Opened 11 years ago

#332 new defect

scripts-vhost IP mysteriously serves scripts.mit.edu cert with a missing intermediate?

Reported by: andersk Owned by:
Priority: minor Milestone:
Component: web Keywords:
Cc:

Description

openssl s_client -connect scripts-vhosts.mit.edu:443 -servername scripts.mit.edu https://www.ssllabs.com/ssltest/analyze.html?d=scripts.mit.edu&s=18.181.0.46

This shouldn’t be possible, because (1) we never set SSLCertificateFile to scripts.pem without also setting SSLCertificateChainFile, and (2) we never do that outside a <VirtualHost> block specifically for 18.181.0.43.

Change History (0)

Note: See TracTickets for help on using tickets.