Error in sub domain creation

mohan.aturheart · 07-02-2008, 12:09 AM

Dear all,

I am calling a shell script file from php. This shell script file handles sub domain creation scripts.

I am given here the model script to create sub domain creation

In that for variable $droot we assign the path of folder in server.
$server_ip - IP address, $1 - subddomain value for example :xyz, in variable $4 - we assign the domain name for ex: - mohan.systems.com

touch /etc/httpd/clients/$1.$4.conf
echo "<VirtualHost $server_ip:80>" >> /etc/httpd/clients/$1.$4.conf
echo "ServerAdmin root@localhost" >> /etc/httpd/clients/$1.$4.conf
echo "DocumentRoot $droot/$1" >> /etc/httpd/clients/$1.$4.conf
echo "ServerName $1.$4" >> /etc/httpd/clients/$1.$4.conf
echo "ErrorLog logs/$1.$4-error_log" >> /etc/httpd/clients/$1.$4.conf
echo "CustomLog logs/$1.$4-access_log common" >> /etc/httpd/clients/$1.$4.conf
echo "</VirtualHost>" >> /etc/httpd/clients/$1.$4.conf
echo "<VirtualHost $server_ip:443>" >> /etc/httpd/clients/$1.$4.conf
echo "SSLEngine on" >> /etc/httpd/clients/$1.$4.conf
echo "SSLCertificateFile /etc/httpd/conf/ssl.crt/besdssacrt.crt" >> /etc/httpd/clients/$1.$4.conf
echo "SSLCertificateKeyFile /etc/httpd/conf/ssl.key/betaseddskey.key" >> /etc/httpd/clients/$1.$4.conf
echo "ServerAdmin root@localhost" >> /etc/httpd/clients/$1.$4.conf
echo "DocumentRoot $droot/$1" >> /etc/httpd/clients/$1.$4.conf
echo "ServerName $1.$4.com" >> /etc/httpd/clients/$1.$4.conf
echo "ErrorLog logs/$1.$4-error_log" >> /etc/httpd/clients/$1.$4conf
echo "CustomLog logs/$1.$4-access_log common" >> /etc/httpd/clients/$1.$4.conf
echo "</VirtualHost>" >> /etc/httpd/clients/$1.$4.conf
/etc/init.d/httpd reload

They raise the error in error log as - [warn] RSA server certificate CommonName (CN) `xyz.mohan.systems.com' does NOT match server name!?

and the subdomain is not reloaded. After we reload manually the website page get works.

Mr. C. · 07-02-2008, 01:19 AM

First, here is an example of a cleaner way to output, removing the extraneous echo's and redirections:

Code:

var1=cat
var2=dog

>output.txt cat <<-END
    this is
    multiline output
    $var1
    $var2
END

You don't need the initial touch command; the redirection takes care of creating the file. Finally, assign $1, $2, etc. to meaningful variable names, and use those instead, to be self-documenting.

Your CN name needs to match the name of the host.

emi_ramo · 07-02-2008, 05:22 AM

Quote:

Your CN name needs to match the name of the host.

But if it doesn't, it can also run. The problem is that the navigator will inform to the user that it is possible there is an identity stealing attack. The user will need to "accept" the certificate to be able to navigate the SSL page.

Mr. C. · 07-02-2008, 12:22 PM

The point of security is not to keep ignoring nasty warnings that appear saying "There might be a security breach... you can ignore if you want"; users can't know a priori if a site admin has been lazy or incompetent.