apache2 - Using multiple SSL on multiple domains using one IP address - Ask Ubuntu

i'm using apache , have 2 domains i've created virtual hosts , installed ssl certificates. 1 domain works , other redirects domain. think because site 1 primary site , need separate ip address each domain when using ssl?

i've read quite few articles can use multiple ssl certificates 1 ip doing following in virtual host

<virtualhost *:443> 

i've tried doesn't work me. lot of articles mention sni i'm not 100% sure means. shed light on , point me in right direction?

this virtual hosts like

site 1

<virtualhost *:80>   # admin email, server name (domain name), , aliases   serveradmin email@gmail.com   servername  domain.com   serveralias www.domain.com    # index file , document root (where public files located)   directoryindex index.html index.php   documentroot /var/www/html/domain.com/public_html   redirect permanent / https://www.domain.com    <directory "/var/www/html/domain.com/public_html">   options followsymlinks   allowoverride   order allow,deny   allow   </directory>    # log file locations   loglevel warn   #errorlog  /var/www/html/domain.com/log/error.log   #customlog /var/www/html/domain.com/log/access.log combined </virtualhost>  <ifmodule mod_ssl.c> <virtualhost *:443>         serveradmin email@gmail.com         servername domain.com         serveralias www.domain.com          documentroot /var/www/html/domain.com/public_html         <directory "/var/www/html/domain.com/public_html">                 #options indexes followsymlinks multiviews                 options followsymlinks                 allowoverride                 order allow,deny                 allow         </directory>          scriptalias /cgi-bin/ /usr/lib/cgi-bin/         <directory "/usr/lib/cgi-bin">                 allowoverride none                 options +execcgi -multiviews +symlinksifownermatch                 order allow,deny                 allow         </directory>          errorlog ${apache_log_dir}/error.log          # possible values include: debug, info, notice, warn, error, crit,         # alert, emerg.         loglevel warn          customlog ${apache_log_dir}/ssl_access.log combined          alias /doc/ "/usr/share/doc/"         <directory "/usr/share/doc/">                 options indexes multiviews followsymlinks                 allowoverride none                 order deny,allow                 deny                 allow 127.0.0.0/255.0.0.0 ::1/128         </directory>          #   ssl engine switch:         #   enable/disable ssl virtual host.         sslengine on          #   self-signed (snakeoil) certificate can created installing         #   ssl-cert package. see         #   /usr/share/doc/apache2.2-common/readme.debian.gz more info.         #   if both key , certificate stored in same file,         #   sslcertificatefile directive needed.         sslcertificatefile    /etc/apache2/ssl/www_domain_com/www_domain_com.crt         sslcertificatekeyfile /etc/apache2/ssl/www_domain_com/server.key          #   server certificate chain:         #   point sslcertificatechainfile @ file containing         #   concatenation of pem encoded ca certificates form         #   certificate chain server certificate. alternatively         #   referenced file can same sslcertificatefile         #   when ca certificates directly appended server         #   certificate convinience.         sslcertificatechainfile /etc/apache2/ssl/www_domain_com/www_domain_com.ca-bundle          #...  </virtualhost> </ifmodule> 

site 2

<virtualhost *:80>   # admin email, server name (domain name), , aliases   serveradmin email@gmail.com   servername  domain2.com   serveralias www.domain2.com    # index file , document root (where public files located)   directoryindex index.php index.html   documentroot /var/www/html/domain2.com/public_html/public   #  redirect permanent / https://www.domain2.com    # log file locations   loglevel warn   errorlog  /var/www/html/domain2.com/log/error.log   customlog /var/www/html/domain2.com/log/access.log combined    setenv ci_env production   setenv ci_base_url http://www.domain2.com/    <directory "/var/www/html/domain2.com/public_html/public">         authtype basic         authname "restricted content"         authuserfile /var/www/html/domain2.com/public_html/public/.htpasswd         require valid-user          options indexes followsymlinks multiviews         allowoverride         order allow,deny         allow   </directory> </virtualhost>  <ifmodule mod_ssl.c> <virtualhost *:443>         serveradmin email@gmail.com         servername domain2.com         serveralias www.domain2.com         documentroot /var/www/html/domain2.com/public_html/public          <directory "/var/www/html/domain2.com/public_html/public">                 #options indexes followsymlinks multiviews                 options followsymlinks                 allowoverride                 order allow,deny                 allow         </directory>         scriptalias /cgi-bin/ /usr/lib/cgi-bin/          <directory "/usr/lib/cgi-bin">                 allowoverride none                 options +execcgi -multiviews +symlinksifownermatch                 order allow,deny                 allow         </directory>          errorlog ${apache_log_dir}/error.log          # possible values include: debug, info, notice, warn, error, crit,         # alert, emerg.         loglevel warn          customlog ${apache_log_dir}/ssl_access.log combined         alias /doc/ "/usr/share/doc/"          <directory "/usr/share/doc/">                 options indexes multiviews followsymlinks                 allowoverride none                 order deny,allow                 deny                 allow 127.0.0.0/255.0.0.0 ::1/128         </directory>          #   ssl engine switch:         #   enable/disable ssl virtual host.         sslengine on          #   self-signed (snakeoil) certificate can created installing         #   ssl-cert package. see         #   /usr/share/doc/apache2.2-common/readme.debian.gz more info.         #   if both key , certificate stored in same file,         #   sslcertificatefile directive needed.         sslcertificatefile    /etc/apache2/ssl/www_domain2_com/www_domain2_com.crt         sslcertificatekeyfile /etc/apache2/ssl/www_domain2_com/server.key          #   server certificate chain:         #   point sslcertificatechainfile @ file containing         #   concatenation of pem encoded ca certificates form         #   certificate chain server certificate. alternatively         #   referenced file can same sslcertificatefile         #   when ca certificates directly appended server         #   certificate convinience.         sslcertificatechainfile /etc/apache2/ssl/www_domain2_com/www_domain2_com.ca-bundle          #...  </virtualhost> </ifmodule> 

you don't need ip per ssl domain, need servername directive in each virtualhost. following should work using apache2. different if not using apache2.

---

<virtualhost *:80>         serveradmin webmaster@localhost         servername example.com         documentroot /var/www  </virtualhost>   <ifmodule mod_ssl.c> <virtualhost *:443>          serveradmin webmaster@localhost         servername example.com         documentroot /var/www          #   ssl engine switch:         #   enable/disable ssl virtual host.         sslengine on          #   self-signed (snakeoil) certificate can created installing         #   ssl-cert package. see         #   /usr/share/doc/apache2.2-common/readme.debian.gz more info.         #   if both key , certificate stored in same file,         #   sslcertificatefile directive needed.         sslcertificatefile /etc/apache2/ssl/example.com/apache.crt         sslcertificatekeyfile /etc/apache2/ssl/example.com/apache.key </virtualhost>  </ifmodule>