Multiple SSL VirtualHosts (with multiple certs) with OHS
314710Dec 28 2006 — edited Oct 2 2008I'm trying to run multiple SSL virtual hosts, with multiple SSL Certificates from an OHS instance (this is an HTMLDB/APEX install). OHS 9.0.4.0.0. (I realize i should probably patch/upgrade this.)
I'm having a few problems. Before I go posting my full config files I wanted to find out what the right approach is (I may be way up the wrong creek).
I have regular non-ssl traffic and a single ssl site (port 443) running fine. When I added the second site I would get a certificate mismatch - the server was presenting the certificate for the pre-existing ssl domain - apparently this is a known issue - can't run sites with different ssl certificates over the same IP/port.
So I tried setting up a second ssl port and I'm running into problems there. Has anyone else done this?
If I specify a second "listen" port... e.g.
Listen 443
Listen 445
I try and start the HTTP server and it crashes! (If I comment out the second listen server starts fine.. but isn't listening on 445...) I get error messages like (in ssl_engine.log):
[27/Dec/2006 16:05:02 01784] [error] SSL call to NZ function nzos_Handshake failed with error 28860 (server xxx.example.com:443, client xxx.xxx.xxx.xxx)
[27/Dec/2006 16:05:02 01784] [error] SSL fatal alert
which I think are from the mod_ossl module - so I'm no longer in "generic" apache territory.
It's totally possible that I've got such a mess in the config files now that I'm causing a problem, or maybe there is a bug in this version, or maybe I'm trying to do something that mod_ossl won't allow - so i'd like to know if someone else has done this.
Thanks.