Re: [us...@httpd] ssl certifikate mismatch

2010-05-24 Thread Matus UHLAR - fantomas
On 14.05.10 22:51, Reinhard Vicinus wrote: > is the following behaviour of apache 2.2.15 (debian unstable) a feature > or a bug? > > Listen 10.0.0.1:81 > > SSLEngine on > SSLCertificateFile /etc/apache2/conf/aaa.crt > SSLCertificateKeyFile /etc/apache2/conf/aaa.key > > ServerName aaa >

Re: [us...@httpd] ssl certifikate mismatch

2010-05-17 Thread Reinhard Vicinus
On 17/05/10 13:36, Eric Covener wrote: Can you show in one terminal session the contents of the two certificates (openssl x509 -in ... -text | grep Subject:) and the console output of s_client that includes the subject? According to one of the active SNI folks, your openssl invocation shouldn't

Re: [us...@httpd] ssl certifikate mismatch

2010-05-17 Thread Eric Covener
On Sun, May 16, 2010 at 3:18 PM, Eric Covener wrote: >> Listen 10.137.1.104:9901 >> >> SSLEngine on >> SSLCertificateFile /etc/apache2/conf/www.aaa.at.crt >> SSLCertificateKeyFile /etc/apache2/conf/www.aaa.at.key >> Include conf/www.aaa.misc >> >> >> Listen 10.137.1.104:9902 >> >> SSLEngine on

Re: [us...@httpd] ssl certifikate mismatch

2010-05-16 Thread Eric Covener
> Listen 10.137.1.104:9901 > > SSLEngine on > SSLCertificateFile /etc/apache2/conf/www.aaa.at.crt > SSLCertificateKeyFile /etc/apache2/conf/www.aaa.at.key > Include conf/www.aaa.misc > > > Listen 10.137.1.104:9902 > > SSLEngine on > SSLCertificateFile /etc/apache2/conf/www.aaa.de.crt > SSLCertif

Re: [us...@httpd] ssl certifikate mismatch

2010-05-16 Thread Reinhard Vicinus
What's the full apachectl -S look like on that config? VirtualHost configuration: 10.137.1.104:9903 is a NameVirtualHost default server www.aaa.de (/etc/apache2/sites-enabled/test:19) port 9903 namevhost www.aaa.de (/etc/apache2/sites-enabled/test:19) 10.137.1.104:9

Re: [us...@httpd] ssl certifikate mismatch

2010-05-16 Thread Eric Covener
> My problem ist that SNI breaks my in older apaches working configuration > which looked like this: > > Listen 10.137.1.104:9901 > >  SSLEngine on >  SSLCertificateFile /etc/apache2/conf/www.aaa.at.crt >  SSLCertificateKeyFile /etc/apache2/conf/www.aaa.at.key >  Include conf/www.aaa.misc > > > L

Re: [us...@httpd] ssl certifikate mismatch

2010-05-16 Thread Reinhard Vicinus
On 14/05/10 23:08, Eric Covener wrote: On Fri, May 14, 2010 at 4:51 PM, Reinhard Vicinus wrote: Hi, is the following behaviour of apache 2.2.15 (debian unstable) a feature or a bug? Listen 10.0.0.1:81 SSLEngine on SSLCertificateFile /etc/apache2/conf/aaa.crt SSLCertificateKeyFile /

Re: [us...@httpd] ssl certifikate mismatch

2010-05-14 Thread Sakthi Esakiappan
Make sure the bbb certificate(bbb.crt) is issued for the Server named bbb. if not try and create a self signed SSL certificate for the server bbb and have a try with the newly created certificate. On 15 May 2010 02:21, Reinhard Vicinus wrote: > Hi, > > is the following behaviour of apache 2.2.15

Re: [us...@httpd] ssl certifikate mismatch

2010-05-14 Thread Kevin Castellow
>From my experience the configuration file is a top down processing. If you repeat a setting multiple times it will usually take the last setting. In this example it wouldn't surprise me if you repeat the setting of virtual server with the same value, it returns an error trying to match the certif

Re: [us...@httpd] ssl certifikate mismatch

2010-05-14 Thread Eric Covener
On Fri, May 14, 2010 at 4:51 PM, Reinhard Vicinus wrote: > Hi, > > is the following behaviour of apache 2.2.15 (debian unstable) a feature or a > bug? > > Listen 10.0.0.1:81 > >  SSLEngine on >  SSLCertificateFile /etc/apache2/conf/aaa.crt >  SSLCertificateKeyFile /etc/apache2/conf/aaa.key > >  S

[us...@httpd] ssl certifikate mismatch

2010-05-14 Thread Reinhard Vicinus
Hi, is the following behaviour of apache 2.2.15 (debian unstable) a feature or a bug? Listen 10.0.0.1:81 SSLEngine on SSLCertificateFile /etc/apache2/conf/aaa.crt SSLCertificateKeyFile /etc/apache2/conf/aaa.key ServerName aaa Listen 10.0.0.2:81 SSLEngine on SSLCertificateFile