Re: [apache-ssl] Certificate question
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [apache-ssl] Certificate question



Steven Bolbot wrote:
> 
> Well I finally got the server up and running :)
> One question I do have though: When I connect with a web browser (in this
> case Netscape) it displays this:
> The certificate that the site 'storm.lightning.tne.net.au' has presented does
> not contain the correct site name. It is possible, though unlikely, that
> someone may be trying to intercept your communication with this site. If you
> suspect the certificate shown below does not belong to the site you are
> connecting with, please cancel the connection and notify the site
> administrator.
> 
> Exactly where do I put the site name so this error message doesn't come up?

When generating the certificate (assuming you're using ssleay), it is
the 'your name' question (which is actually the Common Name field of the
cert). Make sure you put the exact server name as it will show in the
URL.

To preempt your next question... once you've sorted out this problem,
you'll start to see the message "storm.lightning.tne.net.au is a site
that uses encryption to protect transmitted information. However,
Netscape does not recognize the authority who signed its
certificate."... To fix this, you'll need to get a 'trusted' cert from
someone like Thawte (see the web page http://www.apache-ssl.org for
other issuers, and check with your browser manufacturer for a list of
'trusted' issuers).

cheers,
Adam
--
Adam Laurie                   Tel: +44 (181) 742 0755
A.L. Digital Ltd.             Fax: +44 (181) 742 5995
Voysey House                  
Barley Mow Passage            http://www.aldigital.co.uk
London W4 4GB                 mailto:adam@algroup.co.uk
UNITED KINGDOM                PGP key on keyservers