search

moxie0 / Convergence

An agile, distributed, and secure alternative to the Certificate Authority system.
http://convergence.io
623 stars 127 forks source link

Multiple sites with SSL on same IP gets the wrong certificate #133

Closed dmp1ce closed 12 years ago

dmp1ce commented 12 years ago

I have a Drupal Aegir setup with multiple sites using a signed certificate from a CA I created on my own. I have one website which works correctly with Convergence, but two others on the same IP are marked as Untrusted and I cannot add an exception for them.

The site that works is: https://aegir-3.upgradeya.com

The sites that don't work are: https://webpagedeveloper.me/ and https://drtvideos.com/

I think the issue is that Convergence is grabbing the certificate from the IP only and not asking for the certificate from the URL for the website. Examining the certificate for webpagedeveloper.me and drtvideos.com shows that the certificate Convergence is examining is aegir-3.upgradeya.com certificate.

The server I am using is running on Debian 6.0, Apache2 with a vhost / ssl setup. The version of Convergence I'm using is 0.08 and Firefox version is 8.0.

All the websites load fine without Convergence running, with the exception of those pesky security warnings.

thedude42 commented 12 years ago

I commented in err, it seems my issue is something completely different

moxie0 commented 12 years ago

Yeah, Convergence (via Twisted) doesn't yet support SNI. We're working on it, I'm going to close this as a duplicate of #28

dmp1ce commented 12 years ago

I looked for virtual host bugs, but I must have missed it. Sorry for the duplicate.