Re: [webmin-l] wrong let's encrypt certificate served

and I now see, that the new IP address for kosmotique.org (a second shared
IP on the server, not a dedicated) is not in the kosmotique.conf file,
there it is still *:80 and *:443 - is this the correct behavior?

is there a way to force a rebuild of the .conf file?

On Tue, Jun 7, 2016 at 11:02 AM Pat Erler <[email protected]> wrote:

> Mh.. it got even stranger.
>
> now the whole ssl domain (https://kosmotique.org) shows the content for a
> different domain (https:// a-chat.com) not just the wrong SSL certiificate
>
> I gave kosmotqiue.org a sperate IP so that it works for now but for
> testing switched back to the shared IP for both domains, and the domain
> which is shown (a-chat..) has
>
> 85.10.223.10:443 in the virtualhost (for ssl)
>
> the "broken" domain has
>
> *:443 in the virtualhost section
>
> changing this to 85.10.223.10:443 doesn help either.
>
>
>
> On Tue, Jun 7, 2016 at 6:51 AM Jamie Cameron <[email protected]> wrote:
>
>> In your Apache config, is the IP in the <virtualhost> block the same for
>> all the domains?
>>
>> On 06/Jun/2016 00:32 Pat Erler <[email protected]> wrote ..
>>
>> "All features OK" it says.
>>
>> the certificates look good too (the date of creation looks good)
>>
>> On Mon, Jun 6, 2016 at 12:53 AM Jamie Cameron <[email protected]
>> <http://reply_mail.cgi?new=1&to=jcameron%40webmin%2Ecom>> wrote:
>>
>>> Ok, Chrome should do the right thing in this case..
>>>
>>> If you use Virtualmin's validate feature to check these domains, does it
>>> report any errors?
>>>
>>> On 04/Jun/2016 13:39 Pat Erler <[email protected]
>>> <http://reply_mail.cgi?new=1&to=perler%40gmail%2Ecom>> wrote ..
>>>
>>> Sure, chrome, and it works with other domains on the same server, no
>>> problem.
>>>
>>> On Sat, 4 Jun 2016, 21:10 Jamie Cameron, <[email protected]
>>> <http://reply_mail.cgi?new=1&to=jcameron%40webmin%2Ecom>> wrote:
>>>
>>>> On 04/Jun/2016 02:33 Pat Erler <[email protected]
>>>> <http://reply_mail.cgi?new=1&to=perler%40gmail%2Ecom>> wrote ..
>>>> > I recently added a domain to a server which had a "proper" ssl
>>>> certificate
>>>> > installed (I transferred the domain from another server).
>>>> >
>>>> > when I gave the domain the shared IP which is used by other servers
>>>> with
>>>> > let's encrypt certificates, I got served the first certificate from
>>>> let's
>>>> > encypt (domain with an A, here a-achat.com, so it looks like it is
>>>> the
>>>> > first alphabetically).
>>>> >
>>>> > Ok,I thought, give the domain a let's encrypt certificate, but this
>>>> doesn't
>>>> > work either, I still get:
>>>> >
>>>> > This server could not prove that it is kosmotique.org; its security
>>>> > certificate is from a-achat.com. This may be caused by a
>>>> misconfiguration
>>>> > or an attacker intercepting your connection.
>>>> >
>>>> > the domains in question is:
>>>> >
>>>> > https://kosmotique.org which brings:
>>>> > https://www.sslshopper.com/ssl-checker.html#hostname=kosmotique.org
>>>> >
>>>> > bug or a mistake on my side?
>>>>
>>>> Hi Pat,
>>>>
>>>> Are you using a browser that supports SNI, so that you can have multiple
>>>> SSL certs on the same IP?
>>>>
>>>>
>>>> ------------------------------------------------------------------------------
>>>> What NetFlow Analyzer can do for you? Monitors network bandwidth and
>>>> traffic
>>>> patterns at an interface-level. Reveals which users, apps, and
>>>> protocols are
>>>> consuming the most bandwidth. Provides multi-vendor support for NetFlow,
>>>> J-Flow, sFlow and other flows. Make informed decisions using capacity
>>>> planning reports.
>>>> https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
>>>> -
>>>> Forwarded by the Webmin mailing list at
>>>> [email protected]
>>>> <http://reply_mail.cgi?new=1&to=webadmin%2Dlist%40lists%2Esourceforge%2Enet>
>>>> To remove yourself from this list, go to
>>>> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>>>>
>>> --
>>>
>>>
>>>
>>>
>>>
>>> ------------------------------------------------------------------------------
>>> What NetFlow Analyzer can do for you? Monitors network bandwidth and
>>> traffic
>>> patterns at an interface-level. Reveals which users, apps, and protocols
>>> are
>>> consuming the most bandwidth. Provides multi-vendor support for NetFlow,
>>> J-Flow, sFlow and other flows. Make informed decisions using capacity
>>> planning reports.
>>> https://ad.doubleclick.net/ddm/clk/305295220;132659582;e-
>>> Forwarded by the Webmin mailing list at
>>> [email protected]
>>> <http://reply_mail.cgi?new=1&to=webadmin%2Dlist%40lists%2Esourceforge%2Enet>
>>> To remove yourself from this list, go to
>>> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>>>
>> --
>>
>>
>>
>>
>>
>> ------------------------------------------------------------------------------
>> What NetFlow Analyzer can do for you? Monitors network bandwidth and
>> traffic
>> patterns at an interface-level. Reveals which users, apps, and protocols
>> are
>> consuming the most bandwidth. Provides multi-vendor support for NetFlow,
>> J-Flow, sFlow and other flows. Make informed decisions using capacity
>> planning reports.
>> https://ad.doubleclick.net/ddm/clk/305295220;132659582;e-
>> Forwarded by the Webmin mailing list at
>> [email protected]
>> To remove yourself from this list, go to
>> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>>
> --
>
>
> --

------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity 
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e

-
Forwarded by the Webmin mailing list at [email protected]
To remove yourself from this list, go to
http://lists.sourceforge.net/lists/listinfo/webadmin-list