Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Message-ID: <554B0BC4.1060803@mind-and-go.com>
Date: Thu, 07 May 2015 08:52:52 +0200
From: mialinglist <mailinglist@mind-and-go.com>
User-Agent: Mozilla/5.0 (X11; Linux x86_64;
 rv:31.0) Gecko/20100101 Thunderbird/31.6.0
MIME-Version: 1.0
To: "users@httpd.apache.org" <users@httpd.apache.org>
Content-Type: multipart/alternative;
 boundary="------------040703020009030504050908"
Subject: [users@httpd] Strange SSL Issue

--------------040703020009030504050908
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit

Hi everyone,

I write to the community because I'm loosing my hairs on SSL conf and 
multi VHost. Here is the context.
I'm working on CentOS 6.6 an apache 2.2.
I have multiples httpS VHosts :
* domain.tld
* sub0.domain.tld
* sub1.domain.tld
* sub2.domain.tld

Each of those vhost were working with a self signd certificate. Running 
all of those site through web browser cause no special problem once the 
exception has been added in the browser.

Recently I decided to add a true signed certificate for the domain.tld. 
It's a guenine mono domain certificate and Global sugn gave me 2 
certificates, the main on and the intermediate one.
I've setted up the VHosts successfully and whatever the browser the site 
is correctly recognized....UNTIL... I strat browsing all ather vhosts 
that are subdomain of the main one.
All the website are no more trusted at all and impossible to force the 
exception on the SSL.
Once I reste the self cigned certificate on the vhost domain.tld, clear 
cache and delete certificates exceptions everything works fine.

I don't see something special in logs, Itried with or without Selinux, 
mod_security, etc...

Any tips/advice would be appreciated.

regards


--------------040703020009030504050908
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 7bit

<html>
  <head>

    <meta http-equiv="content-type" content="text/html; charset=utf-8">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    <font size="-1">Hi everyone,<br>
      <br>
      I write to the community because I'm loosing my hairs on SSL conf
      and multi VHost. Here is the context.<br>
      I'm working on CentOS 6.6 an apache 2.2.<br>
      I have multiples httpS VHosts :<br>
      * domain.tld<br>
      * sub0.domain.tld<br>
    </font><font size="-1">* sub1.domain.tld</font><br>
    <font size="-1">* sub2.domain.tld<br>
      <br>
      Each of those vhost were working with a self signd certificate.
      Running all of those site through web browser cause no special
      problem once the exception has been added in the browser.<br>
      <br>
      Recently I decided to add a true signed certificate for the
      domain.tld. It's a guenine mono domain certificate and Global sugn
      gave me 2 certificates, the main on and the intermediate one.<br>
      I've setted up the VHosts successfully and whatever the browser
      the site is correctly recognized....UNTIL... I strat browsing all
      ather vhosts that are subdomain of the main one.<br>
      All the website are no more trusted at all and impossible to force
      the exception on the SSL.<br>
      Once I reste the self cigned certificate on the vhost domain.tld,
      clear cache and delete certificates exceptions everything works
      fine.<br>
      <br>
      I don't see something special in logs, Itried with or without
      Selinux, mod_security, etc...<br>
      <br>
      Any tips/advice would be appreciated.<br>
      <br>
      regards<br>
      <br>
    </font>
  </body>
</html>

--------------040703020009030504050908--