AnsweredAssumed Answered

Default generated SSL Certificate contains 'invalid address'

Question asked by shmuel_levine on May 1, 2014
Latest reply on May 2, 2014 by shmuel_levine
I've tried to put together a working installation of Alfresco based on the documentation and it appears to be working now, more or less.

The issue which I have encountered is related to the self-generated SSL certificates which were automatically set up by the installation script.  I understand that these certificates are self-generated and I have, of course, already added both the CA and the site certificates to Windows Trusted Root Certificate store.  However, I am still received an error messages about an invalid certificate when I try logging into the site through a web browser – and more importantly (to me, at least) – the Windows 7 WebDAV client fails to connect.

The error message that I am receiving is:
IE: Mismatched Address. The security certificate presented for this website was issued for a different website's address
Chrome:  <strong>This is probably not the site you are looking for!</strong>  You attempted to reach xxx.xxxx.xx (my FQDN), but instead you actually reached a server identifying itself as <strong>Alfresco Repository</strong>

Viewing the certificate information, I see that the certificate was:
<strong>Issued to:</strong>     Alfresco Repository
<strong>Issued by:</strong>     Alfresco CA

All of my DNS settings appear to be correct.  The actual 'hostname' on the server matches the CNAME entry in DNS.

I've tried Googling this for more information, but I have been unable to find anything helpful.  Most of what I have found is either about incorporating 3rd-party certificates (not interested – personal website), or about setting up the keystores with the default information.  Indeed, I see from that wiki page that it explicitly says to use "Alfresco Repository" in the CN for the certificate.  This appears to be the source of the troubles, but I'm a little hesitant to regenerate these certificates and end up ruining this installation.

Has anyone encountered and resolved a similar issue?

Thanks and your help is much appreciated.