Sponsor:

Server and Web Integrator
Link:
Kloxo-MR logo
6.5.0 or 7.0.0
Click for "How to install"
Donation/Sponsorship:
Kloxo-MR is open-source.
Donate and or Sponsorship always welcome.
Click to:
Click Here
Please login or register. 2024-04-24, 09:05:10

Author Topic: [warn] RSA server certificate wildcard CommonName (CN) `*.lxlabs.com' does NOT m  (Read 7874 times)

0 Members and 1 Guest are viewing this topic.

Offline insanity

  • Senior Member
  • *
  • Posts: 215
  • Karma: +0/-0
    • View Profile
How to stop this? Its appear on all clients logs and it is very irritating

Offline Spacedust

  • Super Grand Master
  • ****
  • Posts: 4,050
  • Karma: +1/-0
    • View Profile
Install your own SSL cert ;)

Offline insanity

  • Senior Member
  • *
  • Posts: 215
  • Karma: +0/-0
    • View Profile
Yea and then it change to *.my.cert|host' :)
This problem is because all domains use shared ssl..

Offline Spacedust

  • Super Grand Master
  • ****
  • Posts: 4,050
  • Karma: +1/-0
    • View Profile
Yea and then it change to *.my.cert|host' :)
This problem is because all domains use shared ssl..

Useful tip. Where to change it ?

Offline insanity

  • Senior Member
  • *
  • Posts: 215
  • Karma: +0/-0
    • View Profile
Actually i don't know.
As i see this
Code: [Select]
foreach ($certnamelist as $ip => $certname) {
    $count = 0;

    foreach ($ports as &$port) {
        $protocol = ($count === 0) ? "http://" : "https://";

        if ($disabled) {

<?php
            
if ($count !== 0) {
?>
in domains.tpl not work properly.
If you add domain without SSL as i know there must be only virtualhost*:80, or if 443 is added it must be added without this:
Code: [Select]
    <IfModule mod_ssl.c>
        SSLEngine On
        SSLCertificateFile /home/kloxo/httpd/ssl/<?php echo $certname?>.crt
        SSLCertificateKeyFile /home/kloxo/httpd/ssl/<?php echo $certname?>.key
        SSLCACertificatefile /home/kloxo/httpd/ssl/<?php echo $certname?>.ca
    </IfModule>
« Last Edit: 2014-01-18, 22:27:57 by insanity »

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Add your certificate and assign to IP.
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline chrisf

  • Senior Master
  • **
  • Posts: 883
  • Karma: +11/-1
  • Gender: Male
  • Be the change that you wish to see in the world.
    • View Profile
    • Conviction's Hosting
I disable SSL for my client's when setting up the packages.  Simply unselect SSL.  If they want SSL I have them add an IP to payment, and I enable SSL with the certificate they purchased.
Christopher

Knowledge in: PHP, Perl, MySQL, Javascript, Actionscript, FLASH, HTML, CSS
Server Administrator / Developer: https://convictionshosting.com

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Remember, '[warn] RSA server certificate wildcard CommonName (CN) `*.lxlabs.com' does NOT' is normal. It's not error but just warning.
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline insanity

  • Senior Member
  • *
  • Posts: 215
  • Karma: +0/-0
    • View Profile
I didn't say it is a error. But its appear in all clients log.
For example i have wildcard cert *.domain.com
And when i add client with domain2.com this warn appear in his error log on each graceful or reload or restart but it is: [warn] RSA server certificate wildcard CommonName (CN) `*.domain.com' does NOT match.....

Offline Spacedust

  • Super Grand Master
  • ****
  • Posts: 4,050
  • Karma: +1/-0
    • View Profile
Mustafa - please do not overwrite my SSL certs for Kloxo usage on each update !

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Mustafa - please do not overwrite my SSL certs for Kloxo usage on each update !
What's you mean update will be overwrite?. As I know, only update/reinstall qmail will be also re-create ssl.
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

 


Top 10 Social Networking:    Facebook    Twitter    LinkedIn    Pinterest    Google Plus    Tumblr    Instagram    VK    Flickr    Vine
Click Here

Page created in 0.065 seconds with 21 queries.

web stats analysis