RHEL/Apache ssl.conf configuration problem -
We have more than one subdomain, each of which this virtualhost entry is in httpd.conf and good as SSL the way. Our main www is a GoDaddy cert associated with it in subdomain. The subdomain I am currently configuring on our dev server ("api.bulbstorm.com") has a ssl.conf virtualhost entry that looks like this:
& lt; VirtualHost 172.16.247.153: 443 & gt; DocumentRoot "/ var / www / api" server name api.bulbstorm.com:443 error log / api-error_log custom log / api-access_log warning all SSLEngine general Loglivl SSLProtocol - all-SLV 2 SSLCertificateFile / var / www / Certs / api / server CRT SSLCertificateKeyFile /var/www/certs/api/server.key & lt; Files ~ ". (Cgi | shtml | phtml | php3?) $" & Gt; SSLOptions + StdEnvVars & lt; / Files & gt; & Lt; Directory "/ var / www / cgi-bin" & gt; SSLOptions + StdEnvVars & lt; / Directory & gt; & Lt; Directory "/ var / www / api" & gt; Options + Follow follow-up link Order order over average, allow all orders, refuse & lt; / Directory & gt; Php_value include_path "/ var / www / inc" SetEnvIf user-agent ". * MSIE. *" \ Nokeepalive ssl-unclean-shutdown \ downgrade-1.0 force-response -1.0 custom log / ssl_request_log \ "% t% h% { SSL_PROTOCOL}} X% {SSL_CIPHER} x \ "% r \"% b "& lt; / VirtualHost & gt;
... CRT & amp; Key files have been generated in / var / www / certs / api /, which are found.
The API subdomain originally pointed to Goddess certification for www subdomain. But even though I changed the linked API subdomain virtualhost entry self-signed certificate / key pair (and httpd have restarted, Godadi certificate was completely clean about past exceptions etc. browser settings) . Still warning that the certificate is for the www domain. When I certify that the browsers are dragging, it seems that they are still getting the Goddess certificates.
In Sselkconf file later these lines:
SSLCertificateFile /etc/pki/tls/certs/localhost.crt SSLCertificateKeyFile / etc / pki / tls / private / localhost.key
this certificate / key pair godaddy is different from the evidence referred to virtualhost entry for Www subdomain / key pair, which looks like this:
< code> Sslsrtifiktefile /attk/wwwkbulbstormkcom_ssl/wwwkbulbstormkcomkkrt Sslsrtifiketkifile / ETC / www Kbulbstormkcom_ssl / Wwwkbulbstormkcomkke Sslsrtifiktecanfile /attk/wwwkbulbstormkcom_ssl/gda_intrmeediatt_bndlkkrt < / Code>
Any light can be highlighted on this issue Received the I
had to redirect to "answer" Serverfaultkcom this question.
Comments
Post a Comment