[cobalt-developers] Mirroring SSL Follow-up

["Michael" <michael@xxxxxxxxxxxxxxx>]

Hello,

I just thought of another way in which SSL could be mirrored on a secure
server so that a domain www.domain.com could have access to
https://secure.com/domain.com/.  Please let me know if this would have any
security issues or if you would advice against doing it this way.

It would be a simple modification to the httpd.conf file so that it would
show:

DocumentRoot /home/sites/

This would make it so that when you load http://www.secure.com/, you are put
into the root directory of the sites.  Then if you go to
www.secure.com/site#/web/, you would access the web files for the domain
that you wish to call securely.

Also, the only reason that I am trying to find another way to do this is
because when I do the Alias Match of AliasMatch ^/([^/]+)(/(.*))?
/home/sites/$1/web/$3, it makes it so that CGI files come up as 404 file not
found error messages.  Which ruins the whole point because I need to be able
to call formmail.pl securely.  =(

Any comments?  (I am new to the cobalt server so please correct me if I am
not understanding something or if this would cause a security problem).

Thanks,
Michael