Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Hosting company has a wildcard SSL certificate for *.hostingco.com and they provide a DNS record my_id.hostingco.com that points to my IP. Server is FreeBSD 6.4 with Apache 2.2.

I can see the certificate when loading https://my_id.hostingco.com/ in a browser, and locally, using openssl s_client.

My question is, where is the certificate specified and/or located on my server?

httpd.conf does not specify SSLCertificateFile or related directives, and it doesn't include any other conf files. Only thing I've found is conf/ssl.crt/ca-bundle.crt which is just a bunch of CA certificates. /etc/ssl only contains openssl.cnf.

share|improve this question
2  
I would recommend looking around on the server a bit to figure out whether talking to the public IP really ends up talking to your server or a frontend proxy (load balancer or so) that actually picks up the certificate. My guess is they don't want you to have access to the private key - it's private, after all, right? –  Theuni Jan 22 '13 at 7:07
    
@Theuni has the right idea. You can use openssl s_client to test for it, but based on the absence from your configuration the load balancer scenario is the most likely case. Unless you work for the hosting company, there's no way the private key is going to be exposed to you, which means you won't find the certificate in your configurations. (as it is useless without a private key) –  Andrew B Jan 22 '13 at 8:09
    
Ok, makes sense. It's a virtual machine, so maybe the hypervisor is handling it. (SSL still works using loopback 127.0.0.1) But if a front-end machine or hypervisor handles it, then wouldn't there be no SSL at all from the server's perspective? –  Marco Jan 22 '13 at 22:22

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.