Re: SSL proxy

Eckard Wille a écrit :
> [email protected] schrieb:
>> I have several web servers currently that all have the same IP, but
>> different host names, and I have an apache that uses mod_proxy to direct
>> requests to the correct internal server to process the request.
>>
>> I would like to use my apache proxy server to provide SSL encryption and
>> decryption, and not have to have each individual server do that.
>>
>> Is that possible?
>>
>> I have worked with virtual host configuration, and I have tried to 
>> set up
>> the ssl stuff so that this will work, but so far I have not been 
>> successful.
>>
>> I have tried to search for this, but the closest I have come is proxy 
>> to an
>> ssl server.  I want to have the proxy server do the ssl stuff for me.
>
> Hi,
>
> you can not use SSL with virtual hosting, see 
> http://www.modssl.org/docs/2.8/ssl_faq.html#ToC47
>
> You'll have to get a dedicated ip for every single ssl host. You could 
> play around with one ssl proxy on your single ip with a common name 
> and do some rewriting according to an url praefix matching the secure 
> parts of your backend virtual hosts; decide yourself if this config 
> work is worth it.
I thought that using wildcard or multi-cn certificates will work ?
In this case, only one certificate is needeed for a range of Vhost

-- 
Gilles CUESTA - Logiciels Libres
69139920

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFIdxOR545quQSHen8RAs2UAKDTpfXdP7oojVv2cN2NJ8mOLhajTgCeJ0ID
Z09jBS0mqyjDumkRoPmHoBc=
=TFva
-----END PGP SIGNATURE-----