[cobalt-users] Multiple Equifax Certs Prob - Raq 4i

["Nathaniel Scott" <cobalt@xxxxxxxxxxxxxxxxx>]

We recently tried the Equifax cert for the main site on our server, and
following the directions from this users-group I was able to get it going
without any issues, and have been very satisfied with the price/quality of
the service.

Since then, now one of our virt sites purchase a ssl from them, and we
weren't expecting any problems installing theirs, but had no success getting
it working.

We originally modified the httpd.conf file to add these lines:
$PerlConfig .= "SSLCertificateKeyFile /home/sites/$group/certs/key\n";
-->$PerlConfig .= "SSLCACertificateFile /home/sites/$group/certs/ca\n";
...
$PerlConfig .= "SSLCertificateKeyFile /home/sites/home/certs/key\n";
-->$PerlConfig .= "SSLCACertificateFile /home/sites/home/certs/ca\n";

This worked fine for our root site, but it is not picking up our client's
ssl.  The browser pops up a warning saying the domains don't match.  For
some reason it is trying to use our certificate, not theirs.

Both sites are (obviously) hosted on different IPs, have their certificate
information in the respective sites/siteX/certs/ directory, including the
"ca" file as referenced in the script above.  I have re-entered their web
certificate & ca cert, restarted the server but no change.

Also, under the section that's for global ssl, the
# SSLCACertificateFile
is commented out.

I have scanned my list archive (3 months) and cobalt's archive and not found
an answer to this problem (although I may be blind & flown by it :)

I have emailed Equifax & await their response, but am hopeful someone here
can help me.

Thanks

Nathaniel Scott
The Cyber Image