Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (nike.apache.org: domain of rtparies@gmail.com designates
 209.85.220.211 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:date:message-id:subject:from:to:content-type;
        b=DzPvDA+UiSzoAZMhAFgH5JFaKSzJaYCkqPXVqtBmAIrO8OoI6b9QHNGGohRK1eDqBX
         WEJHAwIk05mmeiNaYYIHns4jPv9AI0fQm99GJj2Uai/DgpWQNe24X5XslYRPvZ0dS9+H
         vTF2cxpqf957t7Xh2MykblKSvqjz/LY9tHSFI=
MIME-Version: 1.0
Date: Thu, 12 Nov 2009 20:15:58 -0600
Message-ID: <df6e4b490911121815u719ffa73w5311e2372e48c362@mail.gmail.com>
From: Randy Paries <rtparies@gmail.com>
To: users@httpd.apache.org
Content-Type: text/plain; charset=ISO-8859-1
Subject: [users@httpd] apache with 2 SSL Certs Problem

Hello,
i have a box with two domains
CentOS release 5.3
Server version: Apache/2.2.3

initially the box only had one IP and domain.

I went and got a SSL cert for that domain and everything was fine.

i then went and added a second IP and a second Domain (eventually i
planned to split these)

I then created a test self signed cert for the second domain/IP (same NIC card)

Since i have done that my first domain/IP SSL gives me the error
message that it is the incorrect cert
"cert belongs to a different site" and when i look at the cert via FF
it is all localhost / self signed stufff

i even yesterday tried to re-issue the old cert
openssl req -new -key www.mydomain.com.key -out www.mydomain.com.csr

I have removed the ssl on the second domain for now

in my httpd,conf I am pointing to the key and crt i just created
    SSLEngine on
    SSLCertificateFile /etc/httpd/conf/ssl.crt/www.mydomain.com.crt
    SSLCertificateKeyFile /etc/httpd/conf/ssl.key/www.mydomain.com.key

in the SSL error log i see
[Thu Nov 12 09:26:41 2009] [warn] RSA server certificate is a CA
certificate (BasicConstraints: CA == TRUE !?)
[Thu Nov 12 09:26:41 2009] [warn] RSA server certificate CommonName
(CN) `localhost.localdomain' does NOT match server name!?

I would really appreciate any help
Randy

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org