lange.com/archives/2-Multiple-Apache-VHosts-on-the-same-IP-and-port.html
>>
>> Maybe this is old news to some - but I just found it, and it gives me a
>> ray of hope for things to come if he's right. Does anyone know if this
>> is supported in a recent Linux distros? I'd be very curious to give it
>> a try as I'm pretty excited about the possibilities going forward.
>
> Well, that's pretty interesting. I had always assumed it was a
> non-problem, since the various places I've used for web hosting in a
> shared environment have indicated https is available. Since I've never
> used it, I've never looked into how they provide it. I know they offer
> the use of a shared certificate (i.e. use the server's certificate, not
> your own), but IIRC using your own was possible. Since I didn't need the
> capability, I never inquired how they set it up.
>

After reading the blog, it sounds like this is potentially a big security hole.

-- 
Collins Richey
     If you fill your heart with regrets of yesterday and the worries
     of tomorrow, you have no today to be thankful for.