On Thu, Nov 15, 2012 at 11:52 AM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><div class="gmail_extra"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="im">On 11/15/12 11:50 AM, "Sean McHugh" <<a href="mailto:sean8sean@gmail.com">sean8sean@gmail.com</a>> wrote:<br></div></blockquote><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="im">
</div>You would have to wait for 2.5.1 to be out, but I'm not aware that Apache<br>
2.2 doesn't support SNI, is that the case?<br>
<div class="im"><br></div></blockquote><div><br></div><div>apologies ... you are correct - SNI is supported in 2.2.12+ with mod_ssl built against OpenSSL 0.9.9 or later</div><div><br></div><div>not sure where i got 2.4 stuck in my head</div>
<div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">
>i guess this is more of my own ignorance and misunderstanding ... can i<br>
>force the ACS value in the AuthNRequest to be<br>
><a href="https://defaultSSLvhost" target="_blank">https://defaultSSLvhost</a> when the client has initially visited<br>
><a href="http://nonSSLvhost" target="_blank">http://nonSSLvhost</a> ?<br>
<br>
</div>Yes, but I don't see what that buys you unless your goal is to deploy all<br>
those certs and then not protect your applications with them.<br>
<span class="HOEnZb"><font color="#888888"><br></font></span></blockquote><div><br></div><div>I think i need to re-read the wiki before continuing this thread. b/c from the answers i'm getting, i feel like i'm missing something obvious</div>
<div><br></div><div>I only wish to have 1 cert for the _defaul_:443 vhost and direct the AuthNRequest ACS to that hostname only,</div><div>when a request is made to any of the non-ssl vhosts</div><div><br></div><div><br></div>
<div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="HOEnZb"><font color="#888888">
-- Scott<br>
</font></span><div class="HOEnZb"><div class="h5"><br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br></div>