[jira] [Created] (INFRA-7131) HTTPS certificate mismatch for *.openoffice.org with some clients

["Andrea Pescetti (JIRA)" <ji...@apache.org>]

Andrea Pescetti created INFRA-7131:
--------------------------------------

             Summary: HTTPS certificate mismatch for *.openoffice.org with some clients
                 Key: INFRA-7131
                 URL: https://issues.apache.org/jira/browse/INFRA-7131
             Project: Infrastructure
          Issue Type: Bug
          Components: HTTP Server
            Reporter: Andrea Pescetti


Users report that at times https://wiki.openoffice.org and https://forum.openoffice.org serve the *.apache.org SSL certificate instead of the *.openoffice.org certificate; this results in mismatch errors.

The issue has been reported with different clients and from different networks in the last months, but the following is repeatable from an apache.org VM and thus suitable for investigation:

$ slogin pescetti@ooo-wiki2-vm.apache.org
[...]
pescetti@ooo-wiki2-vm:~$ wget https://wiki.openoffice.org/
[...] ERROR: certificate common name `*.apache.org' doesn't match requested host name `wiki.openoffice.org'.
pescetti@ooo-wiki2-vm:~$ wget https://forum.openoffice.org/
[...] ERROR: certificate common name `*.apache.org' doesn't match requested host name `forum.openoffice.org'.

I can confirm that when I see the issue my client actually sees the *.apache.org certificate, issued 20 December 2011, instead of the  *.openoffice.org certificate, issued 11 June 2013.



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)