Welcome! Log In Create A New Profile

Advanced

Re: SSL_ERROR_BAD_CERT_DOMAIN

Francis Daly
May 15, 2020 02:54PM
On Thu, May 14, 2020 at 03:37:38PM -0400, Amakesh wrote:

Hi there,

> Earlier Let’s encrypt certificates worked fine for for all of them, but
> recently installed Nginx as web proxy.

> https://www.ssllabs.com shows all of the certificates have Server
> hostname(rsvix170.gerwanserver.de) as domain name and not their own
> addresses.

Have you configured your nginx like is shown at
http://nginx.org/en/docs/http/configuring_https_servers.html?

You probably want one server{} block per certificate that you have,
each with "listen 443 ssl", and with server_name matching the names in
that certificate.

> https://www.ssllabs.com/ssltest/analyze.html?d=solaris-ustronie.eu

That is not showing any obvious problems to me right now, so maybe
something has been changed recently?

(The fact that it shows a different certificate if the client does not
use SNI is not something I consider a problem.)

Cheers,

f
--
Francis Daly francis@daoine.org
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

SSL_ERROR_BAD_CERT_DOMAIN

Amakesh May 14, 2020 03:37PM

Re: SSL_ERROR_BAD_CERT_DOMAIN

Francis Daly May 15, 2020 02:54PM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 79
Record Number of Users: 6 on February 13, 2018
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready