SSL web content not trusted warning, resolves to amazon instance private DNS

Discussion in 'Apache' started by aleles, Aug 11, 2012.

  1. #1
    Hi,

    We are having multiple website visitors reporting the "web content is not trusted" SSL certificate warning in their browsers when they go to secure pages on our website.

    The issue does not happen to all visitors. For example, I can only see it in the Dolphin browser on my android where it shows me the following warning.

    "The name of the site does not match the name on the certificate". The certificate info:
    Issued To:
    Common Name:
    ip-10-28-... (my Amazon instance private DNS)
    Organization:
    SomeOrganization
    Organizational Unit:
    SomeOrganizationalUnit

    Issued by:
    Common Name:
    ip-10-28-... (my instance private DNS)

    We have two websites hosted on one standard amazon linux box with apache, both with certificates from godaddy. Both virtual host records are below (with the real names replaced)

    <VirtualHost *:80>
    ServerName example1.com
    DocumentRoot /var/www/html/example1.com
    </VirtualHost>

    <VirtualHost *:443>
    ServerName example1.com
    DocumentRoot /var/www/html/example1.com
    SSLEngine on
    SSLCertificateChainFile /etc/httpd/cert/gd_bundle.crt
    SSLCertificateFile /etc/httpd/cert/example1.com.crt
    SSLCertificateKeyFile /etc/httpd/cert/example1.com.key
    </VirtualHost>

    <VirtualHost *:80>
    ServerName example2.com
    DocumentRoot /var/www/html/example2.com
    </VirtualHost>

    <VirtualHost *:443>
    ServerName example2.com
    DocumentRoot /var/www/html/example2.com
    SSLEngine on
    SSLCertificateChainFile /etc/httpd/cert/gd_bundle.crt
    SSLCertificateFile /etc/httpd/cert/example2.com.crt
    SSLCertificateKeyFile /etc/httpd/cert/example2.com.key
    </VirtualHost>

    The question is how to get rid of this warning message.

    Thanks,
    Alex
     
    aleles, Aug 11, 2012 IP