This question is not really RHEL5-specific, but all the systems that
get involved to are RHEL5 servers so I hope it is a good excuse to post
here. :)
My HTTPS server DNS name is server.domain.org for the internal
employees, and server.domain.com for the outside users. The difference
is .ORG and .COM ( Don't ask me why, the MS administrator set it up that
way ).
To support both names, I ordered and installed an SSL certificate with
the name server.domain.com, and the SAN server.domain.org. Browsers
from the outside can access the https://server.domain.com without any
security warning, the same for the inside with
https://server.domain.org. Both cases use IE and FF.
The problem is when I use wget from an internal system to access the
.org, I get the certificate error, but it works fine when trying the .com.
Below are the output in both cases:
- From an outside system:
vu@xu1:~$ wget https://server.domain.com
--2012-02-03 08:59:57-- https://server.domain.com/
Resolving server.domain.com... xx.xx.119.137
Connecting to server.domain.com|xx.xx.119.137|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]
Saving to: `index.html'
[ <=> ] 11,577 --.-K/s in 0s
2012-02-03 08:59:58 (184 MB/s) - `index.html' saved [11577]
- From an inside system:
[root@tis ~]# wget https://server.domain.org
--2012-02-03 09:59:44-- https://server.domain.org/
Resolving server.domain.org... 192.168.1.3
Connecting to server.domain.org|192.168.1.3|:443... connected.
ERROR: certificate common name `SERVER.DOMAIN.COM' doesn't match
requested host name `server.domain.org'.
To connect to server.domain.org insecurely, use `--no-check-certificate'.
Unable to establish SSL connection.
Because IE and FF do not complain about the SSL warning, I think my
installation is correct, but why wget shows that error ?
Any advice is greatly appreciated.
Vu
--
--
Vu Pham
Sivell Corporation
7155 Old Katy Rd. Suite 110 South
Houston, TX 77024-2136
voice: 713-821-9800 ext 2203
fax: 713-821-9899
_______________________________________________
rhelv5-list mailing list
rhelv5-list@redhat.com
https://www.redhat.com/mailman/listinfo/rhelv5-list
