Subject CN in certificate not server name or identical to CA - Error

This is a discussion on Subject CN in certificate not server name or identical to CA - Error within the Modssl Users forums, part of the Web Server and Related Forums category; Hello All, For integrating a payment gateway with the web server, we were using certificate based authentication. The gateway sends ...


Go Back   Usenet Forums > Web Server and Related Forums > Modssl Users

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 07-21-2008
dkarthik@gmail.com
 
Posts: n/a
Default Subject CN in certificate not server name or identical to CA - Error

Hello All,

For integrating a payment gateway with the web server, we were using
certificate based authentication. The gateway sends certificate to the
web server for authentication during which we are observing the
following error in Apache ssl logs (enabled to debug mode)

[Mon Jul 21 12:35:14 2008] [info] [client 15.16.17.51] SSL library
error 1 in handshake (server www.mysite.com:5403)
[Mon Jul 21 12:35:14 2008] [info] SSL Library Error: 336151570 error:
14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate
Subject CN in certificate not server name or identical to CA!?

The web server generated a certificate request with CN set to www.mysite.com
and the same has been signed by an external CA. The signed certificate
is being used as the value for SSLCertificateFile in the Apache SSL
configuration.

In the ssl.conf (Apache) the ServerName is set to www.mysite.com which
is the public name for the site. This name has been added to /etc/
hosts with IP address mapping(192.15.42.1)

The hostname where Apache is running is webserv.gov.in and resolves to
a different IP address.

We are using httpd 2.2 on a CentOS platform. We are almost pulling our
hair from last week. The payment gateway people say other clients who
are using IIS 5.0 aren't facing any issues and only we people(Apache)
are having this issue.

Any pointers/response on this would be of really great help.

Thanks & Regards,

Karthik
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 03:35 PM.


Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0