At 11:28 AM 12/9/03, you wrote:Here, the problem is in the Certificate, the Linux hostname is not the same
that you gave in the certificate ...
I mean in the Common Name field It must be the Linux hostname ...
so how does that work? I want to use an alias (rt.domainname.com) for the SSL site rather than the actual hostname (server.domainname.com). I kno it can be done under Solaris. One of my predessors set that up here....I just haven't been able to duplicate it on this box
Well, I'm no expert... but it looks like it's saying you are using a CA cert rather than a cert signed by a CA. I don't see an entry for where the certificate is... for me, I have a line pointing at a cert for each virtual site (actually two, one for the private key, and one for the certificate).
So... good luck. if you want some help, I've got some experience with apache and ssl, just email me straight and I'll supply what advice I can.
:Denny [EMAIL PROTECTED]
-----Original Message----- From: Leon [mailto:[EMAIL PROTECTED] Sent: Tuesday, December 09, 2003 12:20 p.m. To: [EMAIL PROTECTED] Subject: Apache see cert as CA
I'm trying to get a SSL site up on Apache. My system is: Redhat 8 Apache 2.0.40 OpenSSL .0.9.6b
When I start Apache, It seems to think everything is OK. But when I try to
browse to a page, I just get the default Apache home page. If I look at
the SSL error log I get:
[Mon Dec 08 15:35:24 2003] [warn] RSA server certificate CommonName (CN)
`rt.domainname.com' does NOT match server name!?
[Mon Dec 08 15:36:14 2003] [warn] RSA server certificate is a CA
certificate (BasicConstraints: CA == TRUE !?)
I have worked thru the HOWTO's on Redhat creating a private key and
creating the certs
http://www.europe.redhat.com/documentation/HOWTO/SSL-RedHat-HOWTO -3.php3
My ssl.conf entry is: NameVirtualHost rt.domainname.com:443 <VirtualHost 192.168.0.99:443> ServerName rt.domainname.com DocumentRoot /opt/rt3/share/html ErrorLog logs/rt/error_log CustomLog logs/rt/access_log combined #AddDefaultCharset UTF-8 PerlModule Apache2 Apache::compat PerlModule Apache::DBI PerlRequire /opt/rt3/bin/webmux.pl
<Directory /opt/rt3/share/html> Order allow,deny Allow from all Options All AllowOverride All AddDefaultCharset UTF-8 <Files *.html> SetHandler perl-script PerlHandler RT::Mason </Files> </Directory>
<Directory /opt/rt3/share/html/Ticket/Attachment> SetHandler perl-script PerlHandler RT::Mason </Directory> <Directory /opt/rt3/share/html/SelfService/Attachment> SetHandler perl-script PerlHandler RT::Mason </Directory> <Directory /opt/rt3/share/html/REST> SetHandler perl-script PerlHandler RT::Mason </Directory>
</VirtualHost>
______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]