I am getting known warnings in my error logs from the use of wild card
certificates (see my earlier message on the source of the wild card
certificate):

[Sun Jul 31 18:31:42 2011] [warn] RSA server certificate wildcard
CommonName (CN) `*.usafa-1965.org' does NOT match server name!?
[Sun Jul 31 18:31:42 2011] [warn] Init: Name-based SSL virtual hosts
only work for clients with TLS server name indication support (RFC
4366)

They are harmless because the certificate is valid and I am aware of
the consequences of the warnings, so I want to eliminate the warning.
I have looked at the solutions here:

  http://www.sudleyplace.com/pipederrorlogs.html
  http://www.apachelounge.com/viewtopic.php?t=4080
  http://www.devshed.com/c/a/Apache/Logging-in-Apache/

but would like to avoid a separate script or module rebuild. Is there
a solution using current Apache 2.2 directives alone?

It seems to me that one solution is for the Apache2 module handling
the warning to recognize clients that are known to be able to handle
the wild cards (e.g., the latest browsers).  Perhaps a feature request
is in order?

Thanks.

-Tom

USAFA, CS-24, Class of 1965
Niceville, Florida, USA

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Reply via email to