Re: Apache vhosts problem -> solved

if you don't want to screw up your logging, modify the vhost
template: /opt/ispman/templates/vhost.conf.template
put in the ssl things, copy all name-related entries (like
<perl>$ispmanVhostIpAddress</perl>, etc) from the simple port 80 part,
and you are done.
note though, that when adding ssl vhosts, you have to physically stop
apache, wait till all child processes died and then start again.
if you need, you can find a simplified version of my ssl vhost template
here:
http://lipilee.hu/downloads/vhosts.conf.template

good luck :)
lip


On Mon, 2005-03-28 at 10:55 -0300, [email protected] wrote:
> Can someone point what I need to have several vhost ssl enablet using just one
> certificat and just one IP ?
> 
> Thanks,
> 
> Alex
> 
> Citando Atif Ghaffar <[email protected]>:
> 
> > Then just setup stunnel to forward all traffic from 443 to 80 using
> > your certificate.
> > Do some benchmarks. Using stunnel is quite fast.
> >
> > best regards
> >
> >
> >
> >
> > On Fri, 11 Mar 2005 15:40:31 +0100, lipilee <[email protected]> wrote:
> > > I have to use SSL anyway, and also, I have to use only one SSL cert for
> > > all hosts as I only have one IP... (Actually, two, but that doesn't
> > > really make a difference when you have around 50 clients does it.)
> > > SSL making Apache slower is a good point. Question: does it matter how
> > > many SSL vhosts I have? I mean, will it make Apache slower to have
> > > several SSL hosts, even if they are not always used?
> > > In this case I might want to think of a way to determine which clients
> > > need SSL...
> > > Also, how come stunnel+SSL+Apache use less resources? Would I be able to
> > > use one SSL cert per vhost if I use stunnel?
> > >
> > > Thanks,
> > > lip
> > >
> > > Atif Ghaffar wrote:
> > >
> > > >Hi,
> > > >
> > > >How do you want to manage the certificates for all these vhosts?
> > > >
> > > >If you are using just one certificate for all vhosts, then you may
> > > >want to use a ssl proxy instead.
> > > >
> > > >Apache runs faster without SSL enabled.
> > > >
> > > >We use stunnel to proxy 443 to 80. Its just one line of configuration
> > > >and it handles the SSL offloading quiet well.
> > > >
> > > >best regards
> > > >
> > > >Atif
> > > >
> > > >
> > > >On Thu, 10 Mar 2005 00:09:24 +0100, lipilee <[email protected]> wrote:
> > > >
> > > >
> > > >>...or at least worked around.
> > > >>I had to do smth about this issue as I changed
> > > >>/opt/ispman/templates/vhosts.conf.template to have virtualhosts both for
> > > >>port 80 and port 443. (practically speaking, I want to grant SSL enabled
> > > >>vhosts by default to all my clients.)
> > > >>
> > > >>
> > > >
> > > >
> > > >-------------------------------------------------------
> > > >SF email is sponsored by - The IT Product Guide
> > > >Read honest & candid reviews on hundreds of IT Products from real users.
> > > >Discover which products truly live up to the hype. Start reading now.
> > > >http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
> > > >_______________________________________________
> > > >Ispman-users mailing list
> > > >[email protected]
> > > >https://lists.sourceforge.net/lists/listinfo/ispman-users
> > > >
> > > >
> > > >
> > >
> > > --
> > >   lipilee                                   [email protected]
> > >   +36-30-280-1740                           icq: 29533018
> > > __________________________________________________________________
> > > key fingerprint: 71C7 1CC5 ED1A DCF5 089D C78F 875A 5AD7 1E2C 2B5C
> > > pgp public key: http://lipilee.hu/about/pubkey-lipilee.gpg
> > >
> > > -------------------------------------------------------
> > > SF email is sponsored by - The IT Product Guide
> > > Read honest & candid reviews on hundreds of IT Products from real users.
> > > Discover which products truly live up to the hype. Start reading now.
> > > http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
> > > _______________________________________________
> > > Ispman-users mailing list
> > > [email protected]
> > > https://lists.sourceforge.net/lists/listinfo/ispman-users
> > >
> >
> >
> > -------------------------------------------------------
> > SF email is sponsored by - The IT Product Guide
> > Read honest & candid reviews on hundreds of IT Products from real users.
> > Discover which products truly live up to the hype. Start reading now.
> > http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
> > _______________________________________________
> > Ispman-users mailing list
> > [email protected]
> > https://lists.sourceforge.net/lists/listinfo/ispman-users
> >
> 
> 
> 
> 
> -----------------------------------------------------------------
> Esta mensagem foi enviada pelo IMP, o Internet Messaging Program.
> 
> 
> -------------------------------------------------------
> SF email is sponsored by - The IT Product Guide
> Read honest & candid reviews on hundreds of IT Products from real users.
> Discover which products truly live up to the hype. Start reading now.
> http://ads.osdn.com/?ad_ide95&alloc_id396&op=click
> _______________________________________________
> Ispman-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/ispman-users
> 
-- 
    lipilee                                   [email protected]
    +36-30-280-1740                           icq: 29533018
__________________________________________________________________
key fingerprint: 71C7 1CC5 ED1A DCF5 089D C78F 875A 5AD7 1E2C 2B5C
pgp public key: http://gpg.moveone.info/pubkey-lipilee.gpg




-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click