Apache如何有2个虚拟主机https？

Question

我试图用不同的证书在同一台服务器上配置两个域(A和B)。域A工作正常，它有自己的证书和规则来重定向到它。如果我尝试访问域B，它将显示以下消息：

This server could not prove that it is subdomainB.DomainB.com.mx; its security certificate is from subdomainA.domainA.org. This may be caused by a misconfiguration or an attacker intercepting your connection.

现在，如果我添加域B，它所做的完全相同，但相反。

This server could not prove that it is subdomainA.DomainA.com.mx; its security certificate is from subdomainB.domainB.org. This may be caused by a misconfiguration or an attacker intercepting your connection.

另外，我失去了对SubdomainA.domainA.org的重定向，并且它访问了php页面版本，而不是站点本身。

希望有人能帮我。我的配置：

<VirtualHost *:443>
ServerAdmin webmaster@localhost
ServerName subdomainB.domainB.com.mx
DocumentRoot /var/www/html/

SSLEngine on
SSLCertificateFile /etc/apache2/sslB/certificate.crt
SSLCertificateKeyFile /etc/apache2/sslB/private.key
SSLCertificateChainFile /etc/apache2/sslB/intermediate.crt

SSLProtocol all -SSLv2 -SSLv3 -TLSv1

</VirtualHost>

<VirtualHost *:443>
ServerAdmin webmaster@localhost
ServerName subdomainA.domainA.com.mx
DocumentRoot /var/www/html/

SSLEngine on
SSLCertificateFile /etc/apache2/sslA/certificate.crt
SSLCertificateKeyFile /etc/apache2/sslA/private.key
SSLCertificateChainFile /etc/apache2/sslA/intermediate.crt

SSLProtocol all -SSLv2 -SSLv3 -TLSv1

</VirtualHost>

Answer 1

您必须在站点中创建两个不同的vhost文件--可用(如果在基于debian的操作系统中)

并在两个文件的两个域上以不同方式加载证书。您可以张贴您的vhost配置。

在subdomainA.domainA.com.mx vhost配置文件上编写下面的代码。

<VirtualHost *:443>
ServerAdmin webmaster@localhost
ServerName subdomainA.domainA.com.mx
DocumentRoot /var/www/html/

SSLEngine on
SSLCertificateFile /etc/apache2/sslA/certificate.crt
SSLCertificateKeyFile /etc/apache2/sslA/private.key
SSLCertificateChainFile /etc/apache2/sslA/intermediate.crt

SSLProtocol all -SSLv2 -SSLv3 -TLSv1
</VirtualHost>

<VirtualHost *:80>
ServerAdmin webmaster@localhost
ServerName subdomainA.domainA.com.mx
DocumentRoot /var/www/html/
Redirect / https://subdomainA.domainA.com.mx
</VirtualHost>

您也可以在域subdomainB.DomainB.com.mx的另一个虚拟主机上这样做。