Apache log: “[warn] RSA server certificate CommonName (CN) `plesk’ does NOT match server name!?”
- Parallels Plesk Automation 11.5
- Parallels Plesk Panel for Linux/Unix
Symptoms
Apache error log /var/log/httpd/error_log
contains warnings:
[Mon Sep 04 15:12:13 2006] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
Cause
This warning means that with CN parameter of the certificate installed on one of domains doesn’t match value specified by directiveServerName
in the corresponding VirtualHost
configuration. Additional information about SNI (Server Name Indication) could be obtained here.
Resolution
This warning can be safely ignored.
Alternatively you may regenerate the certificate to make its subject match the domain it is aimed to secure.
To obtain subjects of all installed certificates please use the following shell command:
# for i in `ls /usr/local/psa/var/certificates/`; do echo -n $i": "; openssl x509 -in /usr/local/psa/var/certificates/$i -subject -noout; done
Also you may download and use attached script to obtain subjects, it runs the same command as above. To use the sciprt:
# cd ~
# wget http://kb.parallels.com/Attachments/kcs-15116/cert.tar
# tar -xvf cert.tar
# chmod +x cert.sh
# ./cert.sh
NOTE: In Parallels Plesk Automations it is needed to execute this command on the Management Node.
As a result script will give you output like following:
subject= /C=US/ST=Virginia/L=Herndon/O=Parallels/OU=Parallels Panel/CN=Parallels Panel/[email protected]
subject= /C=RU/ST=Oregon/L=Springfield/O=Customer1, Inc/CN=www.testlog.test/[email protected]
Search words:
RSA server certificate CommonName (CN) `Parallels Panel’ does NOT match server name!?
RSA server certificate CommonName (CN) does NOT match the server name
CommonName (CN) does NOT match
Bir önceki yazımız olan 24 Ocak – Uğur Mumcu (1993) – Ali Gaffar Okkan (2001) başlıklı makalemizde 24 ocak 1993, 24 ocak 2001 ve Ali Gaffar Okan hakkında bilgiler verilmektedir.