[users@httpd] ssl_error_rx_record_too_long

[Jeff Shearer <je...@shearer-family.org>]

I have moved an https website from one physical server to another.  I was able to get to the http server before I enabled the permanent redirect to https.  Once I enable the permanent redirect, I receive the error, "ssl_error_rx_record_too_long in my FF3x browser"   When I created the certificate, I used the domain name not the IP address in the request.

Can I use the same certificate and key on a different physical server?

If yes to the above, do the IP addresses need to match?  In particular both servers have physical and virtual IPs.  If the IP addresses need to match, can it be the virtual IP address?

Thanks again.


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

RE: [users@httpd] ssl_error_rx_record_too_long

[Justin Carlson <Ju...@lach.net>]

In my experience the cert will work on any physical server where the cert and key are present as long as the CN used in the virtual host is the same on both.  The IP is not taken into account for certs on SSL just the name.  but you can only have ONE ssl site per IP as SSL based name virtual hosting does not work.

-----Original Message-----
From: Jeff Shearer [mailto:jeff@shearer-family.org] 
Sent: Monday, June 14, 2010 10:31 AM
To: users@httpd.apache.org
Subject: [users@httpd] ssl_error_rx_record_too_long


I have moved an https website from one physical server to another.  I was able to get to the http server before I enabled the permanent redirect to https.  Once I enable the permanent redirect, I receive the error, "ssl_error_rx_record_too_long in my FF3x browser"   When I created the certificate, I used the domain name not the IP address in the request.

Can I use the same certificate and key on a different physical server?

If yes to the above, do the IP addresses need to match?  In particular both servers have physical and virtual IPs.  If the IP addresses need to match, can it be the virtual IP address?

Thanks again.


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org