SSL Certificates

Discussion in 'Installation/Configuration' started by Sasab, Jan 2, 2019.

  1. Sasab

    Sasab New Member

    Hi,
    I have a server on which there are multiple websites, I have configured an SSL certificate for a first domain and all went well, then I bought a second certificate for a different domain but in this case it does not work because when I type:
    https://shop.secondomain.it
    he always brings me back to the site:
    https://shop.firstdomain.it
    if I do an SSL check (through the godaddy.com site) I have a hostname mismatch because the primary domain is always:
    firstdomain.it

    Thanks.
     
  2. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    My guess is the seconddomain sertificate is not working. Check the logs.
    There has been discussion on this many times, i.e. when multiple websites are on same IP-address they can redirect to wrong site if certificate is faulty.
    Also: check all websites on that host, that website settings IP-Address is on every one * or every one the IP-address. Do not mix the two, or you end up with just this wrong website getting displayed.
     
  3. Sasab

    Sasab New Member

    the configuration about IP-Adress is *, this setting is OK or should I indicate the IP address ?
    Thanks.
     
  4. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    It does not matter whether it is * or IP-address, as long as it is the same on all websites.
     
  5. Sasab

    Sasab New Member

    is * for all web-sites.
     
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    Is the SSL checkbox enabled on the first tab of the site? Did you select action 'save certificate' at the time you inserted the ssl cert and did you press the save button afterwards?
     
  7. Sasab

    Sasab New Member

    yes
     
  8. till

    till Super Moderator Staff Member ISPConfig Developer

    Ok, then check if the vhost file of the second domain contains an SSL section and if there is no vhost file with .err file ending for the second domain.
     
  9. Sasab

    Sasab New Member

    in the root directory, in section SSL, there are secondomanin.it.csr.err and secondomanin.it.crt.err.
     
  10. Sasab

    Sasab New Member

    Hi,
    the problem is that when you type the address:
    https://shop.secondomain.it
    is loaded the certificate related to the domain:
    shop.firstdomain.it
    but in ISPConfig (in SSL Certificate) I verified and for every website is loaded the correct SSL certificate.
    Thanks.
     
  11. till

    till Super Moderator Staff Member ISPConfig Developer

    That's just a symptom which means that the second site has no SSL. @Taleman explained that already in post #2. The reason for that is that the second ssl cert is invalid or that you added some invalid custom config in apache directives field of the site, you can see that in the ssl cert names which have .err appended to the file name.
     
  12. Sasab

    Sasab New Member

    Hi,
    I generated the certificate again, I proceeded to upload it but now when I go to the address:
    https://shop.secondomain.it
    the site is displayed without the certificate!
    I made a check using sslshopper.com and using the tool provided by godaddy and in both cases I no longer have the error message related to the hostname mismatch, in both cases the check is positive.
    I also did a check in the dir relating to the website, in the SSL section, and there are no more .err.
    Regards.
     

Share This Page