[imc-uk-tech] SSL Problem?

[Chris]

Hi

On Tue 26-Jul-2005 at 10:15:52PM +1200, Stewart wrote:
> Something funny is going on with the SSL. I started
> using it only yesterday and followed all the
> instructions on the security page. I have accepted the
> certificate authorities root certificate.
> 
> If i go to www0.indymedia.org.uk then I get a warning
> message saying that I have attempted connection but the
> security certificate belongs to
> publish.indymedia.org.uk.

Yes, they share the same IP address, if you go to
https://publish.indymedia.org.uk/ then everything is OK.

> www1.indymedia.org.uk doesn't cause this complaint.
> Everything seems hunky-dory there.
> 
> This looks like its probably a mistake in the SSL setup
> rather than an attack to me.  

Yep, I think we need an extra IP address to se this up or
we could redirect all publish.indymedia.org.uk requests to
www0 and then generate a cert for www0...

The idea of encouraging SSL traffic for the publishing
server is to make it less clear to anyone sniffing the
traffic who is browsing the site, who is doing admin and
who is publishing...

This idea is written up here:

  http://docs.indymedia.org/view/Local/UkCrypto#Web

Chris

-- 
Aktivix -- Free Software for a Free World