[lug] self-signed apache certs on fedora core?

D. Stimits stimits at comcast.net
Wed Sep 7 12:34:48 MDT 2005


...
> Are you talking about an error a web browser reports when it connects
> or a message in apache error log as apache starts?

Apache's ssl_error_log.

> For the former case, the client's name lookup is what matters and
> a VPN doesn't help. The clients either need a working DNS server to query,
> or appropriate entries in their /etc/hosts.

I was thinking about an entry so if the server looked up its own name 
that it would find an IP address through DNS mechanisms, rather than 
just the /etc/hosts.

> For the latter case, the apache ServerName directive is expected to
> match the CN of the cert. The ServerName directive is supposed to match
> the host part of the URL the web clients use to access the web service.

Ahh, this did the trick. I played with this and got rid of the log message.

D. Stimits, stimits AT comcast DOT net



More information about the LUG mailing list