Best way to install 2 different SSL certs on same Matrix install?


(James) #1

Hi,

 

Could anyone suggest the best way to get 2 different SSL certificates installed on the same Matrix setup.  We have 2 separate web sites with completely different domains hosted on the same server, in the same Matrix install, so same Apache, database, /var/www/matrix folder.

 

To complicate things we have Squid sat in front of the Apache server.

 

I can get Squid to serve one certificate instead of Apache but no idea if it can serve two, and not sure how it would know which one to use for the correct site - all it can see is the origin server where Apache lives, it knows nothing about Apache or Matrix setup.

 

Alternatively I could set it up on Apache, maybe with two virtual hosts (not tried it yet) both pointing at the same /var/www/matrix folder but with different virtual host names, but then how would Squid deal with that?  I read about the 'allow-direct' parameter in Squid which simply passes requests through to Apache (so hopefully the different Apache SSLs would display correctly) but wasn't sure if it was safe to use (relay attacks mentioned)?

 

Anyone done this sort of thing before and can clarify the best way to do it, seems a bit messy to me?

 

Thanks.


(James) #2

Update: In case anyone found this useful I installed the same certificates on Squid and Apache in the end.

 

Anyone know how to stop the navigation links on the https page (set with Force Secure) being https - I want people to still use http most of the time?