Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > Linux Forums > HOWTO-Related Questions

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 6th March 2012, 14:24
Ovidiu Ovidiu is online now
Senior Member
 
Join Date: Sep 2005
Posts: 1,236
Thanks: 70
Thanked 21 Times in 17 Posts
Default weird behavior of https sites with the startssl certificate

I followed the howto: http://www.howtoforge.com/securing-y...-from-startssl

Running an ISPCFG 3 Debian6 installation.

I got a level 2 certificate wildcard, multidomain from startssl.

certificate works fine for https and email BUT:


the only domain that I activated ssl for inside the ISPCFG3 control panel is: premaman.co.za so as expected https://www.premaman.co.za works fine.

If I enter another domain hosted on the same server and prefix it with https it wil show the content of the only domain with ssl activated, i.e. check out: https://zice.ro or https://pacura.ru they both show the content of https://www.premaman.co.za

can this behavior be stopped? I don't think that is very professionally to show the content of another website under a foreign domain?

Or did I do something wrong here?
Reply With Quote
Sponsored Links
  #2  
Old 6th March 2012, 14:33
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 34,586
Thanks: 792
Thanked 4,983 Times in 3,903 Posts
Default

What you describe is the normal behaviour of SSL and not related to the use of ispconfig or startssl. For that reason there should be no other websites pointing to the same IP address then the ssl enabled domain.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
The Following User Says Thank You to till For This Useful Post:
Ovidiu (7th March 2012)
  #3  
Old 7th March 2012, 09:17
Ovidiu Ovidiu is online now
Senior Member
 
Join Date: Sep 2005
Posts: 1,236
Thanks: 70
Thanked 21 Times in 17 Posts
 
Default

:-) thanks for lifting the mystery, I remember now that you need a dedicated IP for each SSL enabled vhost.
Reply With Quote
Reply

Bookmarks

Tags
howto, https, ssl, startssl

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
haproxy with stunnel problem abubin Server Operation 6 10th April 2012 15:08
how do I install a SSL cert for a website? mangoo General 3 3rd February 2012 12:46
ISPConfig 3 - CentOS 5.4 - SSL Problems!?! owainbaber Installation/Configuration 4 26th July 2011 17:12
Is my postfix is hacked? bzzik Server Operation 21 15th July 2009 14:13
SSL for virtual hosts on one certificate rbartz Tips/Tricks/Mods 8 20th November 2007 17:59


All times are GMT +2. The time now is 12:46.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.