Re: Virtual Hosts and SSL Puzzler

[Matthew Bachmann <mbachmann@xxxxxxxxxx>]

Use debug mode in your browser to verify that all of the contents of the page are actually coming from that server.  I had a problem where _javascript_ was importing some public library, and it was fetching it via plain http, so I got the grey globe for the whole page.

On Wed, Oct 23, 2013 at 11:00 AM, Tushar Chavan <tushar.chavan@xxxxxxxxxxx> wrote:

 

> Date: Tue, 22 Oct 2013 08:26:57 -0400
> From: dap1@xxxxxxxxxxxxx
> To: users@xxxxxxxxxxxxxxxx
> Subject: Virtual Hosts and SSL Puzzler
>
> I have 3 virtual hosts that for all I can see are configured identically
> other the the obviously needed differences. The same is true of the 3
> crt files.
>
> <VirtualHost *:443>
> ServerName public.mydomain.com
> DocumentRoot /var/www/html
> SSLEngine on
> SSLCertificateFile /etc/httpd/SSL/public.crt
> SSLCertificateKeyFile /etc/postfix/SSL/server.key
> </VirtualHost>
> <VirtualHost *:443>
> ServerName distrib.mydomain.com
> DocumentRoot /var/www/html/distrib
> SSLEngine on
> SSLCertificateFile /etc/httpd/SSL/distrib.crt
> SSLCertificateKeyFile /etc/postfix/SSL/server.key
> </VirtualHost>
> <VirtualHost *:443>
> ServerName mail.mydomain.com
> DocumentRoot /usr/local/squirrelmail/www
> SSLEngine on
> SSLCertificateFile /etc/httpd/SSL/mail.crt
> SSLCertificateKeyFile /etc/postfix/SSL/server.key
> </VirtualHost>
>
> The problem is that 2 of them work perfectly and the lock shows up in
> the browser. With the third (public), I get a gray globe indicating
> partial encryption which does not prevent eavesdropping. I have no clue
> how to debug this or even where to look. Can someone point me in the
> right direction? Thanks.
>
>
>