You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2011/06/21 20:27:04 UTC

DO NOT REPLY [Bug 51411] New: TLS Server Name Indication (SNI) isn't support on IPv6 connections

https://issues.apache.org/bugzilla/show_bug.cgi?id=51411

             Bug #: 51411
           Summary: TLS Server Name Indication (SNI) isn't support on IPv6
                    connections
           Product: Apache httpd-2
           Version: 2.2.19
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: mod_ssl
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: marc@moonscoop-fan.com
    Classification: Unclassified


Hello,

Apache HTTPD does not seam to support Server Name Indication when IPv6 is used,
it chosses the wrong certificate.

I noticed that on one of my website, that works correctly on IPv4 but fails on
IPv6 with the error : "Wrong site, the common name (CN) doesn't match".
(https://forum.generation-taraddicts.com/)

Don't hesitate to ask me if you need more information to solve this issue.

Thanks in advance !

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


DO NOT REPLY [Bug 51411] TLS Server Name Indication (SNI) isn't supported on IPv6 connections

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=51411

Marc <ma...@moonscoop-fan.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |marc@moonscoop-fan.com

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


DO NOT REPLY [Bug 51411] TLS Server Name Indication (SNI) isn't supported on IPv6 connections

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=51411

Marc <ma...@moonscoop-fan.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|TLS Server Name Indication  |TLS Server Name Indication
                   |(SNI) isn't support on IPv6 |(SNI) isn't supported on
                   |connections                 |IPv6 connections

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


DO NOT REPLY [Bug 51411] TLS Server Name Indication (SNI) isn't supported on IPv6 connections

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=51411

Marc <ma...@moonscoop-fan.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |INVALID

--- Comment #1 from Marc <ma...@moonscoop-fan.com> 2011-06-22 09:58:21 UTC ---
Resolved, it wasn't a bug, it was a mistake in the server configuration, in
fact, the certificate had an effect only on one IPv4 (<VirtualHost
W.X.Y.Z:443>) and so the IPv6 didn't match with this virtualhost.

Fixed in using <VirtualHost *:443>

Sorry for the inconvienance.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org