Forum Moderators: phranque

Message Too Old, No Replies

mod_ssl for specific Directories in the vhost?

apache mod_ssl for vhost subdirectories

         

Yel2008

11:28 pm on Mar 10, 2005 (gmt 0)

10+ Year Member



hi everyone,

im having trouble with finding a Solution to my Probelm:

1 iam running an apache 2.0.52 with php and mysql
on a gentoo Linux Box
2 i have some virtual hoste that are NAME BASED hosted in my box
3 some of my customer desire ssl connections to some directories where they have critical data but they dont want secure connection for the whole site just for each request that calls files from that /directory/critical_data

there is 2 files for specifing mod_ssl configuration for apache

are 41_mod_ssl.default-vhost.conf and 40_mod_ssl.conf :

set as on this wiki:

[gentoo-wiki.com...]

i have been told that what i intend to do is not possible but as i seen this :

[httpd.apache.org...]

i think it is and i tried to specify an active ssl only for the directories where it is wished but without success now that i can find a clue on how to do this i hope someone of you volk outthere have some for me because i really need to fix that as soon as possible otherweise i will lost my costumer
thank you!

YEL

[edited by: jdMorgan at 11:40 pm (utc) on Mar. 10, 2005]
[edit reason] Removed e-mail sig per TOS. [/edit]

jdMorgan

11:43 pm on Mar 10, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



YEL,

Welcome to WebmasterWorld!

I haven't dug into this issue very deeply, but one 'easy' solution is to to support "secure.domain.com" in addition to "www.domain.com" and "domain.com". You can then enable SSL for only the secure subdomain, and the domain owner can control which parts of his site use SSL simply by using the proper links.

Jim

Yel2008

12:15 am on Mar 11, 2005 (gmt 0)

10+ Year Member



first thank you jdMorgan,

but iam afraid i dont exactly understand what you mean
lets say i have 3 vhost
www.vhost1.com
is in the directory
/web/vhost1/htdocs/ /web/vhost1/htdocs/crticaldatadirectoy/critical data**

www.vhost2.com
/web/vhost2/htdocs/dir1_noneedToSsLConnections
/web/vhost2/htdocs/dir2_noneedToSsLConnections

www.vhost3.com
/web/vhost3/htdocs/ /web/vhost3/htdocs/otherCriticalDataDir/data**

** i dont want the mod_ssl connections to be active server wide i just want itactive only for connections to that dirs **
you sugest doing/setting :
/web/vhost1/htdocs/otherCriticalDataDir/data**
as a new Vhost
lets say:
secure.vhost1.com
or did i missunderstood you?

jdMorgan

2:35 am on Mar 11, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



> as a new Vhost

Yes, you can set up that subdomain as a secure vhost. As I said, I am not expert in these matters, but it might be a quick/easy way to get something working for your client.

Jim