14 messages in ru.sysoev.nginxRe: Multiple SSL
FromSent OnAttachments
Eire AngelMay 28, 2008 8:07 am 
jeff emmingerMay 28, 2008 9:20 am 
CalomelMay 28, 2008 9:34 am 
Corey DonohoeMay 28, 2008 9:43 am 
Sean AllenMay 28, 2008 4:09 pm 
Eire AngelMay 28, 2008 7:17 pm 
CalomelMay 29, 2008 7:57 am 
Eire AngelMay 29, 2008 9:16 am 
Ed WMay 29, 2008 10:24 am 
CalomelMay 29, 2008 12:32 pm 
Ed WMay 29, 2008 4:32 pm 
eliottMay 29, 2008 9:41 pm 
Sean AllenJun 4, 2008 3:32 pm 
Sean AllenJun 5, 2008 8:14 am 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:Re: Multiple SSLActions...
From:Eire Angel (chri@public.gmane.org)
Date:May 28, 2008 7:17:10 pm
List:ru.sysoev.nginx

Yes I am using one IP with multiple domains/certs so depending on the server and if i can get another IP I'm pretty certain Virtual servers can get more IP's w/o adding hardware?

"nginx cannot see the URL until the handshake has been completed"

makes sense for customer security

Calomel <ngin@public.gmane.org> wrote: Chris,

Are you using one ip address for multiple domain/ssl certs? If so, I believe you may need to assign each cert to a separate ip.

Are you using a separate host names in one domain? You might need a wild card certificate (*.yourdomain.com). There is a problem in that nginx needs to see the request URL before deciding which cert to use in the handshake. However, nginx cannot see the URL until the handshake has been completed. See http://wiki.apache.org/httpd/NameBasedSSLVHosts for more details.

If you get it working or you have a different setup then send mail to the list.

-- Calomel @ https://calomel.org Open Source Research and Reference

On Wed, May 28, 2008 at 08:07:38AM -0700, Eire Angel wrote:

I just added a second SSL site to Nginx uising two different certs. The problem is that both sites are pulling the one cert. I have each of them served on 443 and serving their own domains. Just like i would think port 80 to work with multiple sites but its not. Is there another port i should use for the second instance say 444 ? and just action that in rails ? anyone experience similar ?

Chris