jacek
jacek

Reputation: 1

serving two domains in apache SSL

My apache configuration is like

<VirtualHost informatyk2022a.online:443>
        SSLEngine on
        SSLCertificateFile  /etc/letsencrypt/live/informatyk2022a.online/fullchain.pem
        SSLCertificateKeyFile /etc/letsencrypt/live/informatyk2022a.online/privkey.pem
    SSLProxyEngine on
    ProxyPass / https://informatyk2022a.online:7183/
    ProxyPassReverse / https://informatyk2022a.online:7183/
</VirtualHost>

<VirtualHost dropdown.pl:443>
        SSLEngine on
        SSLCertificateFile  /etc/letsencrypt/live/dropdown.pl/fullchain.pem
        SSLCertificateKeyFile /etc/letsencrypt/live/dropdown.pl/privkey.pem
    SSLProxyEngine on
    ProxyPass / https://informatyk2022a.online:7183/
    ProxyPassReverse / https://informatyk2022a.online:7183/
</VirtualHost>

So I am redirecting from either www.informatyk2022a.online or informatyk2022a.online to

https://informatyk2022a.online

I have c# asp core service on port 7183. It works fine on domain.

I am also redirecting dropdown.pl to https://dropdown.pl:443

There on serving, it is proxy to

https://informatyk2022a.online:7183/

BUT BROWSER INSTEAD OF SHOWING WEB SITE SAYS CANNOT PROVE CERTIFICATE FROM

informatyk2022a.online

BUT I specify dropdown.pl certificate for apache to serve.

It is not serving website.

C# serves web site with certificate on secure port. It is apache that is not serving website with its own certificate but serving c# server certificate. How to make apache serving same secure service from two different domains?

I changed dropdown.pl 443 proxy to http port that c# uses but it did not help.

There is no way that I can serve same secure service on one port from two different domains.

|Apache fails to serve secure SSL certificate for dropdown.pl domain

Upvotes: 0

Views: 25

Answers (1)

Romeo Ninov
Romeo Ninov

Reputation: 7255

You can set in certificate Subject Alternate Name to be the hostname of second host.

For example the command cab be something like:

generate-certificate.sh -m <yourmail>  -d informatyk2022a.online -d dropdown.pl 

to generate one certificate for both hosts.

Or command like:

certbot --apache --cert-name informatyk2022a.online -d dropdown.pl 

Upvotes: 0

Related Questions