Geek Answers Handbook

SSL certificate mismatch in IE 7+, OK in Firefox 3.6+

We have a website www.name1.domain.com, for which we have successfully created and implemented an SSL certificate. Then we added another site, www.name2.domain.com, and we observe strange behavior in IE7 and IE8 (surprise!).

Essentially, IE7.8 reports host name mismatches when we go to https://www.name2.domain.com/ . When I add and verify this certificate in IE for this domain, the host name is incorrect, but it refers to an older host name, that is www.name1.domain.com.

Firefox does not have this problem, and selects the correct hostname www.name2.domain.com for the second site without any problems.

Any idea why IE is misbehaving (other than cheeky (- :))?

+5
source share
2 answers

Your problem is that Internet Explorer on Windows XP (and possibly other software) does not support SNI.

I ran into the same problem - basically Firefox and Chrome are fine and get the correct certificate, but Internet Explorer does not. Then I looked a little and saw on Wikipedia, among other things:

Browsers with support for specifying the TLS server name [7] Internet Explorer 7 or later, in Windows Vista or later. Windows XP does not work, even Internet Explorer 8.

So your apache / openSSL compiler is SNI compatible and can do this, but Windows XP does not.

, VirtualHost, - . , , . , .

+7

Firefox SSL , 443 ( IP) ( Apache), IE7 .

http://www.eggheadcafe.com/software/aspnet/36069240/sni-support.aspx

====

http://httpd.apache.org/docs/2.0/ssl/ssl_faq.html#vhosts2

SSL? - . IP- . SSL, , , SSL .

, , .

, SSL - , HTTP-. , SSL , HTTP. SSL IP- X Y ( 443). SSL - Host: , SSL . , IP-.

, , , SSL (, 80), SSL ( 443). , , SSL, NameVirtualHost, .

NameVirtualHost 192.168.1.1:80 :

IP- SSL. SSL.

+2

More articles:


All Articles