nginx - Why are my SSL certs mixing between my websites? -



i'm using nginx webserver , host 3 main websites, xyz.example.com, abc.example.com , example.com itself.
example.com , abc.example.com have ssl certificate (two positivessl). bought cert. third website, xyz.example.com.
so, problem is: when xyz.example.com works ssl, example.com returns net::err_cert_common_name_invalid because tries use xyz.example.com's certificate (saw chrome clicking on error code).
when delete xyz.example.com's file nginx sites-available directory, example.com starts working again (but xyz.example.com doesn't work).
here 2 nginx configuration files. xyz.example.com:

server {    listen 80;    server_name xyz.example.com;    rewrite ^/(.*) https://xyz.example.com/$1 permanent; }  server {    listen 443 ssl;     server_name xyz.example.com;    ssl_certificate /var/www/certs/xyz_example/cert_chain.crt;    ssl_certificate_key /var/www/certs/xyz_example/key.key;     root /var/www/xyz;    index index.php;    client_max_body_size 5m;     location / {          try_files $uri $uri/ /index.html;    }    location ~ \.php$ {          try_files $uri =404;          fastcgi_pass unix:/var/run/php5-fpm.sock;          fastcgi_index index.php;          fastcgi_param script_filename $document_root$fastcgi_script_name;          include fastcgi_params;    } } 

example.com:

ssl_protocols tlsv1 tlsv1.1 tlsv1.2; ssl_prefer_server_ciphers on; ssl_ciphers "eecdh+ecdsa+aesgcm eecdh+arsa+aesgcm eecdh+ecdsa+sha384 eecdh+ecdsa+sha256 eecdh+arsa+sha384 eecdh+arsa+sha256 eecdh+arsa+rc4 eecdh edh+arsa rc4 !anull !enull !low !3des !md5 !exp !psk !srp !dss !rc4"; add_header strict-transport-security max-age=31536000;  server {     listen 80;     server_name example.com www.example.com;     rewrite ^/(.*) https://example.com/$1 permanent; }  server {     listen 443 ssl;      server_name www.example.com;     ssl_certificate /var/www/certs/missaglialfio/cert_chain.crt;     ssl_certificate_key /var/www/certs/missaglialfio/chiave.key;      rewrite ^/(.*) https://example.com/$1 permanent; }  server {     listen 443 ssl;      server_name example.com      ssl_certificate /var/www/certs/example/cert_chain.crt;     ssl_certificate_key /var/www/certs/example/key.key;      root /usr/share/nginx/html;     index index.html index.htm;      client_max_body_size 10m;      location / {         proxy_pass http://localhost:2368;         proxy_set_header x-forwarded-for $proxy_add_x_forwarded_for;         proxy_set_header host $http_host;         proxy_set_header x-forwarded-proto $scheme;         proxy_buffering off;     }  } 

soooh? problem? ç.ç
note that, before trying secure xyz.example.com, example.com , abc.example.com worked fine (and abc.example.com still works fine now). re-downloaded both cert. files , re-bundled them.
can't understand this... can me?
thanks!


Comments

Popular posts from this blog

c# - Validate object ID from GET to POST -

node.js - Custom Model Validator SailsJS -

php - Find a regex to take part of Email -