MRatWork Forum by Mustafa Ramadhan

Sawo Project - Kloxo-MR Discussions => Kloxo-MR Technical Helps => Topic started by: insanity on 2014-01-18, 15:35:07

Title: [warn] RSA server certificate wildcard CommonName (CN) `*.lxlabs.com' does NOT m
Post by: insanity on 2014-01-18, 15:35:07

How to stop this? Its appear on all clients logs and it is very irritating

Title: Re: [warn] RSA server certificate wildcard CommonName (CN) `*.lxlabs.com' does NOT m
Post by: Spacedust on 2014-01-18, 20:12:44

Install your own SSL cert ;)

Title: Re: [warn] RSA server certificate wildcard CommonName (CN) `*.lxlabs.com' does NOT m
Post by: insanity on 2014-01-18, 20:33:51

Yea and then it change to *.my.cert|host' :)
This problem is because all domains use shared ssl..

Title: Re: [warn] RSA server certificate wildcard CommonName (CN) `*.lxlabs.com' does NOT m
Post by: Spacedust on 2014-01-18, 22:00:48

Quote from: insanity on 2014-01-18, 20:33:51

Yea and then it change to *.my.cert|host' :)
This problem is because all domains use shared ssl..

Useful tip. Where to change it ?

Title: Re: [warn] RSA server certificate wildcard CommonName (CN) `*.lxlabs.com' does NOT m
Post by: insanity on 2014-01-18, 22:17:15

Actually i don't know.
As i see this

Code: [Select]

foreach ($certnamelist as $ip => $certname) {
    $count = 0;

    foreach ($ports as &$port) {
        $protocol = ($count === 0) ? "http://" : "https://";

        if ($disabled) {

<?php
            if ($count !== 0) {
?>in domains.tpl not work properly.
If you add domain without SSL as i know there must be only virtualhost*:80, or if 443 is added it must be added without this:

Code: [Select]

    <IfModule mod_ssl.c>
        SSLEngine On
        SSLCertificateFile /home/kloxo/httpd/ssl/<?php echo $certname; ?>.crt
        SSLCertificateKeyFile /home/kloxo/httpd/ssl/<?php echo $certname; ?>.key
        SSLCACertificatefile /home/kloxo/httpd/ssl/<?php echo $certname; ?>.ca
    </IfModule>


Title: Re: [warn] RSA server certificate wildcard CommonName (CN) `*.lxlabs.com' does NOT m
Post by: MRatWork on 2014-01-19, 02:37:05

Add your certificate and assign to IP.

Title: Re: [warn] RSA server certificate wildcard CommonName (CN) `*.lxlabs.com' does NOT m
Post by: chrisf on 2014-01-19, 17:12:57

I disable SSL for my client's when setting up the packages.  Simply unselect SSL.  If they want SSL I have them add an IP to payment, and I enable SSL with the certificate they purchased.

Title: Re: [warn] RSA server certificate wildcard CommonName (CN) `*.lxlabs.com' does NOT m
Post by: MRatWork on 2014-01-19, 17:27:07

Remember, '[warn] RSA server certificate wildcard CommonName (CN) `*.lxlabs.com' does NOT' is normal. It's not error but just warning.

Title: Re: [warn] RSA server certificate wildcard CommonName (CN) `*.lxlabs.com' does NOT m
Post by: insanity on 2014-01-19, 18:27:10

I didn't say it is a error. But its appear in all clients log.
For example i have wildcard cert *.domain.com
And when i add client with domain2.com this warn appear in his error log on each graceful or reload or restart but it is: [warn] RSA server certificate wildcard CommonName (CN) `*.domain.com' does NOT match.....

Title: Re: [warn] RSA server certificate wildcard CommonName (CN) `*.lxlabs.com' does NOT m
Post by: Spacedust on 2014-01-20, 16:04:36

Mustafa - please do not overwrite my SSL certs for Kloxo usage on each update !

Title: Re: [warn] RSA server certificate wildcard CommonName (CN) `*.lxlabs.com' does NOT m
Post by: MRatWork on 2014-01-20, 16:20:17

Quote from: Spacedust on 2014-01-20, 16:04:36

Mustafa - please do not overwrite my SSL certs for Kloxo usage on each update !

What's you mean update will be overwrite?. As I know, only update/reinstall qmail will be also re-create ssl.