Certificate name mismatch

Help
41

Check your created output - https://check-your-website.server-daten.de/?q=romicvawebtrees.duckdns.org%3A44396

The Html-Content-Part has links

http://httpd.apache.org/docs/2.4/mod/mod_userdir.html
https://bugs.launchpad.net/ubuntu/+source/apache2

and an image

/icons/ubuntu-logo.png
42

I've got no idea how these got here nor do I know how to get rid of them...

Did the site load for you when accessed as https://romicvawebtrees.duckdns.org:44396?

Any help would be appreciated
Thank you.

43

Hello Rip,

Thank you for confirming that site is up for you.
I know it needs attention - unfortunately I’ve got no idea how to help it.

Thank you!

44

JuergenAuer
Thank you for staying with me.

I feel like lost site of what’s important. My goal is to make it so when
romicvawebtrees.duckdns.org:44396
is entered the https site would be accessed.

I thought it’s done with http to https redirect.

How do I get it to work?

Thank you!

45

As @JuergenAuer said, you’ll need two different ports in order to achieve this. You can’t make HTTP and HTTPS work on the same port.

46

Hello schoen!
I’m slowly getting there. I do have two ports redirected at the router.
I got this to work:
romicvawebtrees.duckdns.org:8096 ->https://romicvawebtrees.duckdns.org:44396
However,
romicvawebtrees.duckdns.org:44396 ->https://romicvawebtrees.duckdns.org:44396
doesn’t work yet.

I’d appreciate if you could give a pointer with this 2nd redirect.

Thank you VERY MUCH!

47

The redirects need to point to different target ports on your internal server (respectively, to the ports on which it’s listening for HTTP and HTTPS).

48

I understand it conceptually, but not well enough to apply in practice.

When a request comes in on port 80 I send it to https://xxx.xxx.org:443 regardless whether it came in as http or https.

What I’m not clear about is: what to do when a request comes in on 443 with http and not https.

Thank you.

49

So it's finished. You can't get the second to work, that's impossible.

There are two checks of your domain.

Port 8096 is your http port - https://check-your-website.server-daten.de/?q=romicvawebtrees.duckdns.org%3A8096

Domainname Http-Status redirect Sec. G
• http://romicvawebtrees.duckdns.org:8096/
108.51.118.201 301 https://romicvawebtrees.duckdns.org:44396 0.243 A
• http://www.romicvawebtrees.duckdns.org:8096/
108.51.118.201 301 https://romicvawebtrees.duckdns.org:44396 0.240 E
• https://romicvawebtrees.duckdns.org:8096/
108.51.118.201 -4 0.473 W
SendFailure - The underlying connection was closed: An unexpected error occurred on a send. The handshake failed due to an unexpected packet format.
• https://www.romicvawebtrees.duckdns.org:8096/
108.51.118.201 -4 0.470 W
SendFailure - The underlying connection was closed: An unexpected error occurred on a send. The handshake failed due to an unexpected packet format.
• https://romicvawebtrees.duckdns.org:44396 200 1.244 B

This port + http is redirected to your https port running 44396, there is the expected result http status 200.

And a direct check of that port - https://check-your-website.server-daten.de/?q=romicvawebtrees.duckdns.org%3A44396

Domainname Http-Status redirect Sec. G
• http://romicvawebtrees.duckdns.org:44396/
108.51.118.201 400 0.290 M
Bad Request
• http://www.romicvawebtrees.duckdns.org:44396/
108.51.118.201 400 0.270 M
Bad Request
• https://romicvawebtrees.duckdns.org:44396/
108.51.118.201 200 1.273 I
• https://www.romicvawebtrees.duckdns.org:44396/
108.51.118.201 200 1.234 N
Certificate error: RemoteCertificateNameMismatch

http doesn't work, because it's a https port, so the "Bad Request" is normal.

https work with the non-www version. https + www doesn't work, because the certificate has not the www domain name.

That's a wrong request. Check other domains (Grade A) and use port 443. Then port 443 is queried with http -> that produces an error message.

If you use an explicit port (and if it's not an Ookla speedtest, which supports both ports), half of the requests are wrong.

50

THANK YOU ALL!!!
Thank you very much.
:+1:

1 Like
51

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.