[WBEL-users] Multiple https

Johnny Hughes mailing-lists@hughesjr.com
Wed, 29 Sep 2004 06:41:50 -0500


On Wed, 2004-09-29 at 04:23 -0700, bishop wrote:
> 
> Johnny Hughes wrote:
> > On Wed, 2004-09-29 at 01:36 +0200, Thorsten Voß wrote:
> > 
> >>Plug n Play schrieb:
> >>
> >>
> >>>What is the best configuration when Iÿm going to host multiple sites with
> >>>
> >>>https but I have only 1 static IP.
> >>>
> >>
> >>Hi Marc,
> >>
> >>as far as I know, you'll need a static IP for EVERY single certificate 
> >>that you want to install.
> >>
> >>BTW: if you have only one IP you can only create name based virtual hosts!
> >>
> > 
> > But, I think the certificate for the main site will be used to first
> > decrypt the https if there is not a separate IP for each site (since the
> > http headers can't be read before encryption).
> 
> I've seen that they're revamping HTTPS to be TLS-HTTP, and then we'll 
> finally have many certs per IP.
> 
> Anyone's REALLY interested, I can (take an hour and) dig up the 
> reference I sent to a buddy about a month ago.  After I cleaned up.
> 
>   - bish

Or they could make mod-ssl be able to decrypt just the http headers ...
and redirect.  I read something about that the other day as well.  I was
looking for a solution to use a https reverse proxy.
-----------------------
Johnny Hughes
<http://www.HughesJR.com/>