[Modules] Wrong Certificate is choosen

[Top44]

Hi,

my configs are like te one as in the examples :

vhost1 :

<VirtualHost xxx.xxx.xxx.xxx:443>

ServerName www.xxx.com
ServerAlias xxx.com *.xxx.com
UseCanonicalName off
GnuTLSEnable on
GnuTLSExportCertificates off

GnuTLSCertificateFile /var/www/virtual/xxx/ssl/www_xxx_de.crt
GnuTLSKeyFile /var/www/virtual/xxx/ssl/www_xxx_de.key
GnuTLSPriorities NORMAL

#ServerName xxx.de

DocumentRoot /var/www/virtual/xxx/htdocs
[ OTHER DIRECTIVES ]
</virtualhost>


vhost2:
<VirtualHost xxx.xxx.xxx.xxx:443>

ServerName www.yyyy.de
ServerAlias yyyy.de *.yyyy.de
UseCanonicalName off
GnuTLSEnable on
GnuTLSExportCertificates off

GnuTLSCertificateFile /var/www/virtual/yyyy.de/ssl/www_yyyy_de.crt
GnuTLSKeyFile /var/www/virtual/yyyy.de/ssl/yyyy.de.key
GnuTLSPriorities NORMAL

#ServerNameyyyy.de

DocumentRoot /var/www/virtual/yyyy.de/htdocs

[ OTHER TOO ]

The certificates are not self signed this are some testcerts from thawte.

greets



Am 19.08.2010 13:46, schrieb Nikos Mavrogiannopoulos:
> Depends on the versions you used. However if the browsers support SNI
> and you still have the issue then there must be a problem in your
> configuration.
> Check the documentation and examples for more information:
> http://www.outoforder.cc/projects/apache/mod_gnutls/docs/#example
>
> regards,
> Nikos
>
> On Thu, Aug 19, 2010 at 1:41 PM,<Top44 at gmx.de>  wrote:
>    
>> Hi,
>>
>> I think the Chrome and Firefox should be support SNI ?
>>
>> I tested it with this two Browsers.
>>
>> greets
>>
>>
>> -------- Original-Nachricht --------
>>      
>>> Datum: Thu, 19 Aug 2010 03:23:49 +0200
>>> Von: Nikos Mavrogiannopoulos<nmav at gnutls.org>
>>> An: Top44<Top44 at gmx.de>
>>> CC: modules at lists.outoforder.cc
>>> Betreff: Re: [Modules] Wrong Certificate is choosen
>>>        
>>      
>>> On 08/18/2010 09:18 PM, Top44 wrote:
>>>        
>>>> Hi guys,
>>>>
>>>> I noticed on my testsetup that the second virtualhost chooses the
>>>> certification file from the first virtualhost.
>>>> Had someone of you a problem thats sounds like this and do someone have
>>>> a fix for it ?
>>>>          
>>> You have to use a browser that supports SNI. Most modern browsers do.
>>>
>>> regards,
>>> Nikos
>>>        
>> --
>> Mit freundlichen Grüßen
>>
>> Top44
>>
>> GMX DSL SOMMER-SPECIAL: Surf&  Phone Flat 16.000 für nur 19,99 ¿/mtl.!*
>> http://portal.gmx.net/de/go/dsl
>> _______________________________________________
>> Modules mailing list
>> Modules at lists.outoforder.cc
>> http://lists.outoforder.cc/mailman/listinfo/modules
>>
>>      
>