[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#414855: wildcard cert not working in apache 2.2



Package: apache2
Version: 2.2.3-3.3

a wildcard SSL certificate (for *.chemistry.unimelb.edu.au) that works
fine in apache 2.0.49 on a SUSE server, doesn't work in apache 2.2.3
on debian. (i'm building a pair of debian etch boxes as an LVS
load-balanced replacement for our SUSE web server box, and am currently
deep in the compatibility-testing stage of the migration).

the error message is:

[Wed Mar 14 14:56:55 2007] [warn] RSA server certificate CommonName (CN)
`*.chemistry.unimelb.edu.au' does NOT match server name!?

the domain name in this case is 'it.chemistry.unimelb.edu.au', which
does match the wildcard cert.

i tried googling for similar problems and found this:

http://marc.theaimsgroup.com/?l=apache-cvs&m=114017665119886&w=2

which mentions a patch for apache 2.3 which fixes a similar sounding
problem:

+  *) mod_ssl: Fix spurious hostname mismatch warning for valid
+     wildcard certificates.  PR 37911.  [Nick Burch <nick torchbox.com>]


the date of that patch is 2006-02-17 - has it been backported to
apache2.2 yet?

craig

--
Craig Sanders
Systems Administrator
School of Chemistry
University of Melbourne
Ph: +61 3 83447309




Reply to: