ssl certificate problems consolidating 2 ssl sites on one server

Discussion in 'Apache' started by kevinyeandel, Apr 18, 2009.

  1. #1
    Hi

    trying to consolidate 2 SSL get a linux/apache server set up with two https virtual hosts.

    After the config of httpd.conf and ssl.conf I do a clean start.

    I'm prompted for the rsa password of siteA.com
    siteB should also prompt I would expect - it too has a password on the Certificate. It doesn't ask so I immediately assume something isn't right.

    When I go to FF and goto https://siteA.com

    The certificate is not trusted because the issuer certificate is unknown.
    Firefox tells me the certificate is trusted to siteB

    It sees the cert of site B but prompts for the password for site A.


    In my ssl.conf I have
    Listen 443
    Listen 444

    Listen 443
    Listen 444
    <VirtualHost *:443>
    ServerName www.siteA.com:443
    DocumentRoot "/web/www/siteA"
    SSLCertificateFile /web/certificates/siteA/www.siteA.com.crt
    SSLCertificateKeyFile /web/certificates/siteA/www.siteA.com.key
    </VirtualHost>

    <VirtualHost *:444>
    ServerName www.siteB.com:444
    DocumentRoot "/web/www/siteB"
    SSLCertificateFile /web/certificates/siteB/www.siteB.com.crt
    SSLCertificateKeyFile /web/certificates/siteB/siteB.key
    SSLCertificateChainFile /web/certificates/siteB/gd_bundle.crt
    </VirtualHost>


    in httpd.conf I have


    httpd.conf

    Listen 80
    <VirtualHost *:80>
    DocumentRoot /web/www/siteA
    ServerName www.siteA.com
    </VirtualHost>

    <VirtualHost *:80>
    DocumentRoot /web/www/siteB
    ServerName www.siteB.com
    </VirtualHost>


    Any clues here will be most appreciated.

    Many thanks

    Kevin
     
    kevinyeandel, Apr 18, 2009 IP
  2. kailash

    kailash Well-Known Member

    Messages:
    1,248
    Likes Received:
    42
    Best Answers:
    0
    Trophy Points:
    190
    #2
    You will need to assign two separate IP addresses to both the web sites.

    Kailash
     
    kailash, Apr 19, 2009 IP
  3. sandeeppai

    sandeeppai Peon

    Messages:
    23
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #3
    SSL certificate requires dedicated ip and if you need to secure two domains then you need to assign different ip addresses in the virtual host entries else it will not work
     
    sandeeppai, Apr 25, 2009 IP