Trying to configure multiple virtual domains with only one virtual domain configured to be SSL, rest are configured only on Port 80 (non-SSL).

Everything is good with xyz.org but when user access https://abc.org its provided with xyz.org certificate. We expect users to get an SSL error rather being server with xyz.org certificate (still error) and let them proceed.

<VirtualHost *:80>

ServerName xyg.org

RewriteEngine on

RewriteRule "^/(.*)" "https://www.xyz.org/$1" [L,R,NE]

</VirtualHost>

<VirtualHost *:443>

ServerName xyg.org

SSLEnable

SSLCompression off

SSLProtocolEnable TLSv12

SSLProtocolDisable SSLv2 SSLv3 TLSv10 TLSv11

SSLServerCert xyg.org

KeyFile /usr/IBM/HTTPServer/keys/pdsrv.kdb

CustomLog logs/access.log SSL

</VirtualHost>

<VirtualHost *:80>

ServerName abc.org

ServerAlias abc.org

RewriteEngine on

RewriteCond "%{HTTP_HOST}" "^www.abc.org" [OR]

RewriteCond "%{HTTP_HOST}" "^abc.org"

RewriteRule "^(.+)" "https://www.abc.org/redirect" [L,R,NE]

</VirtualHost>

If you are using IHS 8.5.5, you have to specify the following too globally (best to do it before the first port 80 vhost)

You also want in the abc.org vhost:

Tried this and didn't work and getting an error:

# /usr/IBM/HTTPServer/bin/apachectl start

AH00548: NameVirtualHost has no effect and will be removed in the next release /usr/IBM/HTTPServer/conf/virtualhost1.conf:24

NameVirtualHost *:80

<VirtualHost *:80>

ServerName abc.org

ServerAlias www.abc.org

RewriteEngine on

RewriteCond "%{HTTP_HOST}" "^www.abc.org" [OR]

RewriteCond "%{HTTP_HOST}" "^abc.org"

RewriteRule "^(.+)" "https://www.abc.org/redirect" [L,R,NE]

</VirtualHost>

OK, that is 9.0 so it's not your problem.

Going back to what you first wrote.

"but when user access https://abc.org its provided with xyz.org"

There is only 1 port 443 virtual host, so there is only 1 certificate this webserver can ever use. If you want to serve two different certificates for the same IP and port combination, you'll need to configure SNI. There are two ways to structure it:

https://publib.boulder.ibm.com/httpserv/manual24/mod/mod_ibm_ssl.html#SNI

Yes its 9.0.5.7

I tried SNI but again second virtual host (abc.org) is not configured with 443 and https should simple fail (since its only Port 80). However xyz.org cert is being given to users when access abc.org

How can I avoid that when user access abc.org, server does not to provide them with xyz.org certificate but simple fail when accessing over https.

It is not possible to "just fail". When the user types https://abc.org the browser resolves it to the servers IP address and starts a handshake on port 443. IHS is listening on this IP and port, and the handshake has to be completed.