<div dir="ltr"><div class="gmail_default" style="font-family:'trebuchet ms',sans-serif">Well if you need IE testing MS has handily created a number of VM's for that.</div><div class="gmail_default" style="font-family:'trebuchet ms',sans-serif"><br></div><div class="gmail_default" style><font face="trebuchet ms, sans-serif"><a href="https://www.modern.ie/en-us/virtualization-tools">https://www.modern.ie/en-us/virtualization-tools</a> hope it helps.</font><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Oct 23, 2014 at 12:32 PM, Keith Smith <span dir="ltr"><<a href="mailto:techlists@phpcoderusa.com" target="_blank">techlists@phpcoderusa.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br>
Thank you Matt for your reply!<br>
<br>
<embedded reply /><br>
<br>
On 2014-10-19 13:21, Matt Graham wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
On 2014-10-16 20:54, <a href="mailto:techlists@phpcoderusa.com" target="_blank">techlists@phpcoderusa.com</a> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
I have a local LAMP box I use for development running CentOS 6.5.<br>
openssl genrsa -out ca.key 2048<br>
openssl req -new -key ca.key -out ca.csr<br>
openssl x509 -req -days 365 -in ca.csr -signkey ca.key -out ca.crt<br>
I Then verified the ssl.conf file and restarted httpd.<br>
</blockquote>
<br>
This looks correct. In an openssl context, though, CA usually means<br>
"Certificate Authority", which might cause confusion if you've got<br>
something else somewhere that uses an actual CA. I usually name the<br>
certs "$SITENAME.crt" for maximum ease of understanding.<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
I am using this cert for multiple local dev sites with no problem in<br>
FireFox (I add the exception). When I use Internet explorer it says<br>
"Mismatched Address" even if I add it to the trusted sites list.<br>
</blockquote>
<br>
DNS problems? I was trying something similar with IE at work, and it<br>
wasn't finding the "127.0.0.1 server <a href="http://example.com" target="_blank">example.com</a>" entry in<br>
lmhosts.sam. (Then again, "Run away screaming from IE" is my general<br>
policy...)<br>
<br>
</blockquote>
<br>
<br>
I'd like to run away screaming. I need IE for testing only.<br>
<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Do I need to create a cert for each website? Or can I create a wild<br>
card cert that I can use on all of them?<br>
</blockquote>
<br>
You should be able to make a wildcard cert and have it be accepted.<br>
Just make the CN be "*.<a href="http://whatever.org" target="_blank">whatever.org</a>" when you're generating the CSR,<br>
and then test on <a href="http://server1.whatever.org" target="_blank">server1.whatever.org</a> , <a href="http://server2.whatever.org" target="_blank">server2.whatever.org</a> , etc.<br>
<br>
</blockquote>
<br>
Easy enough. All sites are subdomains.<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
I followed a website that said I needed to add a section as seen<br>
below to openssl.cnf [and some other changes]<br>
</blockquote>
[snip]<br>
<br>
I have never modified openssl.cnf for any of the self-signed certs<br>
I've generated, and they've all Just Worked. What were the other<br>
changes you made?<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
The new cert works just like the old cert requiring I add the<br>
exception in FF and IE does not like the cert at all.<br>
</blockquote>
<br>
I can't make IE barf in that way with the self-signed cert on<br>
<a href="https://crow202.org/questions.html" target="_blank">https://crow202.org/questions.<u></u>html</a> , but <a href="http://crow202.org" target="_blank">crow202.org</a> has a valid DNS<br>
entry and the cert was generated with the default openssl.cnf .<br>
</blockquote>
<br>
It is probably something in my config.<br>
<br>
Thank you for your help!!<br>
Keith<br>
<br>
------------------------------<u></u>---------------------<br>
PLUG-discuss mailing list - <a href="mailto:PLUG-discuss@lists.phxlinux.org" target="_blank">PLUG-discuss@lists.phxlinux.<u></u>org</a><br>
To subscribe, unsubscribe, or to change your mail settings:<br>
<a href="http://lists.phxlinux.org/mailman/listinfo/plug-discuss" target="_blank">http://lists.phxlinux.org/<u></u>mailman/listinfo/plug-discuss</a><br>
</blockquote></div><br><br clear="all"><div><br></div>-- <br>A mouse trap, placed on top of your alarm clock, will prevent you from rolling over and going back to sleep after you hit the snooze button.<br><br>Stephen<br><br>
</div>