Skip to Main Content

Integration

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

Multiple SSL VirtualHosts (with multiple certs) with OHS

314710Dec 28 2006 — edited Oct 2 2008
I'm trying to run multiple SSL virtual hosts, with multiple SSL Certificates from an OHS instance (this is an HTMLDB/APEX install). OHS 9.0.4.0.0. (I realize i should probably patch/upgrade this.)

I'm having a few problems. Before I go posting my full config files I wanted to find out what the right approach is (I may be way up the wrong creek).

I have regular non-ssl traffic and a single ssl site (port 443) running fine. When I added the second site I would get a certificate mismatch - the server was presenting the certificate for the pre-existing ssl domain - apparently this is a known issue - can't run sites with different ssl certificates over the same IP/port.

So I tried setting up a second ssl port and I'm running into problems there. Has anyone else done this?

If I specify a second "listen" port... e.g.

Listen 443
Listen 445

I try and start the HTTP server and it crashes! (If I comment out the second listen server starts fine.. but isn't listening on 445...) I get error messages like (in ssl_engine.log):

[27/Dec/2006 16:05:02 01784] [error] SSL call to NZ function nzos_Handshake failed with error 28860 (server xxx.example.com:443, client xxx.xxx.xxx.xxx)
[27/Dec/2006 16:05:02 01784] [error] SSL fatal alert

which I think are from the mod_ossl module - so I'm no longer in "generic" apache territory.

It's totally possible that I've got such a mess in the config files now that I'm causing a problem, or maybe there is a bug in this version, or maybe I'm trying to do something that mod_ossl won't allow - so i'd like to know if someone else has done this.

Thanks.
Comments
Locked Post
New comments cannot be posted to this locked post.
Post Details
Locked on Oct 30 2008
Added on Dec 28 2006
9 comments
2,592 views