https://bz.apache.org/bugzilla/show_bug.cgi?id=69743
Bug ID: 69743
Summary: After upgrading from v2.4.63 to 2.4.64 we have started
getting "Misdirected Request"
Product: Apache httpd-2
Version: 2.4.64
Hardware: PC
Status: NEW
Severity: normal
Priority: P2
Component: Build
Assignee: [email protected]
Reporter: [email protected]
Target Milestone: ---
After upgrading from v2.4.63 to 2.4.64 we have started getting "Misdirected
Request
The client needs a new connection for this request as the requested host name
does not match the Server Name Indication (SNI) in use for this connection."
Details about the issue:
Running Ubuntu 24.04 arm64 processor on AWS with AWS Load Balancer in front.
SSL Certificate on Server is created using letsencrypt 1 certificate per
virtualHosts. On AWS Load Balancer we use AWS Certificate manager but here we
combine the certificates per domain to accommodate maximum domains/sub-domains.
1. We use letsencrypt and create a separate certificate per domain/sub-domain
example abc.com, portal.abc.com, api.abc.com, sourcing.abc.com etc. We run
multiple virtualHosts with 1 virtualHosts entry per domain.
2. When we access the website from within Server it works fine.
3. This server is behind AWS Load Balancer. Given AWS Load Balancer has
limitation of allowing only 25 Certificates, so we create 1 single certificate
with upto 9 alias in AWS Certificate manager and add this certificate in AWS
Load balancer. This helps to serve multiple domains more than 50+ using 1
single AWS Load Balancer and routing traffic across various servers which host
the respective domain on apache2
Above setup fails to run with Apache 2.4.64 and is giving us 421 Misdirected
Request "The client needs a new connection for this
request as the requested host name does not match the Server Name Indication
(SNI) in use for this connection."
For now we reverted back the apache2 version to 2.4.58. Appreciate your help
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
