[warn] RSA server certificate CommonName (CN) `ドメイン名’ does NOT match server name!? が出たら…

このエントリーをはてなブックマークに追加

Webサーバー(Apache)のエラーログを見ていると、サーバー再起動やApacheリスタートの際などに、SSL周りのエラーが発生しているのを発見。

[Tue Nov 17 12:51:29 2015] [warn] RSA server certificate CommonName (CN) `example.com’ does NOT match server name!?

RSA暗号化サーバーのコモンネーム証明書がサーバーネームと違いますよ!?

と。おや、そうでしたか。
https://www.weblogy.co.jp/ への接続は問題なくできているし、ブラウザ上ではSSL証明書エラーも出ないんですけど、それはApacheの方で「どうやら違ってるけど証明書と鍵は合ってるからうまいこと融通きかせときまひょ」という感じのようです。
エラーログに記されているメッセージは、つまり「ホンマはあかんねんで?」ということですね。

まあ、毎回こんなエラーが発生しているのはよろしくないので、解消しましょう。

/etc/httpd/conf.d/ssl.confの記述を見てみると…

/etc/httpd/conf.d/ssl.conf

NameVirtualHost *:443

<VirtualHost *:443>
        ServerAdmin webmaster@dummy-host.example.com
        DocumentRoot /home/www/html/
        ServerName example.com
        ServerAlias www.example.com
SSLEngine on
(中略)
</VirtualHost>

となっていました。

この記述で、ApacheとしてはServerNameとServerAliasとどちらも同じDocumentRootで処理することができるので、httpの場合ならこれでもいいんですけど、httpsの場合はコモンネーム(CN)がサーバーネームと一致しているひつようがあるのでまずいんですね。

NameVirtualHost *:443

<VirtualHost *:443>
        ServerAdmin webmaster@dummy-host.example.com
        DocumentRoot /home/www/html/
        ServerName www.example.com
        ServerAlias example.com
SSLEngine on
(中略)
</VirtualHost>

wwwありをサーバーネームに、なしをエイリアスにしてApache再起動。

[root@www5254ue logs]# service httpd restart

エラーが出なくなり、解決です。

[warn] RSA server certificate CommonName (CN) `ドメイン名’ does NOT match server name!? が出たら…」への37件のフィードバック

  1. Go Here

    I just want to mention I am just beginner to weblog and really liked you’re web site. Likely I’m going to bookmark your blog post . You actually come with good posts. Many thanks for revealing your webpage.

    返信
  2. John Deere Service Manuals

    Along with every little thing which appears to be building within this subject material, many of your points of view happen to be very radical. Nonetheless, I appologize, because I do not give credence to your whole theory, all be it exhilarating none the less. It looks to everybody that your opinions are actually not totally justified and in actuality you are your self not entirely certain of your assertion. In any case I did appreciate reading through it.

    返信
  3. Abel

    Really my blog name is not pertinent to my blog site particular niche. in this time i wish to transform my blog to a website through blog owner. yet i do not understand if i will do it, then just how much will affect my blog site website traffic?.

    返信
  4. Estell Andelman

    Howdy, There’s no doubt that your site may be having browser compatibility issues. Whenever I take a look at your website in Safari, it looks fine however when opening in Internet Explorer, it has some overlapping issues. I simply wanted to give you a quick heads up! Aside from that, fantastic site.

    返信
  5. Love Irrigation

    Hello! I could have sworn I’ve visited this blog before but after browsing through some of the articles I realized it’s new to me. Regardless, I’m certainly delighted I found it and I’ll be book-marking it and checking back frequently.

    返信
  6. Breana Carbee

    It’s the right opportunity to create some schemes for the future. I have browsed this document and if I should, I want to encourage you very few important suggestions.

    返信
  7. CrowdforApps

    I’d like to thank you for the efforts you have put in penning this blog. I am hoping to see the same high-grade blog posts from you in the future as well. In fact, your creative writing abilities has inspired me to get my own website now ;)

    返信
  8. Minh Trimmer

    May I just say what a relief to uncover someone that actually understands what they’re discussing online. You actually know how to bring a problem to light and make it important. A lot more people must read this and understand this side of your story. I was surprised that you aren’t more popular given that you surely possess the gift.

    返信
  9. Tractor Workshop Manuals

    Can I simply say what relief to get somebody that in fact knows what theyre dealing with on-line. You actually know how to bring a concern to light to make it essential. Workout . should ought to see this and can see this side of your story. I cant think youre less well-known simply because you definitely hold the gift.

    返信
  10. viagra

    Hello, I do think your blog might be having browser compatibility problems. When I take a look at your site in Safari, it looks fine however, when opening in Internet Explorer, it’s got some overlapping issues. I simply wanted to give you a quick heads up! Aside from that, fantastic site.

    返信
  11. viagra

    I absolutely love your site.. Excellent colors & theme. Did you create this web site yourself? Please reply back as I’m wanting to create my own website and want to learn where you got this from or exactly what the theme is called. Appreciate it.

    返信
  12. you can look here

    I simply want to mention I’m newbie to blogging and truly savored you’re web site. Most likely I’m likely to bookmark your site . You actually have wonderful articles. Thanks a lot for sharing with us your web site.

    返信
  13. hotmail iniciar sesion

    Oh my goodness! Impressive article dude! Thank you so much, However I am experiencing issues with your RSS. I don’t know why I am unable to join it. Is there anyone else getting identical RSS issues? Anyone that knows the answer can you kindly respond? Thanx!!

    返信
  14. The Path of Wisdom

    Hi, I do think this is a great site. I stumbledupon it ;) I am going to revisit yet again since I book-marked it. Money and freedom is the best way to change, may you be rich and continue to guide others.

    返信
  15. Fastandy

    You’ve made some decent points there. I looked on the internet to find out more about the issue and found most individuals will go along with your views on this site.

    返信
  16. Elle Blonde

    I’m impressed, I have to admit. Rarely do I encounter a blog that’s both equally educative and amusing, and let me tell you, you have hit the nail on the head. The issue is something too few men and women are speaking intelligently about. I am very happy I came across this during my search for something concerning this.

    返信
  17. Love Irrigation

    Hi, I do think this is an excellent site. I stumbledupon it ;) I may come back once again since I saved as a favorite it. Money and freedom is the greatest way to change, may you be rich and continue to guide other people.

    返信
  18. Leone Chaiken

    Hello! I could have sworn I’ve visited this blog before but after going through many of the articles I realized it’s new to me. Anyways, I’m certainly pleased I discovered it and I’ll be book-marking it and checking back regularly.

    返信
  19. Carey Disney

    It’s right occasion to put together some schemes for the long-run. I’ve browsed this blog entry and if I may just, I wish to suggest to you you some enlightening tips.

    返信
  20. cheap escorts in texas

    Hi! I could have sworn I’ve visited this blog before but after browsing through a few of the posts I realized it’s new to me. Regardless, I’m certainly happy I discovered it and I’ll be bookmarking it and checking back frequently!

    返信
  21. shop wise

    You’ve made some decent points there. I looked on the web to find out more about the issue and found most individuals will go along with your views on this site.

    返信
  22. Notarias en Cancun

    I’m pretty pleased to uncover this great site. I want to to thank you for ones time just for this wonderful read!! I definitely liked every little bit of it and I have you saved to fav to look at new stuff on your website.

    返信
  23. Kratom Sulawesi

    Your style is so unique in comparison to other people I’ve read stuff from. Thanks for posting when you’ve got the opportunity, Guess I will just bookmark this web site.

    返信
  24. cbd oil

    Hi there! I could have sworn I’ve been to this website before but after browsing through some of the posts I realized it’s new to me. Regardless, I’m definitely delighted I came across it and I’ll be bookmarking it and checking back often!

    返信
  25. Bella Schelb

    You are so awesome! I do not believe I have read a single thing like this before. So wonderful to discover another person with some original thoughts on this subject. Seriously.. many thanks for starting this up. This website is one thing that is required on the web, someone with a bit of originality.

    返信

コメントを残す

メールアドレスが公開されることはありません。 * が付いている欄は必須項目です

次のHTML タグと属性が使えます: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>