Re: change cipher suite of a virtual host without restarting apache

Matt Stevenson <[email protected]>
Newsgroups gmane.comp.apache.mod-ssl.user
Message-ID <[email protected]>
AFAIK this is not possible with a virtual host.
However there is no reason you can't run each virtual
host as it's own server (split off into own config,
use the -f and -d options). It really depends on the
your load and flexibility requirements. Currently some
servers I manage have 50+ apache servers. While not
the best for memory and efficency, the flexibility is
good.

Regards
Matt

--- Sourabh Bhandari <[email protected]>
wrote:

> Hi, 
> 
> I've Apache running as reverse proxy on Linux with
> SSL
> (mod_ssl). 
> 
> There are multiple sites behind the Apache. 
> 
> There are cases when cipher-suite or certificate for
> a
> site has to be changed. In that case Apache is
> restarted to take changes in account. 
> 
> This results in disconnection of all the connected
> users (whether they are connected for site for which
> changes are done or for the sie for which nothing
> has
> been changed).
> 
> Is there a way I can modify cipher-suite or
> certificate so that I dont need to restart the
> Apache
> and all the users session stay valid and working. (I
> wont mind if users connected to site for which
> changes
> are made get disconnected).
> 
> Thanks in advance, 
> 
> -Sourabh
> 
> __________________________________________________
> Do You Yahoo!?
> Tired of spam?  Yahoo! Mail has the best spam
> protection around 
> http://mail.yahoo.com 
>
______________________________________________________________________
> Apache Interface to OpenSSL (mod_ssl)               
>    www.modssl.org
> User Support Mailing List                     
> [email protected]
> Automated List Manager                           
> [email protected]
> 


		
____________________________________________________ 
Yahoo! Sports 
Rekindle the Rivalries. Sign up for Fantasy Football 
http://football.fantasysports.yahoo.com
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [email protected]
Automated List Manager                            [email protected]
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.