Re: [webmin-l] wrong let's encrypt certificate served

ok, this seems to be have the problem: when restoring the backed up servers
the address is set to:

<VirtualHost *:

when creating a new server, this line reads:

<VirtualHost 1.2.3.4:

I wonder now, how I can present a defined SSL certificate when a virtual
server has no ssl website. wight now, the alphabetical first SSL
certificate is presented. (The certificate will never be accepted by the
browser, I know, but I want to control which wrong certificate is presented
for privacy reasons)



On Fri, Jun 10, 2016 at 8:47 AM Jamie Cameron <[email protected]> wrote:

> Try changing them all to be consistent - either an IP for every
> virtualhost on the same address, or a *.
>
> On 07/Jun/2016 02:27 Pat Erler <[email protected]> wrote ..
>
> and I now see, that the new IP address for kosmotique.org (a second
> shared IP on the server, not a dedicated) is not in the kosmotique.conf
> file, there it is still *:80 and *:443 - is this the correct behavior?
>
> is there a way to force a rebuild of the .conf file?
>
> On Tue, Jun 7, 2016 at 11:02 AM Pat Erler <[email protected]
> <http://reply_mail.cgi?new=1&to=perler%40gmail%2Ecom>> wrote:
>
>> Mh.. it got even stranger.
>>
>> now the whole ssl domain (https://kosmotique.org) shows the content for
>> a different domain (https:// a-chat.com) not just the wrong SSL
>> certiificate
>>
>> I gave kosmotqiue.org a sperate IP so that it works for now but for
>> testing switched back to the shared IP for both domains, and the domain
>> which is shown (a-chat..) has
>>
>> 85.10.223.10:443 in the virtualhost (for ssl)
>>
>> the "broken" domain has
>>
>> *:443 in the virtualhost section
>>
>> changing this to 85.10.223.10:443 doesn help either.
>>
>>
>>
>> On Tue, Jun 7, 2016 at 6:51 AM Jamie Cameron <[email protected]
>> <http://reply_mail.cgi?new=1&to=jcameron%40webmin%2Ecom>> wrote:
>>
>>> In your Apache config, is the IP in the <virtualhost> block the same for
>>> all the domains?
>>>
>>> On 06/Jun/2016 00:32 Pat Erler <[email protected]
>>> <http://reply_mail.cgi?new=1&to=perler%40gmail%2Ecom>> wrote ..
>>>
>>> "All features OK" it says.
>>>
>>> the certificates look good too (the date of creation looks good)
>>>
>>> On Mon, Jun 6, 2016 at 12:53 AM Jamie Cameron <[email protected]
>>> <http://reply_mail.cgi?new=1&to=jcameron%40webmin%2Ecom>> wrote:
>>>
>>>> Ok, Chrome should do the right thing in this case..
>>>>
>>>> If you use Virtualmin's validate feature to check these domains, does
>>>> it report any errors?
>>>>
>>>> On 04/Jun/2016 13:39 Pat Erler <[email protected]
>>>> <http://reply_mail.cgi?new=1&to=perler%40gmail%2Ecom>> wrote ..
>>>>
>>>> Sure, chrome, and it works with other domains on the same server, no
>>>> problem.
>>>>
>>>> On Sat, 4 Jun 2016, 21:10 Jamie Cameron, <[email protected]
>>>> <http://reply_mail.cgi?new=1&to=jcameron%40webmin%2Ecom>> wrote:
>>>>
>>>>> On 04/Jun/2016 02:33 Pat Erler <[email protected]
>>>>> <http://reply_mail.cgi?new=1&to=perler%40gmail%2Ecom>> wrote ..
>>>>> > I recently added a domain to a server which had a "proper" ssl
>>>>> certificate
>>>>> > installed (I transferred the domain from another server).
>>>>> >
>>>>> > when I gave the domain the shared IP which is used by other servers
>>>>> with
>>>>> > let's encrypt certificates, I got served the first certificate from
>>>>> let's
>>>>> > encypt (domain with an A, here a-achat.com, so it looks like it is
>>>>> the
>>>>> > first alphabetically).
>>>>> >
>>>>> > Ok,I thought, give the domain a let's encrypt certificate, but this
>>>>> doesn't
>>>>> > work either, I still get:
>>>>> >
>>>>> > This server could not prove that it is kosmotique.org; its security
>>>>> > certificate is from a-achat.com. This may be caused by a
>>>>> misconfiguration
>>>>> > or an attacker intercepting your connection.
>>>>> >
>>>>> > the domains in question is:
>>>>> >
>>>>> > https://kosmotique.org which brings:
>>>>> > https://www.sslshopper.com/ssl-checker.html#hostname=kosmotique.org
>>>>> >
>>>>> > bug or a mistake on my side?
>>>>>
>>>>> Hi Pat,
>>>>>
>>>>> Are you using a browser that supports SNI, so that you can have
>>>>> multiple
>>>>> SSL certs on the same IP?
>>>>>
>>>>>
>>>>> ------------------------------------------------------------------------------
>>>>> What NetFlow Analyzer can do for you? Monitors network bandwidth and
>>>>> traffic
>>>>> patterns at an interface-level. Reveals which users, apps, and
>>>>> protocols are
>>>>> consuming the most bandwidth. Provides multi-vendor support for
>>>>> NetFlow,
>>>>> J-Flow, sFlow and other flows. Make informed decisions using capacity
>>>>> planning reports.
>>>>> https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
>>>>> -
>>>>> Forwarded by the Webmin mailing list at
>>>>> [email protected]
>>>>> <http://reply_mail.cgi?new=1&to=webadmin%2Dlist%40lists%2Esourceforge%2Enet>
>>>>> To remove yourself from this list, go to
>>>>> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>>>>>
>>>> --
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> ------------------------------------------------------------------------------
>>>> What NetFlow Analyzer can do for you? Monitors network bandwidth and
>>>> traffic
>>>> patterns at an interface-level. Reveals which users, apps, and
>>>> protocols are
>>>> consuming the most bandwidth. Provides multi-vendor support for NetFlow,
>>>> J-Flow, sFlow and other flows. Make informed decisions using capacity
>>>> planning reports.
>>>> https://ad.doubleclick.net/ddm/clk/305295220;132659582;e-
>>>> Forwarded by the Webmin mailing list at
>>>> [email protected]
>>>> <http://reply_mail.cgi?new=1&to=webadmin%2Dlist%40lists%2Esourceforge%2Enet>
>>>> To remove yourself from this list, go to
>>>> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>>>>
>>> --
>>>
>>>
>>>
>>>
>>>
>>> ------------------------------------------------------------------------------
>>> What NetFlow Analyzer can do for you? Monitors network bandwidth and
>>> traffic
>>> patterns at an interface-level. Reveals which users, apps, and protocols
>>> are
>>> consuming the most bandwidth. Provides multi-vendor support for NetFlow,
>>> J-Flow, sFlow and other flows. Make informed decisions using capacity
>>> planning reports.
>>> https://ad.doubleclick.net/ddm/clk/305295220;132659582;e-
>>> Forwarded by the Webmin mailing list at
>>> [email protected]
>>> <http://reply_mail.cgi?new=1&to=webadmin%2Dlist%40lists%2Esourceforge%2Enet>
>>> To remove yourself from this list, go to
>>> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>>>
>> --
>>
>>
>> --
>
>
>
>
>
> ------------------------------------------------------------------------------
> What NetFlow Analyzer can do for you? Monitors network bandwidth and
> traffic
> patterns at an interface-level. Reveals which users, apps, and protocols
> are
> consuming the most bandwidth. Provides multi-vendor support for NetFlow,
> J-Flow, sFlow and other flows. Make informed decisions using capacity
> planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
> -
> Forwarded by the Webmin mailing list at
> [email protected]
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>
--

------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity 
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e

-
Forwarded by the Webmin mailing list at [email protected]
To remove yourself from this list, go to
http://lists.sourceforge.net/lists/listinfo/webadmin-list