[gentoo-server] apache2 + ssl + multiple virtual hosts

[Christian Parpart]

Hi all,

I've some strange problem with apache and SSL since some time I 
try to address now.

I've multiple virtual hosts using SSL and I want all them to use _their own_
certificates.
The problem now is, it seems, that all SSL virtual hosts are using the "in 
config first declared" SSLCertificate{File,KeyFile}. Each other vhost is 
using the certs from the first vhost.

I create my certs using certtool from GnuTLS:

# certtool --generate-privkey --outfile www.foobar.org.key
# certtool --generate-self-signed --load-privkey www.foobar.org.key \
 --outfile www.foobar.org.cert

and answer to the questions the tool has. I do this for each SSL-vhost I have.

Now, I duplicate the http-virtualhost to https-virtualhost and add the 
following at the end of each https-virtualhost:

SSLEngine on
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:
+eNULL
SSLCertificateFile conf/ssl/www.foobar.org.cert
SSLCertificateKeyFile conf/ssl/www.foobar.org.key
SSLOptions +StdEnvVars
<IfModule mod_setenvif.c>
    SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown \
                                   downgrade-1.0 force-response-1.0
</IfModule>

This look clear to me, but apache2 now obviousely uses the first parsed 
SSLCertificateFile/SSLCertificateKeyFile for the second and third etc, too, 
which is wrong, of course.

Has anyone a hint on how to fix this issue?

Best regards,
Christian Parpart.

-- 
 01:38:06 up 10 days, 13:17,  4 users,  load average: 0.31, 0.41, 0.38