Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a rails application up on a linode ubuntu 11 server, running apache2. I have a cert purchased from godaddy, (where we also bought our domain) and the cert is installed on my server.

Part of my virtual host file:

ServerName my_site.com
ServerAlias www.my_site.com

SSLEngine On
SSLCertificateFile      /path/my_site.com.crt
SSLCertificateKeyFile   /path/my_site.com.key
SSLCertificateChainFile /path/gd_bundle.crt

The cert works fine in Chrome, FireFox and IE 9+ but in IE 8- I get this error:

There is a problem with this website's security certificate.

The security certificate presented by this website was 
issued for a different website's address.

I'm hosting multiple rails apps on this same server (4 right now plus some old php sites that don't need ssl).

I have tried googling every possible combination of the error/situation that I could think of but at this point I'm shooting in the dark. The closest I could come up with is that some versions if IE don't support SNI. But that doesn't apply here because I am getting the warning on windows 7 machines running IE 8, and the SNI only seemed to apply to IE 8 if the operating system was windows XP.

So why is this cert being accepted by all browsers but giving me a warning in IE 8?

Edit:

So doing a little more digging and I figured out some more. It turns out this is effecting IE 9 as well. However the problem seems to be that IE is not traversing the ssl chain to get to the right cert. FireFox and Chrome when I go to view certificate show the correct one, but IE is showing one of our other sites certificates.

REAL QUESTION HERE:

That being the case why is IE not getting the right certificate when others are and how do I fix it?

share|improve this question
    
view the certificate details in IE8 (Safety>security report>view cert), does it show (as it claims) that the certificate is for a different hostname than the actual site? I've seen problems like this with Chrome very often in the past, it would show a bad cert on a site that was fine (even gmail for example), then the next day it would be back green. –  user16081-JoeT Nov 7 '12 at 21:09
    
@user16081 I'll check, but its been a problem for weeks, hence my frustration and question here. I've run into similar things to what you describe, I only wish this was one of those times! –  ryan Nov 7 '12 at 21:12
    
@user16081 based on my edit do you have any suggestions ? –  ryan Nov 7 '12 at 21:45
1  
are you using a single ip address for multiple sites? Or is there some kind of load balancing going on? –  user16081-JoeT Nov 7 '12 at 22:52
    
@user16081 we are using a single ip address set up with multiple named virtual hosts –  ryan Nov 7 '12 at 23:47

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.