Koozali.org: home of the SME Server

Certificates with virtual domains

guestHH

Certificates with virtual domains
« on: June 23, 2002, 04:04:27 PM »
Hi,

- I've installed my 5.1.2 with servername e.g. test1.com.
- I've created a virtual domain called test2.com

Now when I use IMP to connect to test2.com, I'm warned about the fact that the certificate is incorrect. The name on the security certificate is invalid, or does not match the name of the site.

The details of the certificate show that it issued by test1.com whilst I'm accessing test2.com.

How can i make sure that the certificate is issued by test2.com for when using the virtual domain?

Thanks and regards,
guestHH

Paul McEnery

Re: Certificates with virtual domains
« Reply #1 on: June 25, 2002, 03:44:48 AM »
Name based virtual hosting doesn't work with HTTPS.

Essentially both the sites reside at the same IP address. HTTPS needs to negotiate the certificate BEFORE any HTTP information is sent to the server therefore it is impossible for the server to figure out which certificate to use for which site.

Virtual hosting, (Virtual domains) will only function correctly with HTTPS is you have a different IP address for each site, or each site runs on a different port.

Basically what I have explained here is responsible for the problems that you are experiencing with the IMP, its alo just another Virtually hosted HTTPS site.

Solution will have to be users log into test1.com.
All mail goes into the same mailbox.

Paul

guestHH

Re: Certificates with virtual domains
« Reply #2 on: June 28, 2002, 11:58:16 AM »
Thanks Paul. That's clear.

Regards,
guestHH