<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Imagine It Productions Blog &#187; Thursday</title>
	<atom:link href="http://imagineitproductions.com/blog/index.php/category/thursday/feed/" rel="self" type="application/rss+xml" />
	<link>http://imagineitproductions.com/blog</link>
	<description>The PC Builder, The Gamer, The Developer</description>
	<lastBuildDate>Wed, 24 Nov 2010 04:24:11 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
		<item>
		<title>LAMP Thursday &#8211; SNI</title>
		<link>http://imagineitproductions.com/blog/index.php/2010/11/18/lamp-thursday-sni/</link>
		<comments>http://imagineitproductions.com/blog/index.php/2010/11/18/lamp-thursday-sni/#comments</comments>
		<pubDate>Thu, 18 Nov 2010 22:08:07 +0000</pubDate>
		<dc:creator>Steve Y</dc:creator>
				<category><![CDATA[Advanced]]></category>
		<category><![CDATA[Hardware]]></category>
		<category><![CDATA[LAMP]]></category>
		<category><![CDATA[Linux]]></category>
		<category><![CDATA[Technology]]></category>
		<category><![CDATA[Thursday]]></category>

		<guid isPermaLink="false">http://imagineitproductions.com/blog/?p=433</guid>
		<description><![CDATA[Recently, my company decided to point two different domain names at the same web server with two separate SSL certificates. Normally, Apache can handle such requests as long as certain requirements are met. These requirements include: Having each domain name point to 2 different IP addresses on the same computer. This also requires having two]]></description>
			<content:encoded><![CDATA[<p><a href="http://httpd.apache.org/"><img class="alignleft" title="Apache HTTP Server Logo" src="http://httpd.apache.org/images/httpd_logo_wide.gif" alt="" width="800" height="72" /></a><br />
Recently, my company decided to point two different domain names at the same web server with two separate SSL certificates. Normally, Apache can handle such requests as long as certain requirements are met.  These requirements include:</p>
<ol>
<li>Having each domain name point to 2 different IP addresses on the same computer.  This also requires having two different network cards on the same computer.<br />
<code> </code></p>
<pre><code>Listen 80

 &lt;VirtualHost 172.20.30.40&gt;
 DocumentRoot /www/example1
 ServerName www.example1.com
 &lt;/VirtualHost&gt;

 &lt;VirtualHost 172.20.30.50&gt;
 DocumentRoot /www/example2
 ServerName www.example2.org
 &lt;/VirtualHost&gt; </code>
</pre>
</li>
<li>Having each domain point to the same IP, but to different ports (for instance, 80 and 8080).<code> </code>
<pre><code>Listen 80
 Listen 8080

 NameVirtualHost 172.20.30.40:80
 NameVirtualHost 172.20.30.40:8080

 &lt;VirtualHost 172.20.30.40:80&gt;
 ServerName www.example1.com
 DocumentRoot /www/domain-80
 &lt;/VirtualHost&gt;

 &lt;VirtualHost 172.20.30.40:8080&gt;
 ServerName www.example2.com
 DocumentRoot /www/domain-8080
 &lt;/VirtualHost&gt;</code></pre>
</li>
<li>SNI or Server Name Indication <a href="http://en.wikipedia.org/wiki/Server_Name_Indication">[SNI]</a></li>
</ol>
<p>You can obviously rock a wiki on this term (I even gave you the link above), but I&#8217;ll at least point out here a small definition and the application of SNI to our server.  Server Name Indication is the ability of the server and client to map two separate domain names with two different SSL certificates to the same IP address on the same port (i.e. IP address 192.168.1.100, port 443).</p>
<p>Normally, this situation wreaks havoc on web servers, and they are forced to ignore the separation and serve up the first SSL certificate it sees in a configuration file. However, if you navigate to the domain that does not match that default certificate, the browser will give you an SSL error (see below).<br />
<a href="http://imagineitproductions.com/blog/wp-content/uploads/2010/11/load-error.png"><img class="aligncenter size-medium wp-image-434" title="load-error" src="http://imagineitproductions.com/blog/wp-content/uploads/2010/11/load-error-300x175.png" alt="" width="300" height="175" /></a><br />
When Apache released their HTTP Server version 2.2.12, the software auto-corrected this issue, but it takes a while for browsers, especially old and unsupported ones, to catch up, if they ever do.  KDE Konqueror, IE on Windows XP, Safari on Windows XP, Windows Mobile older than 6.5, and namely Blackberry browser (all versions) suffer from this issue.</p>
<p>The main concern for my company is Blackberry Browser, as we have just started working on a mobile version of our website which uses the SSL certificates.  Our only other option is to use #1 from the list above.  This alternative is advantageous because it will also provide some redundancy to our system, as well.</p>
<p>It took me a little while to research this on the Internet, even in our Google-infested day and age.  I hope this helps anyone with a similar issue, or even anyone just looking to learn more about Apache.</p>
<p>Cheers!</p>
]]></content:encoded>
			<wfw:commentRss>http://imagineitproductions.com/blog/index.php/2010/11/18/lamp-thursday-sni/feed/</wfw:commentRss>
		<slash:comments>411</slash:comments>
		</item>
	</channel>
</rss>

