Opened 12 years ago
#332 new defect
scripts-vhost IP mysteriously serves scripts.mit.edu cert with a missing intermediate?
Reported by: | andersk | Owned by: | |
---|---|---|---|
Priority: | minor | Milestone: | |
Component: | web | Keywords: | |
Cc: |
Description
openssl s_client -connect scripts-vhosts.mit.edu:443 -servername scripts.mit.edu https://www.ssllabs.com/ssltest/analyze.html?d=scripts.mit.edu&s=18.181.0.46
This shouldn’t be possible, because (1) we never set SSLCertificateFile to scripts.pem without also setting SSLCertificateChainFile, and (2) we never do that outside a <VirtualHost> block specifically for 18.181.0.43.
Note: See
TracTickets for help on using
tickets.