nginx - Why are my SSL certs mixing between my websites? -
i'm using nginx webserver , host 3 main websites, xyz.example.com
, abc.example.com
, example.com
itself.
example.com
, abc.example.com
have ssl certificate (two positivessl). bought cert. third website, xyz.example.com
.
so, problem is: when xyz.example.com
works ssl, example.com
returns net::err_cert_common_name_invalid
because tries use xyz.example.com
's certificate (saw chrome clicking on error code).
when delete xyz.example.com
's file nginx sites-available
directory, example.com
starts working again (but xyz.example.com
doesn't work).
here 2 nginx configuration files. xyz.example.com:
server { listen 80; server_name xyz.example.com; rewrite ^/(.*) https://xyz.example.com/$1 permanent; } server { listen 443 ssl; server_name xyz.example.com; ssl_certificate /var/www/certs/xyz_example/cert_chain.crt; ssl_certificate_key /var/www/certs/xyz_example/key.key; root /var/www/xyz; index index.php; client_max_body_size 5m; location / { try_files $uri $uri/ /index.html; } location ~ \.php$ { try_files $uri =404; fastcgi_pass unix:/var/run/php5-fpm.sock; fastcgi_index index.php; fastcgi_param script_filename $document_root$fastcgi_script_name; include fastcgi_params; } }
example.com:
ssl_protocols tlsv1 tlsv1.1 tlsv1.2; ssl_prefer_server_ciphers on; ssl_ciphers "eecdh+ecdsa+aesgcm eecdh+arsa+aesgcm eecdh+ecdsa+sha384 eecdh+ecdsa+sha256 eecdh+arsa+sha384 eecdh+arsa+sha256 eecdh+arsa+rc4 eecdh edh+arsa rc4 !anull !enull !low !3des !md5 !exp !psk !srp !dss !rc4"; add_header strict-transport-security max-age=31536000; server { listen 80; server_name example.com www.example.com; rewrite ^/(.*) https://example.com/$1 permanent; } server { listen 443 ssl; server_name www.example.com; ssl_certificate /var/www/certs/missaglialfio/cert_chain.crt; ssl_certificate_key /var/www/certs/missaglialfio/chiave.key; rewrite ^/(.*) https://example.com/$1 permanent; } server { listen 443 ssl; server_name example.com ssl_certificate /var/www/certs/example/cert_chain.crt; ssl_certificate_key /var/www/certs/example/key.key; root /usr/share/nginx/html; index index.html index.htm; client_max_body_size 10m; location / { proxy_pass http://localhost:2368; proxy_set_header x-forwarded-for $proxy_add_x_forwarded_for; proxy_set_header host $http_host; proxy_set_header x-forwarded-proto $scheme; proxy_buffering off; } }
soooh? problem? ç.ç
note that, before trying secure xyz.example.com
, example.com
, abc.example.com
worked fine (and abc.example.com
still works fine now). re-downloaded both cert. files , re-bundled them.
can't understand this... can me?
thanks!
Comments
Post a Comment