9 Oct
2012
9 Oct
'12
12:48 p.m.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Nepujde, non-SNI SSL funguje na principu, kdy se SSL spojeni sestavi
jeste driv, nez se cokoliv pipne o HTTP, takze by porad nebylo jak
rozlisit, kterou stranku chces.
S pozdravem
Pavel Snajdr
+421 948 816 186 | +420 720 107 791 | 110-010-956
CTO of Relbit | Predseda vpsFree.cz, o.s. | RHCE
http://relbit.com | http://vpsfree.cz | https://www.redhat.com
On 10/09/2012 02:46 PM, semanmar(a)gmail.com wrote:
Este mi napadla jedna moznost - cisto teoreticky
(nemam odskusane,
takze prosim nekamenovat). Nedali by sa vytvorit 2 interne
virtualne IPcky, na tych by bezali 2 instancie apache a na verejnu
IP by sa zavesil nginx ako reverse proxy pre dane 2 domeny aj s
konfiguraciou SSL? Lebo pokial viem, keby sa 2 domeny
nakonfigurovali v nginx name-based, tak by client stale dostaval
certifikat defaultny (prveho nakonfigurovaneho), ale ked sa v
konfigu priradia jednotlive IPcky + server names, mohlo by to
fungovat... Co si o tom myslite?
Ale ako som pisal, nemam odskusane, je to len taky napad.
S pozdravom/Kind regards Martin Seman
Sent from my BlackBerry® smartphone
-----Original Message----- From: Pavel Snajdr <snajpa(a)snajpa.net>
Sender: community-list-bounces(a)lists.vpsfree.cz Date: Tue, 09 Oct
2012 14:26:48 To: <community-list(a)lists.vpsfree.cz> Reply-To:
"vpsFree.cz Community list" <community-list(a)lists.vpsfree.cz>
Subject: Re: [vpsFree.cz: community-list] Apache SSL
Ja vim, ale umyslne na ne kaslu a nepodporuju je. Management je tam
v 99% banda neschopnejch idiotu :)
Oficialni podpora skoncila, tak maji smulu :) Na extended support
do 2014 jim aspon ja osobne kaslu :)
S pozdravem
Pavel Snajdr
+421 948 816 186 | +420 720 107 791 | 110-010-956 CTO of
Relbit | Predseda vpsFree.cz, o.s. | RHCE http://relbit.com |
http://vpsfree.cz | https://www.redhat.com
On 10/09/2012 02:24 PM, Michal Krajčírovič wrote:
Bohuzel, XP ma porad rada korporaci... V RB
jedeme na XP, treba
KB pokud vim taky.
Michal Krajcirovic
Dne 9.10.2012 14:22, Pavel Snajdr napsal(a): Na
druhou stranu,
Windows XP jsou ted uz akorat v extended support,
oficialni
podpora uz skoncila - ma cenu je jeste vubec resit?
S pozdravem
Pavel Snajdr
+421 948 816 186 | +420 720 107 791 |
110-010-956 CTO
of Relbit | Predseda vpsFree.cz, o.s. | RHCE
http://relbit.com | http://vpsfree.cz |
https://www.redhat.com
On 10/09/2012 02:20 PM, semanmar(a)gmail.com
wrote:
>>> Tak tak. IE6 ti bude hadzat error 403. Ale existuje na to
>>> workaround a to je option "SSLStrictSNIVHostCheck". Ak to
>>> vypnes tak browser ktory nepodporuje SNI bude presmerovany
>>> na na site ktora je definovana ako prva v configu. Len
>>> neviem, ci by ti taketo nieco vyhovovalo...
>>>
>>> S pozdravom/Kind regards Martin Seman
>>>
>>> Sent from my BlackBerry® smartphone
>>>
>>> -----Original Message----- From: Tomas Srnka
>>> <tomas.srnka(a)gmail.com> Sender:
>>> community-list-bounces(a)lists.vpsfree.cz Date: Tue, 9 Oct
>>> 2012 14:07:31 To: vpsFree.cz Community
>>> list<community-list(a)lists.vpsfree.cz> Reply-To: "vpsFree.cz
>>> Community list" <community-list(a)lists.vpsfree.cz>
>>> Subject: Re: [vpsFree.cz: community-list] Apache SSL
>>>
>>> _______________________________________________
>>> Community-list mailing list Community-list(a)lists.vpsfree.cz
>>> http://lists.vpsfree.cz/listinfo/community-list
>>> _______________________________________________
>>> Community-list mailing list Community-list(a)lists.vpsfree.cz
>>> http://lists.vpsfree.cz/listinfo/community-list
> _______________________________________________ Community-list
> mailing list Community-list(a)lists.vpsfree.cz
> http://lists.vpsfree.cz/listinfo/community-list
_______________________________________________
Community-list
mailing list Community-list(a)lists.vpsfree.cz
http://lists.vpsfree.cz/listinfo/community-list
_______________________________________________ Community-list
mailing list Community-list(a)lists.vpsfree.cz
http://lists.vpsfree.cz/listinfo/community-list
_______________________________________________ Community-list
mailing list Community-list(a)lists.vpsfree.cz
-----BEGIN PGP
SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iF4EAREIAAYFAlB0HRcACgkQdh+64ds5DaZ5VQEAySpA1i/LaU3jbFOgObLO29Va
r7ZtgklcuSgSQMKotJsA/RFro6kIh9zYsK13Q7hec9wpkM+pcyq8GHhyXzx6Cv/K
=ZIoE
-----END PGP SIGNATURE-----