moxie0/Convergence — Issue #133: Multiple sites with SSL on same IP gets the wrong certificate
Author: dmp1ce
Created: 2011-12-29 20:38:16+00:00
State: open

I have a Drupal Aegir setup with multiple sites using a signed certificate from a CA I created on my own. I have one website which works correctly with Convergence, but two others on the same IP are marked as Untrusted and I cannot add an exception for them.

The site that works is: https://aegir-3.upgradeya.com

The sites that don't work are: https://webpagedeveloper.me/ and https://drtvideos.com/

I think the issue is that Convergence is grabbing the certificate from the IP only and not asking for the certificate from the URL for the website. Examining the certificate for webpagedeveloper.me and drtvideos.com shows that the certificate Convergence is examining is aegir-3.upgradeya.com certificate.

The server I am using is running on Debian 6.0, Apache2 with a vhost / ssl setup.

All the websites load fine without Convergence running, with the exception of those pesky security warnings.