PDA

View Full Version : Self-signed SSL Certificates


UnrulyGrrl99
05-17-2004, 05:06 PM
I generated my own SSL cert for my server, using the instructions here:
http://www.rpatrick.com/tech/makecert/

This has worked fine in the past on my other systems, but not this time. Every time I try to access
my server with https, I see messages like this in my apache error log:
[Mon May 17 15:55:40 2004] [error] [client 152.163.190.1] Invalid method in request !g!!
[Mon May 17 15:55:45 2004] [error] [client 152.163.190.1] Invalid method in request !g!!
[Mon May 17 15:56:12 2004] [error] [client 127.0.0.1] Invalid method in request !|!!!
[Mon May 17 15:56:12 2004] [error] [client 127.0.0.1] Invalid method in request !|!!
Netscape gives a popup message of "The connection to mydomain has terminated unexpectedly". I have tried this from several
browsers at several different locations, just trying to pull up index.html.

When I initially start Apache, these warnings are in the error log:
[warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[warn] RSA server certificate CommonName (CN) `mydomain' does NOT match server name!?
but shouldnt be the source of the problem.

Anyone have any ideas on this one?

arthur
05-18-2004, 06:30 PM
hi,
when making your certificate, you need to make the name of it the same as the address etc you will be going to.
i.e; if you make the name of the cert yourdomain.com you will need to go to that address, if you make it your ip address 001.001.001.001 you will need to go to that address.
if you make the cert yourdomain.com and then go to the ip address, and visa versa, it will not work properly.
just a thought.