Mailing-List: contact bugs-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Apache HTTPD Bugs Notification List" <bugs@httpd.apache.org>
From: bugzilla@apache.org
To: bugs@httpd.apache.org
Subject: DO NOT REPLY [Bug 52631] New: SSL / SNI accesses don't work the
 first time the vhost is accessed
Date: Thu, 09 Feb 2012 15:29:04 +0000
Message-ID: <bug-52631-7868@https.issues.apache.org/bugzilla/>
Auto-Submitted: auto-generated
Content-Type: text/plain; charset="UTF-8"
MIME-Version: 1.0

https://issues.apache.org/bugzilla/show_bug.cgi?id=52631

             Bug #: 52631
           Summary: SSL / SNI accesses don't work the first time the vhost
                    is accessed
           Product: Apache httpd-2
           Version: 2.2.20
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: major
          Priority: P2
         Component: mod_ssl
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: calestyo@scientia.net
    Classification: Unclassified


Hi.

I've noticed the following problem, which happens at least with Firefox and
Chromium as clients.

I'm using SSL with SNI.

There is a default name based virtual host, with it's own hostname and
corresponding certificate as well as non-default name based vhosts with own
hostname and certs.

SSL client authentication is disabled.

When I have a freshly started apache2 and access the non-default vhost via
SSL/SNI the first time this fails and apache actually takes the default vhost
and also delivers the server cert of that to the client (which is the reason
why it fails - well at least from a SSL point of view).

When I click reload in the browser it works from then on (I'm not sure if it
works really infinitely from then on,.. there might have been cases where it
happened again after some time... so perhaps there is some caching issue?!).


This is reproducible, when restarting apache again,.. it happens again (the
first time).


Cheers,
Chris.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org