Apache no linux com dois certificados reais (.com e .co.uk)

Question

Eu só posso configurar um. quando eu tento configurar o outro eu recebo erro httpd com sintaxe ruim. alguem sabe como configurar 2 certificados no apache? é isso que eu tenho:

# ssl

LoadModule ssl_module modules/mod_ssl.so
Listen 443

AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl    .crl

SSLPassPhraseDialog  builtin

SSLSessionCache         shmcb:/var/cache/mod_ssl/scache(512000)
SSLSessionCacheTimeout  300

SSLMutex default
SSLRandomSeed startup file:/dev/urandom  256
SSLRandomSeed connect builtin

SSLCryptoDevice builtin

<VirtualHost *:443>
  ServerName  company ip address
  ServerAlias *.company wild card certificate 
  DocumentRoot /live/html

  ErrorLog logs/ssl_error_log             
  TransferLog logs/ssl_access_log
 LogLevel warn

  RewriteEngine on     
  RewriteOptions Inherit

  SSLEngine on
  SSLProtocol all -SSLv2               
  SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW

###  SSLCertificateFile /etc/httpd/pki/company.co.uk.crt
###  SSLCertificateKeyFile /etc/httpd/pki/server.key
###  SSLCACertificateFile /etc/httpd/pki/intermediate.crt

SSLCertificateFile /etc/httpd/pki/USA/server.crt
  SSLCertificateKeyFile /etc/httpd/pki/USA/server.key
  SSLCACertificateFile /etc/httpd/pki/USA/intermediate.crt

  <Files ~ "\.(cgi|shtml|phtml|php3?)$">
      SSLOptions +StdEnvVars
  </Files>
 <Directory "/var/www/cgi-bin">
      SSLOptions +StdEnvVars
  </Directory>

 SetEnvIf User-Agent ".*MSIE.*" \
          nokeepalive ssl-unclean-shutdown \
           downgrade-1.0 force-response-1.0

  CustomLog logs/ssl_request_log \
           "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"

    

Answer 1

Você precisa definir um IP / certificado. Você só pode usar um certificado por IP. Então ao invés de *: 443 no seu vhost você deveria usar um IP.