-1

I want to serve multiple domains on my server. Apache 2.2.3, Openssl 0.98 installed to my server. I create private key, crt files from startssl.com. Now I wrote ssl.conf like this.

NameVirtualHost IpAddr:443

<VirtualHost IpAddr:443>
  SSLEngine on
  SSLProtocol all -SSLv2
  SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:!RC4:+HIGH:+MEDIUM
  SSLCertificateFile /etc/httpd/ssl/first.crt
  SSLCertificateKeyFile /etc/httpd/ssl/first.key
  SSLCertificateChainFile /etc/httpd/ssl/1_root_bundle.crt
  ServerName first.loginface.com
  DocumentRoot /var/www/html/first
</VirtualHost>

<VirtualHost IpAddr:443>
  SSLEngine on
  SSLProtocol all -SSLv2
  SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:!RC4:+HIGH:+MEDIUM
  SSLCertificateFile /etc/httpd/ssl/second.crt
  SSLCertificateKeyFile /etc/httpd/ssl/second.key
  SSLCertificateChainFile /etc/httpd/ssl/1_root_bundle.crt
  ServerName second.loginface.com
  DocumentRoot /var/www/html/faceanalyser
</VirtualHost>

Now I restarted httpd. first domain works well, but second domain doesn't verified. What's wrong with this? Thanks.

Zuiche
  • 13

1 Answers1

3

Upgrade. Stock C5 doesn't support SNI, which is the technology required to serve multiple domains on a single IP under SSL. As you will see from the linked answer (and others) shoehorning it into C5 is painful, and moreover, you've only got about two years of life left on that OS (though in your case, you're way out of patch and unsupported already; 5.1 has been EoLed for many years) so this is as good a reason as any to upgrade.

MadHatter
  • 81,580