Re: [webmin-l] wrong let's encrypt certificate served
"Jamie Cameron" <[email protected]>
| Newsgroups | gmane.comp.web.webmin.general |
|---|---|
| Message-ID | <[email protected]> |
Ok, that looks like a Virtuamin bug. I assume by restoring a backup, you mean using Virtualmin's own backup/restore process? On 12/Jun/2016 04:58 Pat Erler <[email protected]> wrote .. ok, this seems to be have the problem: when restoring the backed up servers the address is set to: <VirtualHost *: when creating a new server, this line reads: <VirtualHost 1.2.3.4: I wonder now, how I can present a defined SSL certificate when a virtual server has no ssl website. wight now, the alphabetical first SSL certificate is presented. (The certificate will never be accepted by the browser, I know, but I want to control which wrong certificate is presented for privacy reasons) On Fri, Jun 10, 2016 at 8:47 AM Jamie Cameron <[email protected]> wrote: Try changing them all to be consistent - either an IP for every virtualhost on the same address, or a *. On 07/Jun/2016 02:27 Pat Erler <[email protected]> wrote .. and I now see, that the new IP address for kosmotique.org (a second shared IP on the server, not a dedicated) is not in the kosmotique.conf file, there it is still *:80 and *:443 - is this the correct behavior? is there a way to force a rebuild of the .conf file? On Tue, Jun 7, 2016 at 11:02 AM Pat Erler <[email protected]> wrote: Mh.. it got even stranger. now the whole ssl domain (https://kosmotique.org) shows the content for a different domain (https:// a-chat.com) not just the wrong SSL certiificate I gave kosmotqiue.org a sperate IP so that it works for now but for testing switched back to the shared IP for both domains, and the domain which is shown (a-chat..) has 85.10.223.10:443 in the virtualhost (for ssl) the "broken" domain has *:443 in the virtualhost section changing this to 85.10.223.10:443 doesn help either. On Tue, Jun 7, 2016 at 6:51 AM Jamie Cameron <[email protected]> wrote: In your Apache config, is the IP in the <virtualhost> block the same for all the domains? On 06/Jun/2016 00:32 Pat Erler <[email protected]> wrote .. "All features OK" it says. the certificates look good too (the date of creation looks good) On Mon, Jun 6, 2016 at 12:53 AM Jamie Cameron <[email protected]> wrote: Ok, Chrome should do the right thing in this case..If you use Virtualmin's validate feature to check these domains, does it report any errors? On 04/Jun/2016 13:39 Pat Erler <[email protected]> wrote .. Sure, chrome, and it works with other domains on the same server, no problem. On Sat, 4 Jun 2016, 21:10 Jamie Cameron, <[email protected]> wrote: On 04/Jun/2016 02:33 Pat Erler <[email protected]> wrote .. > I recently added a domain to a server which had a "proper" ssl certificate > installed (I transferred the domain from another server). > > when I gave the domain the shared IP which is used by other servers with > let's encrypt certificates, I got served the first certificate from let's > encypt (domain with an A, here a-achat.com, so it looks like it is the > first alphabetically). > > Ok,I thought, give the domain a let's encrypt certificate, but this doesn't > work either, I still get: > > This server could not prove t hat it is kosmotique.org; its security > certificate is from a-achat.com. This may be caused by a misconfiguration > or an attacker intercepting your connection. > > the domains in question is: > > https://kosmotique.org which brings: > https://www.sslshopper.com/ssl-checker.html#hostname=kosmotique.org > > bug or a mistake on my side? Hi Pat, Are you using a browser that supports SNI, so that you can have multiple SSL certs on the same IP? ------------------------------------------------------------------------------ What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic patterns at an interface-level. Reveals which users, apps, and protocols are consuming the most bandwidth. Provides multi-vendor support for NetFlow, J-Flow, sFlow and other flows. Make informed decisions using capacity planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e - Forwarded by the Webmin mailing list at [email protected] To remove yo urself from this list, go to http://lists.sourceforge.net/lists/listinfo/webadmin-list -- ------------------------------------------------------------------------------ What NetFlo w Analyzer can do for you? Monitors network bandwidth and traffic patterns at an interface-level. Reveals which users, apps, and protocols are consuming the most bandwidth. Provides multi-vendor support for NetFlow, J-Flow, sFlow and other flows. Make informed decisions using capacity planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e- Forwarded by the Webmin mailing list at [email protected] To remove yourself from this list, go to http://lists.sourceforge.net/lists/listinfo/webadmin-list -- ------------------------------------------------------------------------------ What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic patterns at an interface-level. Reveals which users, apps, and protocols are consuming the mo st bandwidth. Provides multi-vendor support for NetFlow, J-Flow, sFlow and other flows. Make informed decisions using capacity planning reports. https://ad.doubleclick.net/ddm/clk/305295220; 132659582;e- Forwarded by the Webmin mailing list at [email protected] To remove yourself from this list, go to http://lists.sourceforge.net/lists/listinfo/webadmin-list -- -- ------------------------------------------------------------------------------ What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic patterns at an interface-level. Reveals which users, apps, and protocols are consuming the most bandwidth. Provides multi-vendor support for NetFlow, J-Flow, sFlow and other flows. Make informed decisions using capacity planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e- Forwarded by the Webmin mailing list at [email protected] To remove yourself from this list, go to http://lists.sourc eforge.net/lists/listinfo/webadmin-list -- ------------------------------------------------------------------------------ What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic patterns at an interface-level. Reveals which users, apps, and protocols are consuming the most bandwidth. Provides multi-vendor support for NetFlow, J-Flow, sFlow and other flows. Make informed decisions using capacity planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e - Forwarded by the Webmin mailing list at [email protected] To remove yourself from this list, go to http://lists.sourceforge.net/lists/listinfo/webadmin-list