Solved

The name on the security certificate is invalid or does not match the name of the site

Posted on 2007-03-19
3
6,100 Views
Last Modified: 2012-06-27
Hi,

I have a problem one of my customers secure server. Thought someone might have thoughts on a quick fix...

On their website www.theirdomain.net they have a link to their secure server which is running Windows server 2003. The secure server is physically in their offices at their company. Their domain theirdomain.net is hosted at a third party webhosting company.

On their home page whenever you click on the link to the secure server you get the message "The name on the security certificate is invalid or does not match the name of the site" - I checked the server and show the following:

1. The secure server is linked to by IP address and does not use a domain
2. The certificate is valid but is in the name theirdomain.com - they do not own the domain theirdomain.com, they own theirdomain.net
3. The certificate was purchased 2 years ago by them. I assume they made a name (.com, .net) mistake when purchasing it originally.

I told them that when you link to a secure server with an IP address in Windows server you will get that message. The certificate cannot be bound to an IP address - it must use a domain name. Since the domain is wrong, they need to use DNS on the Windows server and generate a new certificate with the matching name and link to it by name. I spoke with Verisign and they confirmed this. Verisign will not change the name because they purchased it 2 years ago.

The customer told me that it "was" working without receiving that message up until about 2 weeks ago. ??? and want it working again...

I'm stumped. Is their a way to configure Windows 2003 server so that you can use an SSL certificate via IP address and not receive that message?

I appreciate any thoughts or experience you may have had with this type of thing.

-S

0
Comment
Question by:summerset
3 Comments
 
LVL 34

Accepted Solution

by:
Dave_Dietz earned 250 total points
ID: 18751459
>Is their a way to configure Windows 2003 server so that you can
>use an SSL certificate via IP address and not receive that message?

No, there is no way to avoid getting this error if you are referencing a site via IP address.  If there were a way it would be a *huge* security hole.

And I doubt that it was working until 2 weeks ago.  Best gues is that they weren't actually using SSL until about 2 weeks ago and someone made a configuration change of some sort.

Dave Dietz
0
 
LVL 38

Assisted Solution

by:Hypercat (Deb)
Hypercat (Deb) earned 250 total points
ID: 18751546
I'm in agreement with Dave here - either someone is not "fessing up" or they just don't understand exactly what's happening. Maybe SSL wasn't actually enable for that server until 2 weeks ago and they didn't even know it.  

They will need to purchase a new certificate - and if it's two years old, maybe it's getting ready to expire anyway?  If it's an issue of cost, you can get a certificate from Thawte or Godaddy pretty cheaply these days (i.e., a coupla hundred dollars instead of thousands).
0
 

Author Comment

by:summerset
ID: 18751625
Thanks guys. I appreciate it. I'm going with my first recommendation to them and have them purchase a new certificate. I just needed to hear someone else say it. '-)

Aloha,

-S
0

Featured Post

6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
RDP up only between 8am-13.00 pm ? 11 66
why user can't see mapped share folder 8 36
IIS 7 Log 2 21
Server HP DL380 G7 13 36
Some time ago I faced the need to use a uniform folder structure that spanned across numerous sites of an enterprise to be used as a common repository for the Software packages of the Configuration Manager 2007 infrastructure. Because the procedu…
Learn about cloud computing and its benefits for small business owners.
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
You have products, that come in variants and want to set different prices for them? Watch this micro tutorial that describes how to configure prices for Magento super attributes. Assigning simple products to configurable: We assigned simple products…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now