SSL Question

ohannis · #1 1st June 2009, 09:22 AM

Hi Guys, After reading and experimenting I got my ssl_mod installed and not I am getting the following error in the ssl_error_log.

[Thu May 14 20:46:45 2009] [warn] RSA server certificate CommonName (CN) `www.mydomainname.net' does NOT match server name!?.

any feedback ?
thanks in advance.

Zotter · #2 2nd June 2009, 05:49 AM

You need to create a valid server certificate. Either buy one from those that sell (Verisign, Dyndns, etc), or create a self-signed. If you want a freebie - check out CAcert.org.

The Apache Web site has info how to create a self-signed certificate for your server.

http://httpd.apache.org/docs/2.0/ssl....html#selfcert

stevea · #3 2nd June 2009, 06:22 AM

There is another problem. At least until F8, the OpenSSL config file in /etc/pki/tls/openssl.cnf
If you look at the [ CA_default ] section you'll find that the directories listed do not match the
ones that are actually installed with the package.

So if you use openssl command to create a cert you'll need to override the defaults or muck around w/ the config.