Luthienstar Networks Wiki

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.

====== HTTPS Certificate is not properly selected on virtual hosts with some browsers ======

===== Reproductible cases =====
Visit a SSL/TLS enabled website that is hosted on a virtual host with any application that uses SSL/TLS, but that does not support [[https://en.wikipedia.org/wiki/Server_Name_Indication|SNI]]. The virtual host certificate does not include the default server host name. 

Here is a short list of platforms and clients that does not support SNI.

  * Internet Explorer on Windows XP/2003
  * Internet Explorer 7 on Windows Vista and higher.
  * Android default browser on 2.x
  * Safari on Windows XP
  * BlackBerry Browser
  * Windows Mobile up to 6.5
  * wget before 1.14
  * Java before 1.7
  * Any application that rely on the aforementionned browsers and/or engines.

===== Description of the problem =====

When accessing a webpage with a browser or a software listed above, a SSL error may be triggered. It warns that the certificate does not matches the server name, displaying the default host name instead of the virtual host name.

===== Solutions =====

Include the server default host name in a SubjectAltName field when creating the virtualhost certificate signature request.