기술지원 문의

자답 -- [Re]apache + resin 에서 SSL 을 사용하려고 합니다.
박근한 / 2004-02-10 14:42

레진은 그대로 두고

아파치 설정을 바꾸니까 레진에서 자동으로 443 포트를 가져가네요

근데 지금도 이해가안가고 이상한것은

서비스되는 도메인이 a.com 이면 

아파치 httpd.conf 파일에서


ServerName b.com
ErrorLog /usr/local/apache/logs/error_log
TransferLog /usr/local/apache/logs/access_log
AddType application/jsp  .jsp
DirectoryIndex index.jsp
SSLEngine on
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
SSLCertificateFile /usr/local/apache/conf/ssl.crt/servercert.crt
SSLCertificateKeyFile /usr/local/apache/conf/ssl.key/sslkey.key
SSLCertificateChainFile /usr/local/apache/conf/ssl.crt/chaincert.crt

    SSLOptions +StdEnvVars


    SSLOptions +StdEnvVars

SetEnvIf User-Agent \".*MSIE.*\" \\
         nokeepalive ssl-unclean-shutdown \\
         downgrade-1.0 force-response-1.0
CustomLog /usr/local/apache/logs/ssl_request_log \\
          \"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \\\"%r\\\" %b\"




여기서 a.com 과 b.com 을 같게 할려고 지금까지 해 봤는데 안되고

다르게 해 보니까 되네요

그것도 https://a.com 하면 

b.com 의 도큐먼트 루트에서 파일을 가져가더군요

제가 듣기로 하나의 SSL 인증키는 한 사이트 밖에 안된다고 들었는데

테스트해본 결과 https://a.com 도 되고 https://b.com 도 되더군요.

근데 문제는 세션정보들을 못가져가네요.. -,.-

이제 남은건 좀더 httpd.conf 를 뱌꿔보면서 세션정보도 공유하게끔 하는게 남았네요.. 에휴...

언제 할려나,....

[Re] final 자답(완성) -- [Re]apache + resin 에서 SSL 을 사용하려고 합니다.
박근한 / 2004-02-10 16:04

해결했습니다.

완성된  httpd.conf

# a.com

        ServerAdmin webmaster@a.com
        DocumentRoot /home/resin/docs
        ServerName a.com
        ServerAlias www.a.com
        AddType application/jsp  .jsp
        DirectoryIndex index.jsp


 
DocumentRoot /home/resin/docs
ServerName a.com
ErrorLog /usr/local/apache/logs/error_log
TransferLog /usr/local/apache/logs/access_log
AddType application/jsp .jsp
DirectoryIndex index.jsp
SSLEngine on
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
SSLCertificateFile /usr/local/apache/conf/ssl.crt/servercert.crt
SSLCertificateKeyFile /usr/local/apache/conf/ssl.key/sslkey.key
SSLCertificateChainFile /usr/local/apache/conf/ssl.crt/chaincert.crt

SSLOptions +StdEnvVars


SSLOptions +StdEnvVars

SetEnvIf User-Agent \".*MSIE.*\" \\
nokeepalive ssl-unclean-shutdown \\
downgrade-1.0 force-response-1.0
CustomLog /usr/local/apache/logs/ssl_request_log \\
\"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \\\"%r\\\" %b\"



두개의  VirtualHost 정보가 같아야 되는군요..

이상입니다.

앞으로 누군가가 이부분을 할꺼 같아서 저의 경험을 적어 놓습니다.

틀린부분 있으면 제메일로 연락 주세요

저도 고치게요...

그럼...