At 11:28 AM 12/9/03, you wrote:
Here, the problem is in the Certificate, the Linux hostname is not the same
that you gave in the certificate ...

I mean in the Common Name field It must be the Linux hostname ...

so how does that work? I want to use an alias (rt.domainname.com) for the SSL site rather than the actual hostname (server.domainname.com). I kno it can be done under Solaris. One of my predessors set that up here....I just haven't been able to duplicate it on this box



-----Original Message-----
From: Leon [mailto:[EMAIL PROTECTED]
Sent: Tuesday, December 09, 2003 12:20 p.m.
To: [EMAIL PROTECTED]
Subject: Apache see cert as CA


I'm trying to get a SSL site up on Apache. My system is: Redhat 8 Apache 2.0.40 OpenSSL .0.9.6b

When I start Apache, It seems to think everything is OK.  But when I try to
browse to a page, I just get the default Apache home page.  If I look at
the SSL error log I get:
[Mon Dec 08 15:35:24 2003] [warn] RSA server certificate CommonName (CN)
`rt.domainname.com' does NOT match server name!?
[Mon Dec 08 15:36:14 2003] [warn] RSA server certificate is a CA
certificate (BasicConstraints: CA == TRUE !?)
I have worked thru the HOWTO's on Redhat creating a private key and
creating the certs
http://www.europe.redhat.com/documentation/HOWTO/SSL-RedHat-HOWTO-3.php3

My ssl.conf entry is:
NameVirtualHost rt.domainname.com:443
<VirtualHost 192.168.0.99:443>
ServerName rt.domainname.com
DocumentRoot /opt/rt3/share/html
ErrorLog logs/rt/error_log
CustomLog logs/rt/access_log combined
#AddDefaultCharset UTF-8
PerlModule Apache2 Apache::compat
PerlModule Apache::DBI
PerlRequire /opt/rt3/bin/webmux.pl

<Directory /opt/rt3/share/html>
   Order allow,deny
   Allow from all
   Options All
   AllowOverride All
   AddDefaultCharset UTF-8
   <Files *.html>
     SetHandler perl-script
     PerlHandler RT::Mason
   </Files>
</Directory>

<Directory /opt/rt3/share/html/Ticket/Attachment>
   SetHandler perl-script
   PerlHandler RT::Mason
</Directory>
<Directory /opt/rt3/share/html/SelfService/Attachment>
   SetHandler perl-script
   PerlHandler RT::Mason
</Directory>
<Directory /opt/rt3/share/html/REST>
   SetHandler perl-script
   PerlHandler RT::Mason
</Directory>

</VirtualHost>


______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

Reply via email to