SUPPORT 
CSR GENERATION
VALIDATION
INSTALLATION
TRUSTLOGO INSTALLATION
  Sales Contact 

Toll Free : 866 416.9259
Local : 954 678-0340
Fax : 866-423-1110
sales@ourssl.com
  SUPPORT 

Installing multiple Certification Authorities on a single Apache webserver

To run more than one Certificate Authority on the Apache web server the configuration must look something like the details below. Please note the SSLCACertificateFile lines referencing 2 different bundle files which give 2 different root authorities. Please also note the virtual host delimiter </VirtualHost> which keeps the details for each virtual host separate.

### Section 3: Virtual Hosts

<IfDefine HAVE_SSL>

## SSL Virtual Host Context

<VirtualHost 192.168.0.20:443>
DocumentRoot "/var/www/html2"
ServerName apache2.comodo.net
ErrorLog logs/error_log
TransferLog logs/access_log
SSLEngine on
SSLCertificateFile /etc/httpd/conf/apache.ssl/server.crt
SSLCertificateKeyFile /etc/httpd/conf/apache.ssl/myserver.key
SSLCACertificateFile /etc/httpd/conf/apache.ssl/ca.txt
SSLOptions +FakeBasicAuth +ExportCertData +CompatEnvVars +StrictRequire
SetEnvIf User-Agent ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
CustomLog logs/ssl_request_log \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"

</VirtualHost>

<VirtualHost 192.168.0.21:443>
DocumentRoot "/var/www/html2"
ServerName apache2.comodo.net
ErrorLog logs/error_log
TransferLog logs/access_log
SSLEngine on
SSLCertificateFile /etc/httpd/conf/apache2.ssl/server.crt
SSLCertificateKeyFile /etc/httpd/conf/apache2.ssl/myserver.key
SSLCACertificateFile /etc/httpd/conf/apache2.ssl/other-bundle.txt
SSLOptions +FakeBasicAuth +ExportCertData +CompatEnvVars +StrictRequire
SetEnvIf User-Agent ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
CustomLog logs/ssl_request_log \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"

</VirtualHost>

 
 
 
    OurSSL Certificates are recognized by 99.3% of all current browsers  

Home | Products | Resellers | Special Offers | Support | About Us | Contact Us

© OurSSL, 2004-2007