« June 2002 | Main | May 2003 »

September 12, 2002

Fun with SSL (NOT!)

So, I've been playing a lot with SSL and Apache tonight.

I was playing a lot with IIS and WebSphere at work today, so this was (maybe?) to balance out the scales of justice? :-)

I've been trying to get "Named Virtual Hosts" to work for SSL hosts. Spent a large number of hours investigating and playing and tweaking some sites that I run. Push comes to shove, what did I learn?

http://www.mail-archive.com/modssl-users@modssl.org/msg14901.html

It won't work. Ever. The url referenced in that thread http://httpd.apache.org/docs-2.0/ssl/ssl_faq.html#ToC47 says it pretty succinctly:

"... in order to dispatch to the correct virtual server Apache has to know the Host HTTP header field. For this the HTTP request header has to be read. This cannot be done before the SSL handshake is finished. But the information is already needed at the SSL handshake phase. Bingo!"

Makes perfect sense once you think about it... Sigh.


I'm not getting into work right now. Suffice it to say that I've had a very long week, tomorrow's going to be even longer, and Friday BETTER be really short.

Posted by aland at 12:21 AM | Comments (0)