Yesterday I discovered you cannot use apache to host multiple ssl-enabled sites on the same ip address. This was rather irking, but not the end of the world for my current project.
Apache will just use the first SSL declaration it finds for all following vhosts, and since it is TCP layer 4 and HTTP is TCP layer 5, this makes since the session is already setup by the time it gets the http request.
