03-04-07 12:14 AM
"voipfc" <voipfc@googlemail.com> writes:
> Is there a way to configure Apache 2 to use SSL on virtual hosts using
> the same IP and port (443)?
No, unless you always present the same certificate and the user clicks
to accept mismatching certifcates. This is a wart in the
specification of HTTPS, which requires certificate exchange before the
session starts (i.e. before the Host: header is seen).
> I am looking for a way to ensure that data passed between server and
> client is encrypted. The authenticity of the server is not that
> important.
If someone can spoof the server, encryption doesn't do you much good.
[ Post a follow-up to this message ]
|