Forum OpenACS Development: Re: More host_node_map, selective SSL?

Collapse
Posted by Dave Bauer on
Another issue is login authorities. I may want to enable an authority per subsite.
Collapse
Posted by Tom Jackson on
Isn't SSL/https restricted at most to one per IP? I don't think you can rely on using the Host header with SSL since it is encrypted. I hope I'm wrong, because that would essentially limit any site which wants to use SSL on more than one subsite.

Although maybe there is a trick with getting AOLserver to listen on more than one IP, both mapped to the same vitual server. SSL would use the IP:Port of the socket to get into OpenACS, then OpenACS would do the host node mapping.

It looks like SSL is setup with the virtual server, and may not need a pre-bind for the IP:Port, or at least for the port. But that means you would still have to use a virtual hosting configuration for the non-ssl connections to the same host.

Anyway, it doesn't look like you can come up with an OpenACS only solution to this, somehow the AOLserver configuration will need to track what is happening in OpenACS.

Does anyone run SSL with OpenACS subsites for more than one domain?