#1982: Website SSL certificate does not list madwifi.org domain name
------------------------------------------+---------------------------------
      Reporter:  [EMAIL PROTECTED]  |       Owner:  mrenzmann
          Type:  task                     |      Status:  assigned 
      Priority:  minor                    |   Milestone:           
     Component:  website                  |     Version:           
    Resolution:                           |    Keywords:           
Patch_attached:  0                        |  
------------------------------------------+---------------------------------
Comment (by mrenzmann):

 Ok, I've investigated a little further, the situation is as follows:

  1. A wildcard certificate would not help, since for madwifi.org we have
 different hostnames on different IPs (www and svn on 217.24.1.134, lists
 on 217.24.1.135, for example). Changing that would result in an
 administrative mess.
  2. My next idea was to use several independant certificates (one per
 hostname, where the hostname is the main subject of the certificate,
 without any !SubjectAltNames being specified). I did test that, and as
 expected such a setup fails for reasons explained
 [http://httpd.apache.org/docs/2.0/ssl/ssl_faq.html#vhosts here].
  3. As for the certificate used for Trac and Subversion: changing the
 current CN of that certificate to either madwifi.org or svn.madwifi.org
 will solve the issue for just one of those two hostnames and thus wouldn't
 help.

 The cleanest solution is to have one IP per SSL-enabled host, which means
 we'd need one additional IP. I'll see what I can do here.

 I fear that, even if we can get another IP, there will be an issue with
 "he who manages the madwifi.org zonefile". I've tried to contact Alvin
 several times during the past weeks but got no reply back from him -
 again. :-(

-- 
Ticket URL: <http://madwifi.org/ticket/1982#comment:5>
madwifi.org <http://madwifi.org/>
Multiband Atheros Driver for Wireless Fidelity
-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php
_______________________________________________
Madwifi-tickets mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/madwifi-tickets

Reply via email to