Hi, Just not to take the risk, what are the missing steps then? Should I export the tomcat certification and then issue c_rehash? Is there a need to redo this if I just want to renew the certificate on apache and not tomcat? Just an aside question: [warn] RSA server certificate CommonName (CN) `myhost’ does NOT match server name!? The certificate request has myhost as CN. Any idea what is missing? thank you --- On Thu, 7/5/09, Krist van Besien <krist.vanbesien@xxxxxxxxx> wrote: > From: Krist van Besien <krist.vanbesien@xxxxxxxxx> > Subject: Re: ssl on apache > To: users@xxxxxxxxxxxxxxxx > Date: Thursday, 7 May, 2009, 3:36 PM > On Thu, May 7, 2009 at 2:31 PM, > Melanie Pfefer > <melanie_pfefer@xxxxxxxxxxx> > wrote: > > > > Hi Krist, > > > > I am proxying (I think): > > > > RewriteRule ^/(abc.*) https://tomcat:port/$1 [P,L] > > > > Yes it is ssl to ssl > > Odd then that it works after you removed the tomcat > server's > certificate from the apache server. Apache needs to be able > to somehow > verify the tomcat server's certificate in order to set up > the ssl > connection. > > Krist > > > -- > krist.vanbesien@xxxxxxxxx > krist@xxxxxxxxxxxxx > Bremgarten b. Bern, Switzerland > -- > A: It reverses the normal flow of conversation. > Q: What's wrong with top-posting? > A: Top-posting. > Q: What's the biggest scourge on plain text email > discussions? > > --------------------------------------------------------------------- > The official User-To-User support forum of the Apache HTTP > Server Project. > See <URL:http://httpd.apache.org/userslist.html> for more > info. > To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx > " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx > For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx > > --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx