Question: my windows vista vpn client interface receives an ip in: 192.168.50.0/24   

and the server pushes a route to the local lan 192.168.5.0/24  

In my windows vista (client) the user account does not have admin privileges and as a consequence the pushed route do not have effect.  

A solution I think that would solve the problem is in the openvpn server is using TAP and do a bridge with the lan interface.  

is there any other option?

Answer: 
The main limitation is that with one ip address you can have one ssl certificate.

Since you only want ssl on the blog then there's no problem with the setup you've proposed, just make it the only virtualhost listening on 443

```
# Virtualhosts on ports 80 and 443
NameVirtualHost *:80
NameVirtualHost *:443

# rewrite blog traffic to https
<VirtualHost *:80>
        ServerName blog.example.com
        DocumentRoot /var/www/blog
        RewriteEngine On 
        RewriteRule ^(.*)$ https://blog.example.com/$1 [R,L]
</VirtualHost>

<VirtualHost *:443>
        SSLEngine on
        SSLCertificateFile /etc/apache2/ssl/server.crt
        SSLCertificateKeyFile /etc/apache2/ssl/server.key    
        ServerName blog.example.com
        DocumentRoot /var/www/blog
</VirtualHost>

<VirtualHost *:80>
        ServerName othersite.example.com
        DocumentRoot /var/www/other/
</VirtualHost>

```

The slight limitation here, is that the blog will catch all https traffic here, regardless of hostname, so <https://othersite.example.com> will point to the blog, and generate errors because the name doesn't match the certificate, but there's no way around that with one ip address.
Last time I setup a client with SSL we chose the [DigiCert Unified Communications Certificate.](http://www.digicert.com/unified-communications-ssl-tls.htm) They needed Exchange and Sharepoint servers online with SSL that were running on two servers. So we were able to register each server with both an external and internal names. The nice thing I liked about the DigiCert UCC was that we could quickly and easily make changes to the certificate (i.e. add more names to the certificate)