netfilter buglog - Jun 2014 - [Bug 959] New: SSL misconfiguration

https://bugzilla.netfilter.org/show_bug.cgi?id=959

           Summary: SSL misconfiguration
           Product: bugzilla
           Version: other
          Platform: x86_64
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P5
         Component: netfilter bugzilla
        AssignedTo: netfilter-buglog at lists.netfilter.org
        ReportedBy: jean-paul at hybridcluster.net
   Estimated Hours: 0.0


Upon account registration, a link is generated to
https://bugzilla.netfilter.org/.

Upon following the link, a working browser presents a warning something like:

You attempted to reach bugzilla.netfilter.org, but instead you actually reached
a server identifying itself as vishnu.netfilter.org.

A simple test using the openssl debug client:

    openssl s_client -servername bugzilla.netfilter.org -connect
bugzilla.netfilter.org:443

Confirms that the certificate served is for vishnu.netfilter.org instead of for
bugzilla.netfilter.org.

-- 
Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.

https://bugzilla.netfilter.org/show_bug.cgi?id=959

Pablo Neira Ayuso <pablo at netfilter.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
                 CC|                            |pablo at netfilter.org
         Resolution|---                         |FIXED

--- Comment #1 from Pablo Neira Ayuso <pablo at netfilter.org> ---
New certificate has been installed now that previous one was going to expire.
The new certificate include altnames for www, bugzilla, git and lists.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20141023/5e8d30be/attachment.html>