The ServerName directive should be the name that the certificate is, not
the canonical name. Apache always returns the ServerName as the site's
official name, and that causes this mess.
---
Mat Butler, Winged Wolf <[EMAIL PROTECTED]>
SPASTIC Web Engineer SPASTIC Server Administrator
----Begin FurryCode v1.3----
FCWw5amrsw A- C+ D H+++ M+++++[servercoder] P+ R++ T+++ W Z++ Sm++
RLCT/M*/LW* a cl/u/v++++>+++++ !d e- f>++++ h++ iwf+++ j p->+ sm++
----End FurryCode v1.3----
On Wed, 8 Mar 2000, Ricardo Nunez wrote:
> Hi,
>
> It is the first time I requested a free trial certificate
> (http://www.verisign.com/). I went to
> http://www.verisign.com/server/trial/welcome/index.html to register my
> browser.
>
> Anyway the browser (Netscape) launches a windows telling me �The
> certificate that the site 'platon.dst.usb.ve' has presented does not
> contain the correct site name�. In the trial ID I said that my machine
> was www.dst.usb.ve (an alias) but it is the same problem.
>
> The latest version of my apache httpd.conf has written:
>
> SSLEngine on
>
> SSLVerifyClient none
> #SSLVerifyClient require
> #SSLVerifyDepth 10
>
> #SSLCertificateFile conf/ssl.crt/server.crt
> #SSLCertificateKeyFile conf/ssl.key/server.key
> #SSLCACertificateFile conf/ssl.crt/ca-bundle.crt
>
> SSLCertificateFile conf/ssl.crt/certificado.crt
> SSLCertificateKeyFile conf/ssl.key/llave.key
> SSLCACertificateFile conf/ssl.crt/certificado.crt
>
> DocumentRoot /web0/seguro
>
> ServerName platon.dst.usb.ve
>
> /////////////////////////////////////////////////////////
>
> �certificado.crt� and �llave.key� contain what verisign sent me.
>
> When I changed SSLVerifyClient to require, the system stops working with
> ssl (it does not accept my browser).
>
> What do you think it is the problem??
>
> Saludos,
>
> Ricardo Nunez
> [EMAIL PROTECTED]
>
>
> ______________________________________________________________________
> Apache Interface to OpenSSL (mod_ssl) www.modssl.org
> User Support Mailing List [EMAIL PROTECTED]
> Automated List Manager [EMAIL PROTECTED]
>
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
