[no subject]

You could do one base site with different contexts i.e. <a  rel="nofollow" href="https://sitename/name1";>https://sitename/name1</a>
and <a  rel="nofollow" href="https://sitename/name2";>https://sitename/name2</a>.  Then you only have to have one Cert.  I suspect
this is not what you are looking for though.

Sorry I can't be of more help.  This is how it has worked for me in my job
though.  I run several SSL sites for my company.   We haven't found a way
around this and it even caused us to recently purchase ARIN space to get
enough IP addresses to handle our growth.

Allan

On Wed, Aug 24, 2005 at 06:15:53PM -0400, James P. Kinney III wrote:
&gt; I am looking at setting up an ssl-enabled web server in the dmz. As I
&gt; only have a few real IP addresses, I am looking at using internal IP
&gt; (10.0.*) addresses to handle the ssl-cert requirements of unique IP for
&gt; each namespace.
&gt; 
&gt; What I'm stumped on is how to get <a  rel="nofollow" href="https://name1";>https://name1</a> AND <a  rel="nofollow" href="https://name2";>https://name2</a> to
&gt; both get through the firewall and point to the correct virtual interface
&gt; IP address on the DMX server. Do I need to write a userspace tool that
&gt; interfaces with iptables to read the server name from the IP stack?
&gt; 
&gt; Can this be done with an apache proxy on the firewall?
&gt; -- 
&gt; James P. Kinney III          \Changing the mobile computing world/
&gt; CEO &amp; Director of Engineering \          one Linux user         /
&gt; Local Net Solutions,LLC        \           at a time.          /
&gt; 770-493-8244                    \.___________________________./
&gt; <a  rel="nofollow" href="http://www.localnetsolutions.com";>http://www.localnetsolutions.com</a>
&gt; 
&gt; GPG ID: 829C6CA7 James P. Kinney III (M.S. Physics)
&gt; &lt;jkinney at localnetsolutions.com&gt;
&gt; Fingerprint = 3C9E 6366 54FC A3FE BA4D 0659 6190 ADC3 829C 6CA7



&gt; _______________________________________________
&gt; Ale mailing list
&gt; Ale at ale.org
&gt; <a  rel="nofollow" href="http://www.ale.org/mailman/listinfo/ale";>http://www.ale.org/mailman/listinfo/ale</a>


-- 
 __^__                                          __^__
( ___ )----------------------------------------( ___ )
 | / | &quot;Engineers aren't boring people,         | \ |
 | / | we just get excited about boring things&quot; | \ |
 |___|                 --Anon                   |___|
(_____)----------------------------------------(_____)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available



</pre>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<hr>
<ul><li><strong>Follow-Ups</strong>:
<ul>
<li><strong><a name="00476" href="msg00476.html">[ale] apache, ssl, DMZ, brain calcification</a></strong>
<ul><li><em>From:</em> jkinney at localnetsolutions.com (James P. Kinney III)</li></ul></li>
</ul></li></ul>
<!--X-Follow-Ups-End-->
<!--X-References-->
<ul><li><strong>References</strong>:
<ul>
<li><strong><a name="00404" href="msg00404.html">[ale] apache, ssl, DMZ, brain calcification</a></strong>
<ul><li><em>From:</em> jkinney at localnetsolutions.com (James P. Kinney III)</li></ul></li>
</ul></li></ul>
<!--X-References-End-->
<!--X-BotPNI-->
<ul>
<li>Prev by Date:
<strong><a href="msg00473.html">[ale] ssh remote command</a></strong>
</li>
<li>Next by Date:
<strong><a href="msg00475.html">[ale] Gizmo for Linux</a></strong>
</li>
<li>Previous by thread:
<strong><a href="msg00404.html">[ale] apache, ssl, DMZ, brain calcification</a></strong>
</li>
<li>Next by thread:
<strong><a href="msg00476.html">[ale] apache, ssl, DMZ, brain calcification</a></strong>
</li>
<li>Index(es):
<ul>
<li><a href="maillist.html#00474"><strong>Date</strong></a></li>
<li><a href="threads.html#00474"><strong>Thread</strong></a></li>
</ul>
</li>
</ul>

<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
</body>
</html>