[SATLUG] changed ip now https won't work

Travis Miller tmiller-lists at web-1hosting.net
Wed Aug 25 12:22:42 CDT 2004


Hello all,

I have changed IP's using mod_ssl w/ apache with certs from Thawte and 
InstantSSL no problem.  One thing that did give me some problems once was 
changing the IP and forgetting to change the reverse DNS zone.  Might want to 
check that out.

- Travis



Paul S. Bains wrote:
> I'm pretty certain the certs are IP dependent also.
> 
> On Tue, 24 Aug 2004 16:03:01 -0500
> Chuck <chuck at tetlow.net> wrote:
> 
> 
>>I'm not 100% positive, but aren't certificates IP address dependent? 
>>If you change the IP address, doesn't it require a reissue of the
>>certificate?  
>>
>>Sorta like the error you get when you change IP address and then SSH
>>to the box.  Your local machine has the name, IP, and key stored in
>>the"~/.ssh/known_hosts" file.  If you change the IP on the distant
>>end, SSH will complain and ask you if you know of the change.  But if
>>you've configured SSH for strict security (default setting these
>>days), it won't connect at all.  It will give you an error until you
>>pull the old entry from the known_hosts file.
>>
>>Ask your Certificate Authority.  I'm pretty sure the cert is IP
>>address dependent.  In that case, just get your C.A. to reissue and
>>install the new cert on your server.
>>
>>
>>Chuck
>>
>>
>>
>>
>>On Tue, 2004-08-24 at 14:28, James O'Brien wrote:
>>
>>>i posted this before i subscribed to the mail list so
>>>i'm sorry if you get it twice, but here's the problem.
>>>
>>>we had to move our servers to a different physical
>>>location and so we had to change the ip's. one server
>>>has a certificate from geotrust for ssl that ran great
>>>before the move. since the move, none of the requests
>>>for https:// . . . get received. they throw an error
>>>much like the one you get when you request a file that
>>>does not exist. the error in the ssl_engine_log says
>>>'handshake failed' and lists an OpenSSL error.
>>>
>>>os - rh 7.3
>>>server - apache
>>>
>>>any ideas? thanks - james
>>>
>>>
>>>		
>>>__________________________________
>>>Do you Yahoo!?
>>>New and Improved Yahoo! Mail - Send 10MB messages!
>>>http://promotions.yahoo.com/new_mail 
>>>_______________________________________________
>>>Satlug mailing list
>>>Satlug at satlug.org
>>>http://alamo.satlug.org/mailman/listinfo/satlug
>>
>>
>>_______________________________________________
>>Satlug mailing list
>>Satlug at satlug.org
>>http://alamo.satlug.org/mailman/listinfo/satlug
> 
> _______________________________________________
> Satlug mailing list
> Satlug at satlug.org
> http://alamo.satlug.org/mailman/listinfo/satlug



More information about the Satlug mailing list