[BlueOnyx:09906] Re: SSL Warning On 5106R

SB9-PageKeeper Service ml at sb9.com
Tue Mar 27 12:27:13 -05 2012


----- Original Message ----- 
Subject: [BlueOnyx:09904] Re: SSL Warning On 5106R


> Could this issue be the ca-bundle.crt is just old?
>
> I tried updating mine on CentOS 4 but the newer ca-bundle.crt on CentOS 5 
> couldn't
> be read properly due to the older openssl could not read SHA-2 style 
> certs.
>
> Herb
>
>
> ----- Original Message -----
> From: "Gerald Waugh" <gwaugh at frontstreetnetworks.net>
> To: "SB9-PageKeeper Service" <ml at sb9.com>, "BlueOnyx General Mailing List" 
> <blueonyx at mail.blueonyx.it>
> Sent: Tuesday, March 27, 2012 5:17:41 AM
> Subject: [BlueOnyx:09902] Re: SSL Warning On 5106R
>
> On 03/26/2012 07:59 PM, SB9-PageKeeper Service wrote:
>>
>> Subject: Re: [BlueOnyx:09890] SSL Warning On 5106R
>>
>>
>>> On 03/25/2012 10:29 PM, SB9-PageKeeper Service wrote:
>>>> Hi list,
>>>>
>>>> Getting this SSL warning In the GUI when creating new sites. Seems
>>>> harmless. Checked and the first site's IP is not listening on 443.
>>>> These sites share the same IP addresses. The site sets up okay and 
>>>> works
>>>> fine.
>>>>
>>>> "SSL is already being used by 'www.1st-site-using-this-IP.xxx'
>>>> <http://www.1st-site-using-this-IP.xxx'> which shares the same IP
>>>> address, 'Shaired.IP.Address.nnn', as this site.
>>>> SSL can only be enabled for one site using a shared IP address. Change
>>>> the IP address of this site or disable
>>>> SSL for 'www.1st-site-using-this-IP.xxx'
>>>> <http://www.1st-site-using-this-IP.xxx'> if you want to enable SSL for
>>>> this site."
>>>>
>>>
>>> Is SSL enabled on any site using that IP address.
>>> If so the warning is legitimate.
>>
>> No SSL is being used/or configured by that IP. Each vsite I add to that 
>> IP
>> causes the warning.
>>
>>>
>>> Its telling you that only one site should have SSL enabled for any one
>>> IP address.
>>
>> I'm Aware that SSL must be on only 1 IP and not shared.
>> That IP is being shared but no SSL is being used for it.
>> netstat -an does not show that IP address state as LISTEN.
>>>
>>>
>>> -- 
>
> what about
>  'netstat -tan | grep :443'
>
>
> -- 
> Gerald
> _______________________________________________
Herb,
 This is a different issue and warning.

Importing is still a issue on the 5106r. The cert won't import.
This is just a warning about IP numbers using SSL.
Hope that clear that up.

TIA
David Hahn 




More information about the Blueonyx mailing list