<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>WebSight Design Blog &#187; ssl</title>
	<atom:link href="http://blog.websightdesign.com/tag/ssl/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.websightdesign.com</link>
	<description>The Official Blog of WebSight Design, Inc.</description>
	<lastBuildDate>Thu, 02 Feb 2012 22:40:17 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.2</generator>
		<item>
		<title>One way to fix Apache serving up the wrong SSL certificate</title>
		<link>http://blog.websightdesign.com/2008/06/02/one-way-to-fix-apache-serving-up-the-wrong-ssl-certificate/</link>
		<comments>http://blog.websightdesign.com/2008/06/02/one-way-to-fix-apache-serving-up-the-wrong-ssl-certificate/#comments</comments>
		<pubDate>Mon, 02 Jun 2008 18:41:48 +0000</pubDate>
		<dc:creator>noah</dc:creator>
				<category><![CDATA[Code]]></category>
		<category><![CDATA[Tips and Tricks]]></category>
		<category><![CDATA[Web Development]]></category>
		<category><![CDATA[apache]]></category>
		<category><![CDATA[ssl]]></category>
		<category><![CDATA[ubuntu]]></category>

		<guid isPermaLink="false">http://blog.websightdesign.com/2008/06/02/one-way-to-fix-apache-serving-up-the-wrong-ssl-certificate/</guid>
		<description><![CDATA[I ran into an issue today on an Ubuntu server running Apache 2 where the server already had an SSL certificate for &#8216;www.domain.com&#8217; and the client wanted to add a second one for &#8216;sub.domain.com&#8217;.  I added a new IP to the server, set up the virtual site, and generated the CSR and ordered and installed the cert [...]<p><a href="http://blog.websightdesign.com/2008/06/02/one-way-to-fix-apache-serving-up-the-wrong-ssl-certificate/">One way to fix Apache serving up the wrong SSL certificate</a> is a post from: WebSight Design, Inc. company blog. With headquarters in the San Francisco bay area, WebSight Design, Inc. has been providing world class web engineering, creative design and hosting solutions since 1995. <a href="http://Websightdesign.com">WebSight Design</a></p>
]]></description>
			<content:encoded><![CDATA[<p>I ran into an issue today on an Ubuntu server running Apache 2 where the server already had an SSL certificate for &#8216;www.domain.com&#8217; and the client wanted to add a second one for &#8216;sub.domain.com&#8217;.  I added a new IP to the server, set up the virtual site, and generated the CSR and ordered and installed the cert normally, but when I tried to view the new virtual site, it gave me the new site directory but with the old &#8216;www&#8217; cert, causing a cert name mis-match error.</p>
<p>The old virtual site&#8217;s apache config file had the site bound to *:443, so when I added the new site I changed the old one to [Old IP Address]:443, so it wouldn&#8217;t conflict with the new one which was bound to [New IP Address]:443. While logically it seemed like that should have worked, it didn&#8217;t, and was serving up the old cert for the new site.</p>
<p>I fixed the issue by changing the binding for the old virtual site back to *:443, while leaving the new one on [new IP address]:443. To me, it seems like this shouldn&#8217;t work, and that the *:443 would catch all the requests, but apparently that&#8217;s how it is supposed to be, and the binding with the IP address overrides the wildcard binding. Who knew?</p>
<p><a href="http://blog.websightdesign.com/2008/06/02/one-way-to-fix-apache-serving-up-the-wrong-ssl-certificate/">One way to fix Apache serving up the wrong SSL certificate</a> is a post from: WebSight Design, Inc. company blog. With headquarters in the San Francisco bay area, WebSight Design, Inc. has been providing world class web engineering, creative design and hosting solutions since 1995. <a href="http://Websightdesign.com">WebSight Design</a></p>
]]></content:encoded>
			<wfw:commentRss>http://blog.websightdesign.com/2008/06/02/one-way-to-fix-apache-serving-up-the-wrong-ssl-certificate/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Compile / Configure Subversion w/SSL Enabled</title>
		<link>http://blog.websightdesign.com/2008/02/15/compile-configure-subversion-wssl-enabled/</link>
		<comments>http://blog.websightdesign.com/2008/02/15/compile-configure-subversion-wssl-enabled/#comments</comments>
		<pubDate>Sat, 16 Feb 2008 01:49:40 +0000</pubDate>
		<dc:creator>Lawrence</dc:creator>
				<category><![CDATA[Code]]></category>
		<category><![CDATA[Tips and Tricks]]></category>
		<category><![CDATA[Web Development]]></category>
		<category><![CDATA[apache]]></category>
		<category><![CDATA[hosted subversion]]></category>
		<category><![CDATA[https]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[neon]]></category>
		<category><![CDATA[springloops]]></category>
		<category><![CDATA[ssl]]></category>
		<category><![CDATA[Subversion]]></category>
		<category><![CDATA[ubuntu]]></category>

		<guid isPermaLink="false">http://blog.websightdesign.com/2008/03/27/compile-configure-subversion-wssl-enabled/</guid>
		<description><![CDATA[My company: WebSight Design, uses Subversion for source and version control for all of our web development projects. We also use the amazing hosted Subversion service: Springloops. (If you ever need a Subversion deployment tool, Springloops is it!) Springloops repositories are *only* accessible via HTTPS. In order to gain access to a repository from the [...]<p><a href="http://blog.websightdesign.com/2008/02/15/compile-configure-subversion-wssl-enabled/">Compile / Configure Subversion w/SSL Enabled</a> is a post from: WebSight Design, Inc. company blog. With headquarters in the San Francisco bay area, WebSight Design, Inc. has been providing world class web engineering, creative design and hosting solutions since 1995. <a href="http://Websightdesign.com">WebSight Design</a></p>
]]></description>
			<content:encoded><![CDATA[<p>My company: <a href="http://www.websightdesign.com" target="_blank">WebSight Design</a>, uses <a title="Subversion" href="http://subversion.tigris.org/" target="_blank">Subversion</a> for source and version control for all of our web development projects. We also use the amazing hosted Subversion service: <a title="Springloops" href="http://www.springloops.com" target="_blank">Springloops</a>. (If you ever need a Subversion deployment tool, Springloops is it!) Springloops repositories are *only* accessible via  HTTPS. In order to gain access to a repository from the command line, I had to re-configure Subversion on our servers to enable access to ssl urls. Seems simple enough and actually it is. However, as with all things Linux, the devil is in the details. I spent hours-upon-hours trying to get it to work. It simply comes down to the sequence of steps you take. What I&#8217;ve done here is list out all of the steps done to get it working to save you from the same pain I went through.</p>
<p>So, I am assuming that you are trying to access a Subversion repository via an https url and you are getting the message &#8220;ssl not supported&#8221; or something similar to this. I know, it sucks and it&#8217;s pretty frustrating. I promise you however, if you do *exactly* what I spell out below, in the sequence I list&#8230; you will be up and working in about 15-20mins. The only other assumption here is that you are using Ubuntu or some other Debian-based Linux  distro that supports the APT package manager.</p>
<p>It&#8217;s important to know that Subversion uses a module called Neon to provide ssl connectivity. The key here is to use the version of Neon <em>for your specific release of Subversion</em>. This is <strong><span style="text-decoration: underline;">key</span></strong> to everything else that follows. Don&#8217;t just grab the latest versions of Subversion and Neon and assume they will work correctly together. So with that&#8230; let&#8217;s get to work.</p>
<p>First, make sure the following packages are installed on your server:<br />
GCC</p>
<div class="codecolorer-container text default" style="overflow:auto;white-space:nowrap;border:1px solid #9F9F9F;width:435px;"><div class="text codecolorer" style="padding:5px;font:normal 12px/1.4em Monaco, Lucida Console, monospace;white-space:nowrap">sudo apt-get install build-essential</div></div>
<p>Expat</p>
<div class="codecolorer-container text default" style="overflow:auto;white-space:nowrap;border:1px solid #9F9F9F;width:435px;"><div class="text codecolorer" style="padding:5px;font:normal 12px/1.4em Monaco, Lucida Console, monospace;white-space:nowrap">sudo apt-get install expat</div></div>
<p>Libxml-dev</p>
<div class="codecolorer-container text default" style="overflow:auto;white-space:nowrap;border:1px solid #9F9F9F;width:435px;"><div class="text codecolorer" style="padding:5px;font:normal 12px/1.4em Monaco, Lucida Console, monospace;white-space:nowrap">sudo apt-get install libxml2-dev</div></div>
<p>Next, download latest Subversion files:</p>
<div class="codecolorer-container text default" style="overflow:auto;white-space:nowrap;border:1px solid #9F9F9F;width:435px;"><div class="text codecolorer" style="padding:5px;font:normal 12px/1.4em Monaco, Lucida Console, monospace;white-space:nowrap">wget http://subversion.tigris.org/downloads/subversion-1.4.X.tar.bz2<br />
wget http://subversion.tigris.org/downloads/subversion-deps-1.4.X.tar.bz2</div></div>
<p>NOTE: &#8220;X&#8221; above is a placeholder for your version no.</p>
<p>Untar em&#8217; in this order:</p>
<div class="codecolorer-container text default" style="overflow:auto;white-space:nowrap;border:1px solid #9F9F9F;width:435px;"><div class="text codecolorer" style="padding:5px;font:normal 12px/1.4em Monaco, Lucida Console, monospace;white-space:nowrap">tar xjvf subversion-1.4.X.tar.bz2<br />
tar xjvf subversion-deps-1.4.X.tar.bz2</div></div>
<p>Once you have extracted the files, open the file &#8221;</p>
<div class="codecolorer-container text default" style="overflow:auto;white-space:nowrap;border:1px solid #9F9F9F;width:435px;"><div class="text codecolorer" style="padding:5px;font:normal 12px/1.4em Monaco, Lucida Console, monospace;white-space:nowrap">subversion-1.4.X/INSTALL</div></div>
<p>&#8220;. Locate the section on Neon. It will state which version you need to download and compile with this version of Subversion.</p>
<p>Make sure you are *not* in the Subversion directory you just created. Then go ahead and download Neon:</p>
<div class="codecolorer-container text default" style="overflow:auto;white-space:nowrap;border:1px solid #9F9F9F;width:435px;"><div class="text codecolorer" style="padding:5px;font:normal 12px/1.4em Monaco, Lucida Console, monospace;white-space:nowrap">wget http://www.webdav.org/neon/neon-0.2X.0.tar.gz</div></div>
<p>NOTE: The &#8220;X&#8221; above is placeholder for the version of Neon you need.</p>
<p>Next, extract the archive:</p>
<div class="codecolorer-container text default" style="overflow:auto;white-space:nowrap;border:1px solid #9F9F9F;width:435px;"><div class="text codecolorer" style="padding:5px;font:normal 12px/1.4em Monaco, Lucida Console, monospace;white-space:nowrap">tar zxvf neon-1.X.X.tar.gz<br />
cd neon-1.X.X</div></div>
<p>Now is where the fun begins. You need to compile and install Neon. Do the following from *within* the Neon directory you created:</p>
<div class="codecolorer-container text default" style="overflow:auto;white-space:nowrap;border:1px solid #9F9F9F;width:435px;"><div class="text codecolorer" style="padding:5px;font:normal 12px/1.4em Monaco, Lucida Console, monospace;white-space:nowrap">./configure --with-ssl<br />
make<br />
sudo make install</div></div>
<p>It&#8217;s important to note that Neon gets installed to /usr/local by default. You need to note that as you will now need it when compiling and installing Subversion.</p>
<p>Change back to the Subversion folder:</p>
<div class="codecolorer-container text default" style="overflow:auto;white-space:nowrap;border:1px solid #9F9F9F;width:435px;"><div class="text codecolorer" style="padding:5px;font:normal 12px/1.4em Monaco, Lucida Console, monospace;white-space:nowrap">cd ../subversion-1.4.X</div></div>
<p>Compile and install Subversion:</p>
<div class="codecolorer-container text default" style="overflow:auto;white-space:nowrap;border:1px solid #9F9F9F;width:435px;"><div class="text codecolorer" style="padding:5px;font:normal 12px/1.4em Monaco, Lucida Console, monospace;white-space:nowrap">./configure --enable-ssl --with-neon=/usr/local/<br />
make<br />
sudo make install</div></div>
<p>Now, realize that the Subversion compilation and installation process takes a long time to complete. So just be patient. You can ignore any warning messages that scroll by. You only need to be concerned with error messages or if the installation stops for any reason.</p>
<p>Once compilation and installation are complete you need to confirm that you are running the version of Subversion you just tried to install:</p>
<div class="codecolorer-container text default" style="overflow:auto;white-space:nowrap;border:1px solid #9F9F9F;width:435px;"><div class="text codecolorer" style="padding:5px;font:normal 12px/1.4em Monaco, Lucida Console, monospace;white-space:nowrap">svn --version --quiet</div></div>
<p>If you get *anything* other than the version number you thought you installed, something went horribly wrong. Go back to the very beginning of this and try again. Most time folks get errors it is because that don&#8217;t have the prerequisite tools and utilities installed. If you see the version you wanted&#8230; you&#8217;re all good!</p>
<p><a href="http://blog.websightdesign.com/2008/02/15/compile-configure-subversion-wssl-enabled/">Compile / Configure Subversion w/SSL Enabled</a> is a post from: WebSight Design, Inc. company blog. With headquarters in the San Francisco bay area, WebSight Design, Inc. has been providing world class web engineering, creative design and hosting solutions since 1995. <a href="http://Websightdesign.com">WebSight Design</a></p>
]]></content:encoded>
			<wfw:commentRss>http://blog.websightdesign.com/2008/02/15/compile-configure-subversion-wssl-enabled/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

