Ahojte vsetci, potreboval by som trosku pomoc... Na VPSku potrebujem nainstalovat do Apache 2 rozne SSL certifiakty pre 2 rozne domeny (nie subdomeny)... Otazka: Je mozne do Apache (Virtual Host) nainstalovat 2 rozne SSL certifikaty na HTTPS ak ma server iba jednu IP adresu? Alebo potrebujem 2 rozne IP adresy, aby sa dali tie Virtual Hosty rozlisit? Myslim si, ze treba 2 IP adresy, len pre istotu sa pytam, mozno to tu niekto uz niekedy riesil, tak by mi ulahcil googlenie :-) Dakujem a vsetkym prajem pekny den. Miso
Potřebuješ 2 IP. Michal Dobsovic wrote:
Ahojte vsetci,
potreboval by som trosku pomoc...
Na VPSku potrebujem nainstalovat do Apache 2 rozne SSL certifiakty pre 2 rozne domeny (nie subdomeny)...
Otazka: Je mozne do Apache (Virtual Host) nainstalovat 2 rozne SSL certifikaty na HTTPS ak ma server iba jednu IP adresu? Alebo potrebujem 2 rozne IP adresy, aby sa dali tie Virtual Hosty rozlisit?
Myslim si, ze treba 2 IP adresy, len pre istotu sa pytam, mozno to tu niekto uz niekedy riesil, tak by mi ulahcil googlenie :-)
Dakujem a vsetkym prajem pekny den.
Miso
_______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Nepotrebujes :) Staci ti procist si: http://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI Navic, vpsFree uz dalsi IP adresy k virtualum davat nebude - nemame odkud. S pozdravem Pavel Snajdr +421 948 816 186 | +420 720 107 791 | 110-010-956 CTO of Relbit | Predseda vpsFree.cz, o.s. | RHCE http://relbit.com | http://vpsfree.cz | https://www.redhat.com On 10/09/2012 02:06 PM, Jirka Bourek wrote:
Potřebuješ 2 IP.
Michal Dobsovic wrote:
Ahojte vsetci,
potreboval by som trosku pomoc...
Na VPSku potrebujem nainstalovat do Apache 2 rozne SSL certifiakty pre 2 rozne domeny (nie subdomeny)...
Otazka: Je mozne do Apache (Virtual Host) nainstalovat 2 rozne SSL certifikaty na HTTPS ak ma server iba jednu IP adresu? Alebo potrebujem 2 rozne IP adresy, aby sa dali tie Virtual Hosty rozlisit?
Myslim si, ze treba 2 IP adresy, len pre istotu sa pytam, mozno to tu niekto uz niekedy riesil, tak by mi ulahcil googlenie :-)
Dakujem a vsetkym prajem pekny den.
Miso
_______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list _______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iF4EAREIAAYFAlB0FUgACgkQdh+64ds5DaacIwEAvDkrPhF/nMu4aX9hIoWoO1lz Ahyd6+iuTEGo+PoU8eoA/AhK9GH5dpX9JjBtbOb3uJOMddC1wHmRG6C2izbTvn87 =eIK4 -----END PGP SIGNATURE-----
Citace: ========= Prerequisites to use SNI The client browser must also support SNI. Here are some browsers that do: ========= Pokud to nemáš na hraní, ale pro zákazníka, potřebuješ 2 IP. Pavel Snajdr wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
Nepotrebujes :)
Staci ti procist si:
http://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI
Navic, vpsFree uz dalsi IP adresy k virtualum davat nebude - nemame odkud.
S pozdravem
Pavel Snajdr
+421 948 816 186 | +420 720 107 791 | 110-010-956 CTO of Relbit | Predseda vpsFree.cz, o.s. | RHCE http://relbit.com | http://vpsfree.cz | https://www.redhat.com
On 10/09/2012 02:06 PM, Jirka Bourek wrote:
Potřebuješ 2 IP.
Michal Dobsovic wrote:
Ahojte vsetci,
potreboval by som trosku pomoc...
Na VPSku potrebujem nainstalovat do Apache 2 rozne SSL certifiakty pre 2 rozne domeny (nie subdomeny)...
Otazka: Je mozne do Apache (Virtual Host) nainstalovat 2 rozne SSL certifikaty na HTTPS ak ma server iba jednu IP adresu? Alebo potrebujem 2 rozne IP adresy, aby sa dali tie Virtual Hosty rozlisit?
Myslim si, ze treba 2 IP adresy, len pre istotu sa pytam, mozno to tu niekto uz niekedy riesil, tak by mi ulahcil googlenie :-)
Dakujem a vsetkym prajem pekny den.
Miso
_______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list _______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iF4EAREIAAYFAlB0FUgACgkQdh+64ds5DaacIwEAvDkrPhF/nMu4aX9hIoWoO1lz Ahyd6+iuTEGo+PoU8eoA/AhK9GH5dpX9JjBtbOb3uJOMddC1wHmRG6C2izbTvn87 =eIK4 -----END PGP SIGNATURE----- _______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list
Cau, ak ti nevadi, ze ti nepojde spravne SSL na IE6 a podobne starych browseroch, tak netreba 2 IP. Proste spravis 2x virtualhost pre :443 vzdy s roznym servername a SSL certifikatom. Maj sa, Tomas On Oct 9, 2012, at 1:58 PM, Michal Dobsovic <dobsovic@itlearning.sk> wrote:
Ahojte vsetci, potreboval by som trosku pomoc... Na VPSku potrebujem nainstalovat do Apache 2 rozne SSL certifiakty pre 2 rozne domeny (nie subdomeny)...
Otazka: Je mozne do Apache (Virtual Host) nainstalovat 2 rozne SSL certifikaty na HTTPS ak ma server iba jednu IP adresu? Alebo potrebujem 2 rozne IP adresy, aby sa dali tie Virtual Hosty rozlisit?
Myslim si, ze treba 2 IP adresy, len pre istotu sa pytam, mozno to tu niekto uz niekedy riesil, tak by mi ulahcil googlenie :-)
Dakujem a vsetkym prajem pekny den.
Miso
_______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list
Tak tak. IE6 ti bude hadzat error 403. Ale existuje na to workaround a to je option "SSLStrictSNIVHostCheck". Ak to vypnes tak browser ktory nepodporuje SNI bude presmerovany na na site ktora je definovana ako prva v configu. Len neviem, ci by ti taketo nieco vyhovovalo... S pozdravom/Kind regards Martin Seman Sent from my BlackBerry® smartphone -----Original Message----- From: Tomas Srnka <tomas.srnka@gmail.com> Sender: community-list-bounces@lists.vpsfree.cz Date: Tue, 9 Oct 2012 14:07:31 To: vpsFree.cz Community list<community-list@lists.vpsfree.cz> Reply-To: "vpsFree.cz Community list" <community-list@lists.vpsfree.cz> Subject: Re: [vpsFree.cz: community-list] Apache SSL _______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Na druhou stranu, Windows XP jsou ted uz akorat v extended support, oficialni podpora uz skoncila - ma cenu je jeste vubec resit? S pozdravem Pavel Snajdr +421 948 816 186 | +420 720 107 791 | 110-010-956 CTO of Relbit | Predseda vpsFree.cz, o.s. | RHCE http://relbit.com | http://vpsfree.cz | https://www.redhat.com On 10/09/2012 02:20 PM, semanmar@gmail.com wrote:
Tak tak. IE6 ti bude hadzat error 403. Ale existuje na to workaround a to je option "SSLStrictSNIVHostCheck". Ak to vypnes tak browser ktory nepodporuje SNI bude presmerovany na na site ktora je definovana ako prva v configu. Len neviem, ci by ti taketo nieco vyhovovalo...
S pozdravom/Kind regards Martin Seman
Sent from my BlackBerry® smartphone
-----Original Message----- From: Tomas Srnka <tomas.srnka@gmail.com> Sender: community-list-bounces@lists.vpsfree.cz Date: Tue, 9 Oct 2012 14:07:31 To: vpsFree.cz Community list<community-list@lists.vpsfree.cz> Reply-To: "vpsFree.cz Community list" <community-list@lists.vpsfree.cz> Subject: Re: [vpsFree.cz: community-list] Apache SSL
_______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list _______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iF4EAREIAAYFAlB0FwQACgkQdh+64ds5DaYEKAEAw5B08Hi8vH+UuPQy4OYBsnol m+FNX114z9/WewGn+I4BAN0d3wv8bF67R+QKDIAS7CkIsVwPhp2DmQkIuDl5Y5wy =SYmt -----END PGP SIGNATURE-----
Bohuzel, XP ma porad rada korporaci... V RB jedeme na XP, treba KB pokud vim taky. Michal Krajcirovic Dne 9.10.2012 14:22, Pavel Snajdr napsal(a):
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
Na druhou stranu,
Windows XP jsou ted uz akorat v extended support, oficialni podpora uz skoncila - ma cenu je jeste vubec resit?
S pozdravem
Pavel Snajdr
+421 948 816 186 | +420 720 107 791 | 110-010-956 CTO of Relbit | Predseda vpsFree.cz, o.s. | RHCE http://relbit.com | http://vpsfree.cz | https://www.redhat.com
On 10/09/2012 02:20 PM, semanmar@gmail.com wrote:
Tak tak. IE6 ti bude hadzat error 403. Ale existuje na to workaround a to je option "SSLStrictSNIVHostCheck". Ak to vypnes tak browser ktory nepodporuje SNI bude presmerovany na na site ktora je definovana ako prva v configu. Len neviem, ci by ti taketo nieco vyhovovalo...
S pozdravom/Kind regards Martin Seman
Sent from my BlackBerry® smartphone
-----Original Message----- From: Tomas Srnka <tomas.srnka@gmail.com> Sender: community-list-bounces@lists.vpsfree.cz Date: Tue, 9 Oct 2012 14:07:31 To: vpsFree.cz Community list<community-list@lists.vpsfree.cz> Reply-To: "vpsFree.cz Community list" <community-list@lists.vpsfree.cz> Subject: Re: [vpsFree.cz: community-list] Apache SSL
_______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list _______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iF4EAREIAAYFAlB0FwQACgkQdh+64ds5DaYEKAEAw5B08Hi8vH+UuPQy4OYBsnol m+FNX114z9/WewGn+I4BAN0d3wv8bF67R+QKDIAS7CkIsVwPhp2DmQkIuDl5Y5wy =SYmt -----END PGP SIGNATURE----- _______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Ja vim, ale umyslne na ne kaslu a nepodporuju je. Management je tam v 99% banda neschopnejch idiotu :) Oficialni podpora skoncila, tak maji smulu :) Na extended support do 2014 jim aspon ja osobne kaslu :) S pozdravem Pavel Snajdr +421 948 816 186 | +420 720 107 791 | 110-010-956 CTO of Relbit | Predseda vpsFree.cz, o.s. | RHCE http://relbit.com | http://vpsfree.cz | https://www.redhat.com On 10/09/2012 02:24 PM, Michal Krajčírovič wrote:
Bohuzel, XP ma porad rada korporaci... V RB jedeme na XP, treba KB pokud vim taky.
Michal Krajcirovic
Dne 9.10.2012 14:22, Pavel Snajdr napsal(a): Na druhou stranu,
Windows XP jsou ted uz akorat v extended support, oficialni podpora uz skoncila - ma cenu je jeste vubec resit?
S pozdravem
Pavel Snajdr
+421 948 816 186 | +420 720 107 791 | 110-010-956 CTO of Relbit | Predseda vpsFree.cz, o.s. | RHCE http://relbit.com | http://vpsfree.cz | https://www.redhat.com
On 10/09/2012 02:20 PM, semanmar@gmail.com wrote:
Tak tak. IE6 ti bude hadzat error 403. Ale existuje na to workaround a to je option "SSLStrictSNIVHostCheck". Ak to vypnes tak browser ktory nepodporuje SNI bude presmerovany na na site ktora je definovana ako prva v configu. Len neviem, ci by ti taketo nieco vyhovovalo...
S pozdravom/Kind regards Martin Seman
Sent from my BlackBerry® smartphone
-----Original Message----- From: Tomas Srnka <tomas.srnka@gmail.com> Sender: community-list-bounces@lists.vpsfree.cz Date: Tue, 9 Oct 2012 14:07:31 To: vpsFree.cz Community list<community-list@lists.vpsfree.cz> Reply-To: "vpsFree.cz Community list" <community-list@lists.vpsfree.cz> Subject: Re: [vpsFree.cz: community-list] Apache SSL
_______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list _______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list _______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list
_______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iF4EAREIAAYFAlB0GAcACgkQdh+64ds5DabzrAD+LEdRAOaHy8U9yi4t2WFvao3F 97WhKsK7tvdXr5o4VoQBAOu3nSl6szm2z/GCXdjhAM7wFlyN0qRsVuZYaCUDUt5T =ygek -----END PGP SIGNATURE-----
Este mi napadla jedna moznost - cisto teoreticky (nemam odskusane, takze prosim nekamenovat). Nedali by sa vytvorit 2 interne virtualne IPcky, na tych by bezali 2 instancie apache a na verejnu IP by sa zavesil nginx ako reverse proxy pre dane 2 domeny aj s konfiguraciou SSL? Lebo pokial viem, keby sa 2 domeny nakonfigurovali v nginx name-based, tak by client stale dostaval certifikat defaultny (prveho nakonfigurovaneho), ale ked sa v konfigu priradia jednotlive IPcky + server names, mohlo by to fungovat... Co si o tom myslite? Ale ako som pisal, nemam odskusane, je to len taky napad. S pozdravom/Kind regards Martin Seman Sent from my BlackBerry® smartphone -----Original Message----- From: Pavel Snajdr <snajpa@snajpa.net> Sender: community-list-bounces@lists.vpsfree.cz Date: Tue, 09 Oct 2012 14:26:48 To: <community-list@lists.vpsfree.cz> Reply-To: "vpsFree.cz Community list" <community-list@lists.vpsfree.cz> Subject: Re: [vpsFree.cz: community-list] Apache SSL -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Ja vim, ale umyslne na ne kaslu a nepodporuju je. Management je tam v 99% banda neschopnejch idiotu :) Oficialni podpora skoncila, tak maji smulu :) Na extended support do 2014 jim aspon ja osobne kaslu :) S pozdravem Pavel Snajdr +421 948 816 186 | +420 720 107 791 | 110-010-956 CTO of Relbit | Predseda vpsFree.cz, o.s. | RHCE http://relbit.com | http://vpsfree.cz | https://www.redhat.com On 10/09/2012 02:24 PM, Michal Krajčírovič wrote:
Bohuzel, XP ma porad rada korporaci... V RB jedeme na XP, treba KB pokud vim taky.
Michal Krajcirovic
Dne 9.10.2012 14:22, Pavel Snajdr napsal(a): Na druhou stranu,
Windows XP jsou ted uz akorat v extended support, oficialni podpora uz skoncila - ma cenu je jeste vubec resit?
S pozdravem
Pavel Snajdr
+421 948 816 186 | +420 720 107 791 | 110-010-956 CTO of Relbit | Predseda vpsFree.cz, o.s. | RHCE http://relbit.com | http://vpsfree.cz | https://www.redhat.com
On 10/09/2012 02:20 PM, semanmar@gmail.com wrote:
Tak tak. IE6 ti bude hadzat error 403. Ale existuje na to workaround a to je option "SSLStrictSNIVHostCheck". Ak to vypnes tak browser ktory nepodporuje SNI bude presmerovany na na site ktora je definovana ako prva v configu. Len neviem, ci by ti taketo nieco vyhovovalo...
S pozdravom/Kind regards Martin Seman
Sent from my BlackBerry® smartphone
-----Original Message----- From: Tomas Srnka <tomas.srnka@gmail.com> Sender: community-list-bounces@lists.vpsfree.cz Date: Tue, 9 Oct 2012 14:07:31 To: vpsFree.cz Community list<community-list@lists.vpsfree.cz> Reply-To: "vpsFree.cz Community list" <community-list@lists.vpsfree.cz> Subject: Re: [vpsFree.cz: community-list] Apache SSL
_______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list _______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list _______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list
_______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iF4EAREIAAYFAlB0GAcACgkQdh+64ds5DabzrAD+LEdRAOaHy8U9yi4t2WFvao3F 97WhKsK7tvdXr5o4VoQBAOu3nSl6szm2z/GCXdjhAM7wFlyN0qRsVuZYaCUDUt5T =ygek -----END PGP SIGNATURE----- _______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Nepujde, non-SNI SSL funguje na principu, kdy se SSL spojeni sestavi jeste driv, nez se cokoliv pipne o HTTP, takze by porad nebylo jak rozlisit, kterou stranku chces. S pozdravem Pavel Snajdr +421 948 816 186 | +420 720 107 791 | 110-010-956 CTO of Relbit | Predseda vpsFree.cz, o.s. | RHCE http://relbit.com | http://vpsfree.cz | https://www.redhat.com On 10/09/2012 02:46 PM, semanmar@gmail.com wrote:
Este mi napadla jedna moznost - cisto teoreticky (nemam odskusane, takze prosim nekamenovat). Nedali by sa vytvorit 2 interne virtualne IPcky, na tych by bezali 2 instancie apache a na verejnu IP by sa zavesil nginx ako reverse proxy pre dane 2 domeny aj s konfiguraciou SSL? Lebo pokial viem, keby sa 2 domeny nakonfigurovali v nginx name-based, tak by client stale dostaval certifikat defaultny (prveho nakonfigurovaneho), ale ked sa v konfigu priradia jednotlive IPcky + server names, mohlo by to fungovat... Co si o tom myslite?
Ale ako som pisal, nemam odskusane, je to len taky napad.
S pozdravom/Kind regards Martin Seman
Sent from my BlackBerry® smartphone
-----Original Message----- From: Pavel Snajdr <snajpa@snajpa.net> Sender: community-list-bounces@lists.vpsfree.cz Date: Tue, 09 Oct 2012 14:26:48 To: <community-list@lists.vpsfree.cz> Reply-To: "vpsFree.cz Community list" <community-list@lists.vpsfree.cz> Subject: Re: [vpsFree.cz: community-list] Apache SSL
Ja vim, ale umyslne na ne kaslu a nepodporuju je. Management je tam v 99% banda neschopnejch idiotu :)
Oficialni podpora skoncila, tak maji smulu :) Na extended support do 2014 jim aspon ja osobne kaslu :)
S pozdravem
Pavel Snajdr
+421 948 816 186 | +420 720 107 791 | 110-010-956 CTO of Relbit | Predseda vpsFree.cz, o.s. | RHCE http://relbit.com | http://vpsfree.cz | https://www.redhat.com
On 10/09/2012 02:24 PM, Michal Krajčírovič wrote:
Bohuzel, XP ma porad rada korporaci... V RB jedeme na XP, treba KB pokud vim taky.
Michal Krajcirovic
Dne 9.10.2012 14:22, Pavel Snajdr napsal(a): Na druhou stranu,
Windows XP jsou ted uz akorat v extended support, oficialni podpora uz skoncila - ma cenu je jeste vubec resit?
S pozdravem
Pavel Snajdr
+421 948 816 186 | +420 720 107 791 | 110-010-956 CTO of Relbit | Predseda vpsFree.cz, o.s. | RHCE http://relbit.com | http://vpsfree.cz | https://www.redhat.com
On 10/09/2012 02:20 PM, semanmar@gmail.com wrote:
Tak tak. IE6 ti bude hadzat error 403. Ale existuje na to workaround a to je option "SSLStrictSNIVHostCheck". Ak to vypnes tak browser ktory nepodporuje SNI bude presmerovany na na site ktora je definovana ako prva v configu. Len neviem, ci by ti taketo nieco vyhovovalo...
S pozdravom/Kind regards Martin Seman
Sent from my BlackBerry® smartphone
-----Original Message----- From: Tomas Srnka <tomas.srnka@gmail.com> Sender: community-list-bounces@lists.vpsfree.cz Date: Tue, 9 Oct 2012 14:07:31 To: vpsFree.cz Community list<community-list@lists.vpsfree.cz> Reply-To: "vpsFree.cz Community list" <community-list@lists.vpsfree.cz> Subject: Re: [vpsFree.cz: community-list] Apache SSL
_______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list _______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list _______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list
_______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list _______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list _______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iF4EAREIAAYFAlB0HRcACgkQdh+64ds5DaZ5VQEAySpA1i/LaU3jbFOgObLO29Va r7ZtgklcuSgSQMKotJsA/RFro6kIh9zYsK13Q7hec9wpkM+pcyq8GHhyXzx6Cv/K =ZIoE -----END PGP SIGNATURE-----
Dakujem vsetkym zucastnenym za naozaj rychle odpovede :-) Kazdopadne kedze budem potrebovat, aby sa mohli korektne prihlasit aj klienti so starsimi prehliadacmi a hlavne s WinXP, kedze IE 7 to na XP nepodporuje, iba na Viste... tak budem muset najst nejake riesenie, asi to cele budem muset hodit na samostatnu VPSku :-) Dakujem este raz vsetkym za odpovede.. Miso Prajem vám príjemný zvyšok dňa a zostávam s pozdravom, Michal Dobšovič riaditeľ spoločnosti IT LEARNING SLOVAKIA, s.r.o. Kominárska 2, 4 831 04 Bratislava tel.: +421(0)2 5023 4364 mobil: +421 (0)948 233 369 e-mail: dobsovic@itlearning.sk www.itlearning.sk www.skolenie.eu -----Original Message----- From: community-list-bounces@lists.vpsfree.cz [mailto:community-list-bounces@lists.vpsfree.cz] On Behalf Of semanmar@gmail.com Sent: Tuesday, October 09, 2012 2:47 PM To: vpsFree.cz Community list Subject: Re: [vpsFree.cz: community-list] Apache SSL Este mi napadla jedna moznost - cisto teoreticky (nemam odskusane, takze prosim nekamenovat). Nedali by sa vytvorit 2 interne virtualne IPcky, na tych by bezali 2 instancie apache a na verejnu IP by sa zavesil nginx ako reverse proxy pre dane 2 domeny aj s konfiguraciou SSL? Lebo pokial viem, keby sa 2 domeny nakonfigurovali v nginx name-based, tak by client stale dostaval certifikat defaultny (prveho nakonfigurovaneho), ale ked sa v konfigu priradia jednotlive IPcky + server names, mohlo by to fungovat... Co si o tom myslite? Ale ako som pisal, nemam odskusane, je to len taky napad. S pozdravom/Kind regards Martin Seman Sent from my BlackBerry® smartphone -----Original Message----- From: Pavel Snajdr <snajpa@snajpa.net> Sender: community-list-bounces@lists.vpsfree.cz Date: Tue, 09 Oct 2012 14:26:48 To: <community-list@lists.vpsfree.cz> Reply-To: "vpsFree.cz Community list" <community-list@lists.vpsfree.cz> Subject: Re: [vpsFree.cz: community-list] Apache SSL -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Ja vim, ale umyslne na ne kaslu a nepodporuju je. Management je tam v 99% banda neschopnejch idiotu :) Oficialni podpora skoncila, tak maji smulu :) Na extended support do 2014 jim aspon ja osobne kaslu :) S pozdravem Pavel Snajdr +421 948 816 186 | +420 720 107 791 | 110-010-956 CTO of Relbit | Predseda vpsFree.cz, o.s. | RHCE http://relbit.com | http://vpsfree.cz | https://www.redhat.com On 10/09/2012 02:24 PM, Michal Krajčírovič wrote:
Bohuzel, XP ma porad rada korporaci... V RB jedeme na XP, treba KB pokud vim taky.
Michal Krajcirovic
Dne 9.10.2012 14:22, Pavel Snajdr napsal(a): Na druhou stranu,
Windows XP jsou ted uz akorat v extended support, oficialni podpora uz skoncila - ma cenu je jeste vubec resit?
S pozdravem
Pavel Snajdr
+421 948 816 186 | +420 720 107 791 | 110-010-956 CTO of Relbit | Predseda vpsFree.cz, o.s. | RHCE http://relbit.com | http://vpsfree.cz | https://www.redhat.com
On 10/09/2012 02:20 PM, semanmar@gmail.com wrote:
Tak tak. IE6 ti bude hadzat error 403. Ale existuje na to workaround a to je option "SSLStrictSNIVHostCheck". Ak to vypnes tak browser ktory nepodporuje SNI bude presmerovany na na site ktora je definovana ako prva v configu. Len neviem, ci by ti taketo nieco vyhovovalo...
S pozdravom/Kind regards Martin Seman
Sent from my BlackBerry® smartphone
-----Original Message----- From: Tomas Srnka <tomas.srnka@gmail.com> Sender: community-list-bounces@lists.vpsfree.cz Date: Tue, 9 Oct 2012 14:07:31 To: vpsFree.cz Community list<community-list@lists.vpsfree.cz> Reply-To: "vpsFree.cz Community list" <community-list@lists.vpsfree.cz> Subject: Re: [vpsFree.cz: community-list] Apache SSL
_______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list _______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list _______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list
_______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iF4EAREIAAYFAlB0GAcACgkQdh+64ds5DabzrAD+LEdRAOaHy8U9yi4t2WFvao3F 97WhKsK7tvdXr5o4VoQBAOu3nSl6szm2z/GCXdjhAM7wFlyN0qRsVuZYaCUDUt5T =ygek -----END PGP SIGNATURE----- _______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list _______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list
ked nevadi, tak si kup cert so "subject alternative names" a ten zafunguje na obe... Gusto Dňa 9. októbra 2012 14:50, Michal Dobsovic <dobsovic@itlearning.sk>napísal(-a):
Dakujem vsetkym zucastnenym za naozaj rychle odpovede :-)
Kazdopadne kedze budem potrebovat, aby sa mohli korektne prihlasit aj klienti so starsimi prehliadacmi a hlavne s WinXP, kedze IE 7 to na XP nepodporuje, iba na Viste... tak budem muset najst nejake riesenie, asi to cele budem muset hodit na samostatnu VPSku :-)
Dakujem este raz vsetkym za odpovede..
Miso
Prajem vám príjemný zvyšok dňa a zostávam s pozdravom,
Michal Dobšovič riaditeľ spoločnosti
IT LEARNING SLOVAKIA, s.r.o. Kominárska 2, 4 831 04 Bratislava tel.: +421(0)2 5023 4364 mobil: +421 (0)948 233 369 e-mail: dobsovic@itlearning.sk www.itlearning.sk www.skolenie.eu
-----Original Message----- From: community-list-bounces@lists.vpsfree.cz [mailto: community-list-bounces@lists.vpsfree.cz] On Behalf Of semanmar@gmail.com Sent: Tuesday, October 09, 2012 2:47 PM To: vpsFree.cz Community list Subject: Re: [vpsFree.cz: community-list] Apache SSL
Este mi napadla jedna moznost - cisto teoreticky (nemam odskusane, takze prosim nekamenovat). Nedali by sa vytvorit 2 interne virtualne IPcky, na tych by bezali 2 instancie apache a na verejnu IP by sa zavesil nginx ako reverse proxy pre dane 2 domeny aj s konfiguraciou SSL? Lebo pokial viem, keby sa 2 domeny nakonfigurovali v nginx name-based, tak by client stale dostaval certifikat defaultny (prveho nakonfigurovaneho), ale ked sa v konfigu priradia jednotlive IPcky + server names, mohlo by to fungovat... Co si o tom myslite?
Ale ako som pisal, nemam odskusane, je to len taky napad.
S pozdravom/Kind regards Martin Seman
Sent from my BlackBerry® smartphone
-----Original Message----- From: Pavel Snajdr <snajpa@snajpa.net> Sender: community-list-bounces@lists.vpsfree.cz Date: Tue, 09 Oct 2012 14:26:48 To: <community-list@lists.vpsfree.cz> Reply-To: "vpsFree.cz Community list" <community-list@lists.vpsfree.cz> Subject: Re: [vpsFree.cz: community-list] Apache SSL
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
Ja vim, ale umyslne na ne kaslu a nepodporuju je. Management je tam v 99% banda neschopnejch idiotu :)
Oficialni podpora skoncila, tak maji smulu :) Na extended support do 2014 jim aspon ja osobne kaslu :)
S pozdravem
Pavel Snajdr
+421 948 816 186 | +420 720 107 791 | 110-010-956 CTO of Relbit | Predseda vpsFree.cz, o.s. | RHCE http://relbit.com | http://vpsfree.cz | https://www.redhat.com
On 10/09/2012 02:24 PM, Michal Krajčírovič wrote:
Bohuzel, XP ma porad rada korporaci... V RB jedeme na XP, treba KB pokud vim taky.
Michal Krajcirovic
Dne 9.10.2012 14:22, Pavel Snajdr napsal(a): Na druhou stranu,
Windows XP jsou ted uz akorat v extended support, oficialni podpora uz skoncila - ma cenu je jeste vubec resit?
S pozdravem
Pavel Snajdr
+421 948 816 186 | +420 720 107 791 | 110-010-956 CTO of Relbit | Predseda vpsFree.cz, o.s. | RHCE http://relbit.com | http://vpsfree.cz | https://www.redhat.com
On 10/09/2012 02:20 PM, semanmar@gmail.com wrote:
Tak tak. IE6 ti bude hadzat error 403. Ale existuje na to workaround a to je option "SSLStrictSNIVHostCheck". Ak to vypnes tak browser ktory nepodporuje SNI bude presmerovany na na site ktora je definovana ako prva v configu. Len neviem, ci by ti taketo nieco vyhovovalo...
S pozdravom/Kind regards Martin Seman
Sent from my BlackBerry® smartphone
-----Original Message----- From: Tomas Srnka <tomas.srnka@gmail.com> Sender: community-list-bounces@lists.vpsfree.cz Date: Tue, 9 Oct 2012 14:07:31 To: vpsFree.cz Community list<community-list@lists.vpsfree.cz> Reply-To: "vpsFree.cz Community list" <community-list@lists.vpsfree.cz> Subject: Re: [vpsFree.cz: community-list] Apache SSL
_______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list _______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list _______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list
_______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iF4EAREIAAYFAlB0GAcACgkQdh+64ds5DabzrAD+LEdRAOaHy8U9yi4t2WFvao3F 97WhKsK7tvdXr5o4VoQBAOu3nSl6szm2z/GCXdjhAM7wFlyN0qRsVuZYaCUDUt5T =ygek -----END PGP SIGNATURE----- _______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list _______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list
_______________________________________________ Community-list mailing list Community-list@lists.vpsfree.cz http://lists.vpsfree.cz/listinfo/community-list
-- s pozdravom Gustáv Pálos
participants (7)
-
Gustáv Pálos -
Jirka Bourek -
Michal Dobsovic -
Michal Krajčírovič -
Pavel Snajdr -
semanmar＠gmail.com -
Tomas Srnka