I purchased an SSL certificate from Comodo and have followed their (terrible) setup instructions.

I'm confident I have all the files in the right places, but browsers are still giving an error.

When I try to go on https://www.roryholland.co.uk it says the certificate is only valid for ip-10-112-47-5.ec2.internal (a dynamic Amazon IP), although I do have a static "elastic" IP set up.

Do I have to reissue the certificate?


Well, in addition to having the wrong domain, the cert presented has not been signed by a trusted CA.

You're still likely using the self-signed cert that shipped with the distro. You need to verify that your purchased cert has been installed correctly.

  • Also, make sure when you are generating the cert, you use the proper domain name and not xxxx.ec2.internal. – Bart De Vos May 25 '12 at 12:37
  • In the virtualhost section in httpd.conf I'm specifying the correct certificate file – Rory May 25 '12 at 12:45
  • 1
    Well then you need to ensure that the correct virtual host is catching these requests. – EEAA May 25 '12 at 12:49
  • grep -r -i ssl /etc/httpd/* or whatever to see all the SSL configurations – cjc May 25 '12 at 13:40

Sounds like when you created the CSR.. you setup the CN wrong.. You set it to the hostname on the server and not www.roryholland.co.uk

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.