Rsa certificate configured for does not include an id which matches the server name

Question

Problem :

I am trying to use the XAMPP and also started Apache but I cannot access my site over the HTTPS.

I am facing the below error :

[Mon Dec 16 08:05:33.208723 2019] [ssl:warn] [pid 3784:tid 256] AH01909: RSA certificate configured for www.example.com:443 does NOT include an ID which matches the server name [Mon Dec 16 08:05:33.746774 2019] [ssl:warn] [pid 3784:tid 256] AH01909: RSA certificate configured for www.example.com:443 does NOT include an ID which matches the server name [Mon Dec 16 08:05:33.825871 2019] [mpm_winnt:notice] [pid 3784:tid 256] AH00455: Apache/2.4.7 (Win32) OpenSSL/1.0.1e PHP/5.5.6 configured -- resuming normal operations [Mon Dec 16 08:05:33.825871 2019] [mpm_winnt:notice] [pid 3784:tid 256] AH00456: Apache Lounge VC11 Server built: Nov 21 2013 20:13:01 [Mon Dec 16 08:05:33.825871 2019] [core:notice] [pid 3784:tid 256] AH00094: Command line: 'D:\xampp\apache\bin\httpd.exe -d D:/xampp/apache' [Mon Dec 16 08:05:33.830753 2019] [mpm_winnt:notice] [pid 3784:tid 256] AH00418: Parent: Created child process 4452 [Mon Dec 16 08:05:33.148052 2019] [ssl:warn] [pid 4452:tid 268] AH01909: RSA certificate configured for www.example.com:443 does NOT include an ID which matches the server name

What is wrong and how can I correct it?

Answer 1

[Mon Dec 16 08:05:33.208723 2019] [ssl:warn] [pid 3784:tid 256] AH01909: RSA certificate configured for www.example.com:443 does NOT include an ID which matches the server name

This clearly means there is a server name of xyz.example.com but the certificate is for the  yyy.example.com only. In the current situation, while Apache will try to serve such certificate, but the browser s will not accept them when trying to access https://xyz.example.com, for instance.

So please try to install the newer version not latest version

1.      Take backup of all databases and code

2.      Uninstall the XAMPP

3.      Install the newer version

That should fix your issue.

Answer 2

openssl x509 -in server.crt -noout -subject

Should return the CN the of the certificate. That's the name you have to use in the ServerName directive and to connect to.

Alternatively, if, like me, you aren't even using ssl, you will still get this error message because using ssl is turned on by default. In that case, turn it off! Here's an excerpt from

config.d/ssl.conf:

#   SSL Engine Switch:
#   Enable/Disable SSL for this virtual host.
#SSLEngine on
SSLEngine off

However, Apache's messages seem to talk about some other certificate:

[ssl:warn] [pid 4787] AH01906: RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)

[ssl:debug] [pid 4787] ssl_util_ssl.c(489): AH02412: [owncloud.domain.com:443]
Cert does not match for name 'owncloud.domain.com' 
[subject: emailAddress=root@localhost.localdomain,CN=localhost.localdomain,
OU=SomeOrganizationalUnit,O=SomeOrganization,L=SomeCity,ST=SomeState,C=-- / 
issuer: emailAddress=root@localhost.localdomain,CN=localhost.localdomain,
OU=SomeOrganizationalUnit,O=SomeOrganization,L=SomeCity,ST=SomeState,C=-- /
serial: 7B1C / notbefore: Jul  4 10:13:52 2014 GMT / notafter: Jul  4 10:13:52 2015 GMT]

Please run grep -r SSLCertificateFile /etc/httpd and see if remnants of the default configuration are left in any other Apache configuration file. It might be that another SSLCertificateFile directive is overriding the one you've specified in your vhosts.conf.

Method 1: Editing the httpd[dot]conf File

Method 2: Regenerating New Certificates