Re: [webmin-l] wrong let's encrypt certificate served

Mh.. it got even stranger.

now the whole ssl domain (https://kosmotique.org) shows the content for a
different domain (https:// a-chat.com) not just the wrong SSL certiificate

I gave kosmotqiue.org a sperate IP so that it works for now but for testing
switched back to the shared IP for both domains, and the domain which is
shown (a-chat..) has

85.10.223.10:443 in the virtualhost (for ssl)

the "broken" domain has

*:443 in the virtualhost section

changing this to 85.10.223.10:443 doesn help either.



On Tue, Jun 7, 2016 at 6:51 AM Jamie Cameron <[email protected]> wrote:

> In your Apache config, is the IP in the <virtualhost> block the same for
> all the domains?
>
> On 06/Jun/2016 00:32 Pat Erler <[email protected]> wrote ..
>
> "All features OK" it says.
>
> the certificates look good too (the date of creation looks good)
>
> On Mon, Jun 6, 2016 at 12:53 AM Jamie Cameron <[email protected]
> <http://reply_mail.cgi?new=1&to=jcameron%40webmin%2Ecom>> wrote:
>
>> Ok, Chrome should do the right thing in this case..
>>
>> If you use Virtualmin's validate feature to check these domains, does it
>> report any errors?
>>
>> On 04/Jun/2016 13:39 Pat Erler <[email protected]
>> <http://reply_mail.cgi?new=1&to=perler%40gmail%2Ecom>> wrote ..
>>
>> Sure, chrome, and it works with other domains on the same server, no
>> problem.
>>
>> On Sat, 4 Jun 2016, 21:10 Jamie Cameron, <[email protected]
>> <http://reply_mail.cgi?new=1&to=jcameron%40webmin%2Ecom>> wrote:
>>
>>> On 04/Jun/2016 02:33 Pat Erler <[email protected]
>>> <http://reply_mail.cgi?new=1&to=perler%40gmail%2Ecom>> wrote ..
>>> > I recently added a domain to a server which had a "proper" ssl
>>> certificate
>>> > installed (I transferred the domain from another server).
>>> >
>>> > when I gave the domain the shared IP which is used by other servers
>>> with
>>> > let's encrypt certificates, I got served the first certificate from
>>> let's
>>> > encypt (domain with an A, here a-achat.com, so it looks like it is the
>>> > first alphabetically).
>>> >
>>> > Ok,I thought, give the domain a let's encrypt certificate, but this
>>> doesn't
>>> > work either, I still get:
>>> >
>>> > This server could not prove that it is kosmotique.org; its security
>>> > certificate is from a-achat.com. This may be caused by a
>>> misconfiguration
>>> > or an attacker intercepting your connection.
>>> >
>>> > the domains in question is:
>>> >
>>> > https://kosmotique.org which brings:
>>> > https://www.sslshopper.com/ssl-checker.html#hostname=kosmotique.org
>>> >
>>> > bug or a mistake on my side?
>>>
>>> Hi Pat,
>>>
>>> Are you using a browser that supports SNI, so that you can have multiple
>>> SSL certs on the same IP?
>>>
>>>
>>> ------------------------------------------------------------------------------
>>> What NetFlow Analyzer can do for you? Monitors network bandwidth and
>>> traffic
>>> patterns at an interface-level. Reveals which users, apps, and protocols
>>> are
>>> consuming the most bandwidth. Provides multi-vendor support for NetFlow,
>>> J-Flow, sFlow and other flows. Make informed decisions using capacity
>>> planning reports.
>>> https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
>>> -
>>> Forwarded by the Webmin mailing list at
>>> [email protected]
>>> <http://reply_mail.cgi?new=1&to=webadmin%2Dlist%40lists%2Esourceforge%2Enet>
>>> To remove yourself from this list, go to
>>> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>>>
>> --
>>
>>
>>
>>
>>
>> ------------------------------------------------------------------------------
>> What NetFlow Analyzer can do for you? Monitors network bandwidth and
>> traffic
>> patterns at an interface-level. Reveals which users, apps, and protocols
>> are
>> consuming the most bandwidth. Provides multi-vendor support for NetFlow,
>> J-Flow, sFlow and other flows. Make informed decisions using capacity
>> planning reports.
>> https://ad.doubleclick.net/ddm/clk/305295220;132659582;e-
>> Forwarded by the Webmin mailing list at
>> [email protected]
>> <http://reply_mail.cgi?new=1&to=webadmin%2Dlist%40lists%2Esourceforge%2Enet>
>> To remove yourself from this list, go to
>> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>>
> --
>
>
>
>
>
> ------------------------------------------------------------------------------
> What NetFlow Analyzer can do for you? Monitors network bandwidth and
> traffic
> patterns at an interface-level. Reveals which users, apps, and protocols
> are
> consuming the most bandwidth. Provides multi-vendor support for NetFlow,
> J-Flow, sFlow and other flows. Make informed decisions using capacity
> planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
> -
> Forwarded by the Webmin mailing list at
> [email protected]
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>
--

------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity 
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e

-
Forwarded by the Webmin mailing list at [email protected]
To remove yourself from this list, go to
http://lists.sourceforge.net/lists/listinfo/webadmin-list