[TriLUG] Apache + SSL +Virtual Hosts + Reverse Proxy  Tanner
Lovelace clubjuggler at gmail.com Mon Oct 25 09:05:21 EDT 2004
On Mon, 25 Oct 2004 07:43:33 -0400, Aaron S. Joyner <aaron at
joyner.ws> wrote: >  From a purely academic / technical
perspective, this is true, and not > true, depending on if you
want to bend the rules, and accept some > browser-side errors.
The reason for the assertion that Phil mentions, > is that the
certificate exchange is the first thing that happens when > you
connect to an SSL port (443).  The certificate exchange contains
the > name of the site you will be talking to, as part of the
certificate. > So, once the browser has established the
connection with a cert > different than the site it wants to
talk to, it will obviously through > an error stating that the
site name and the certificate don't match. > There's no way that
Apache can know ahead of time which certificate to > give back,
which is why SSL hosting requires a dedicated IP for each site.
Normally, yes, this is tru