Re: [users@httpd] wrong certs

2013-10-24 Thread Matthew Bachmann
I am not using name based virtual hosts, so there is no SNI here. On Thu, Oct 24, 2013 at 6:52 AM, Jan Vávra wrote: > This is not a bug but a SNI feature ( > http://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI). > Check if you have not defined > NameVirtualHost *:424 > NameVirtualHost *

Re: [users@httpd] Virtual Hosts and SSL Puzzler

2013-10-23 Thread Matthew Bachmann
Use debug mode in your browser to verify that all of the contents of the page are actually coming from that server. I had a problem where javascript was importing some public library, and it was fetching it via plain http, so I got the grey globe for the whole page. On Wed, Oct 23, 2013 at 11:00

Re: [users@httpd] wrong certs

2013-10-23 Thread Matthew Bachmann
Try your same config but use A for the ServerName in both VirtualHost sections. Based on what I've seen, you should then get 1.crt from either port, and never get 2.crt, which seems like a bug. On Wed, Oct 23, 2013 at 3:14 AM, Jan Vávra wrote: > Hello, > it is obvious you are using port base

Re: [users@httpd] wrong certs

2013-10-22 Thread Matthew Bachmann
The certificates are specified in port based virtual hosts, there is no NameVirtualHost here. So I would expect the specified certificate to be served on the corresponding port no matter what host header was passed. On Tue, Oct 22, 2013 at 4:50 PM, Jan Vávra wrote: > Hello. > For sure have yo

[users@httpd] wrong certs

2013-10-22 Thread Matthew Bachmann
I two virtual hosts on different ports specify different certificate files, but use the same ServerName, both ports use the same certificate. Is this expected behavior? With this config: Listen *:424 https ServerName A SSLCertificateFile 1.crt Listen *:444 https ServerName A SSLCertificateF