[Bug 1210761] [NEW] apache ignores ServerAlias directive when using Server Name Indication for SSL vhosts

[Malvin]

Public bug reported:

When using Server Name Indication as described in
https://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI the ServerAlias
directive is ignored. This results in both the wrong certificate being
used and the wrong content being sent.

Workaround: Create multiple vhosts with different ServerName directives, one for each hostname.
See http://serverfault.com/questions/377186/apache-namevirtualhost-on-port-443-ignores-serveralias

Still, the expected behaviour as described in the apache wiki is that
both the ServerName and ServerAlias directive should be used to
determine the right vhost to answer a request.


Update: using apache package 2.2.22-1ubuntu1.4 in 12.04 precise.

** Affects: apache2 (Ubuntu)
     Importance: Undecided
         Status: New

** Description changed:

  When using Server Name Indication as described in
  https://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI the ServerAlias
  directive is ignored. This results in both the wrong certificate being
  used and the wrong content being sent.
  
  Workaround: Create multiple vhosts with different ServerName directives, one for each hostname.
  See http://serverfault.com/questions/377186/apache-namevirtualhost-on-port-443-ignores-serveralias
  
  Still, the expected behaviour as described in the apache wiki is that
  both the ServerName and ServerAlias directive should be used to
  determine the right vhost to answer a request.
+ 
+ 
+ Update: using apache package 2.2.22-1ubuntu1.4 in 12.04 precise.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to apache2 in Ubuntu.
https://bugs.launchpad.net/bugs/1210761

Title:
  apache ignores ServerAlias directive when using Server Name Indication
  for SSL vhosts

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/1210761/+subscriptions