证书不匹配错误 – SNI或configuration错误?

为什么我的SSL证书没有工作?

多个虚拟主机,其中几个是由通配证书覆盖的子域。 我试图让另一个域安全地运行在相同的IP上,并且为该域专门设置了不同的证书(即非通配符)。 但是,当我尝试通过https访问第二个站点时,我总是得到证书不匹配错误 ,浏览器告诉我它正在访问通配符证书。

我在我的一般Apache错误日志中看到这个:

[Sun Aug 13 06:25:10.981964 2017] [ssl:warn] [pid 1826] AH02292: Init: Name-based SSL virtual hosts only work for clients with TLS server name indication support (RFC 4366) 

所以我认为SNI是启用的(至less从我的理解)。

我可以确认find正确的DocumentRoot,网站加载等等,所以一般设置工作。 证书有效。 在Chrome 60.0.3112.90中testing。

WordPress,Apache 2.4.7,Rackspace负载均衡实例上的Ubuntu 14.04。

感谢您提供的任何帮助,我会提前为我的无知道歉。


这里是conf文件:

非通配符

 <VirtualHost *:80> ServerName www.mySite.org ServerAlias mySite.org DocumentRoot /var/www/vhosts/www.mySite.org # Force HTTPS when loading the page RewriteEngine On RewriteCond %{HTTP:X-Forwarded-Proto} !https RewriteRule .* https://%{SERVER_NAME}%{REQUEST_URI} [L,R] <Directory /var/www/vhosts/www.mySite.org> Options -Indexes +FollowSymLinks -MultiViews AllowOverride All </Directory> CustomLog /var/log/apache2/www.mySite.org-access.log combined ErrorLog /var/log/apache2/www.mySite.org-error.log # Possible values include: debug, info, notice, warn, error, crit, # alert, emerg. LogLevel warn </VirtualHost> <VirtualHost *:443> ServerName www.mySite.org ServerAlias mySite.org DocumentRoot /var/www/vhosts/www.mySite.org <Directory /var/www/vhosts/www.mySite.org> Options -Indexes +FollowSymLinks -MultiViews AllowOverride All </Directory> CustomLog /var/log/apache2/www.mySite.org-access.log combined ErrorLog /var/log/apache2/www.mySite.org-error.log # Possible values include: debug, info, notice, warn, error, crit, alert, emerg. LogLevel warn SSLEngine on #SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP SSLCertificateFile /etc/ssl/certs/www.mySite.org_2018.crt SSLCertificateKeyFile /etc/ssl/private/www.mySite.org_2018.key SSLCertificateChainFile /etc/ssl/certs/DigiCertCA.crt <FilesMatch "\.(cgi|shtml|phtml|php)$"> SSLOptions +StdEnvVars </FilesMatch> BrowserMatch "MSIE [2-6]" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0 BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown </VirtualHost> 

通配符(已经为两个网站工作)

 <VirtualHost *:80> ServerName sub.myWildcardSite.org DocumentRoot /var/www/vhosts/sub.myWildcardSite.org # Force HTTPS when loading the page RewriteEngine On RewriteCond %{HTTP:X-Forwarded-Proto} !https RewriteRule .* https://%{SERVER_NAME}%{REQUEST_URI} [L,R] <Directory /var/www/vhosts/sub.myWildcardSite.org> Options -Indexes +FollowSymLinks -MultiViews AllowOverride All </Directory> CustomLog /var/log/apache2/sub.myWildcardSite.org-access.log combined ErrorLog /var/log/apache2/sub.myWildcardSite.org-error.log # Possible values include: debug, info, notice, warn, error, crit, # alert, emerg. LogLevel warn </VirtualHost> <VirtualHost *:443> ServerName sub.myWildcardSite.org DocumentRoot /var/www/vhosts/sub.myWildcardSite.org/ <Directory /var/www/vhosts/sub.myWildcardSite.org> Options -Indexes +FollowSymLinks -MultiViews AllowOverride All </Directory> CustomLog /var/log/apache2/sub.myWildcardSite.org-access.log combined ErrorLog /var/log/apache2/sub.myWildcardSite.org-error.log # Possible values include: debug, info, notice, warn, error, crit, # alert, emerg. LogLevel warn SSLEngine on #SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP SSLCertificateFile /etc/ssl/certs/wildcard_myWildcardSite_org.crt SSLCertificateKeyFile /etc/ssl/private/wildcard_myWildcardSite_org.key SSLCertificateChainFile /etc/ssl/certs/DigiCertCA.crt <FilesMatch "\.(cgi|shtml|phtml|php)$"> SSLOptions +StdEnvVars </FilesMatch> BrowserMatch "MSIE [2-6]" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0 BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown </VirtualHost>