LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Server (https://www.linuxquestions.org/questions/linux-server-73/)
-   -   https certication error , the page can not be loaded via https (https://www.linuxquestions.org/questions/linux-server-73/https-certication-error-the-page-can-not-be-loaded-via-https-4175485386/)

ust 11-21-2013 09:28 AM

https certication error , the page can not be loaded via https
 
I have just setup a ssl cert in my server , the cert (view cert) is as below .

View cert
==========

Issused to : *.xxx.com

My apache config file is as below.
===================================
<VirtualHost *:443>
ServerName abc.xxx.com
DocumentRoot
SSLEngine on
SSLCertificateFile
SSLCertificateKeyFile
SSLCertificateChainFile
</VirtualHost>

but when I use https to access the web page , it pops the below error in error log
===================================================================================
[warn] RSA server certificate CommonName (CN) `*.xxx.com' does NOT match server name!?


the https is crossed by red line .

I am wonder the cert is wildcard , the servername (abc.xxx.com) in virtualhost is matched with this wildcard , why still pop me the server name is not match ? how to fix it ? thanks

Habitual 11-21-2013 10:02 AM

missing entries for
Code:

SSLCertificateFile
SSLCertificateKeyFile
SSLCertificateChainFile

Code:

SSLCertificateFile /etc/pki/tls/certs/domain.crt
SSLCertificateKeyFile  /etc/pki/tls/private/domain.key
SSLCertificateChainFile /etc/pki/tls/certs/ca-domain.crt

are sanitized examples of a working ssl host.

byran cheung 11-21-2013 08:49 PM

Quote:

Originally Posted by Habitual (Post 5068390)
missing entries for
Code:

SSLCertificateFile
SSLCertificateKeyFile
SSLCertificateChainFile

Code:

SSLCertificateFile /etc/pki/tls/certs/domain.crt
SSLCertificateKeyFile  /etc/pki/tls/private/domain.key
SSLCertificateChainFile /etc/pki/tls/certs/ca-domain.crt

are sanitized examples of a working ssl host.

thx reply ,

in my previous post , I just do not show the key name only , I sure I have point to the right cert and key , but still not work.


All times are GMT -5. The time now is 09:48 AM.