@H_301_1@我正在运行website,其中结帐流程使用Comodo EV证书进行SSL认证.
@H_301_1@我们还在整个网站上进行了Piwik网站分析跟踪,该网站通过统计子域提供服务.为了防止混合域错误,可以通过HTTPS和HTTP访问Piwik – 对于HTTPS,我们的Piwik子域使用(便宜得多的)Comodo PositiveSSL证书进行认证.
@H_301_1@这是奇怪的部分 – 当通过wget和某些版本的Internet Explorer访问主站点上的HTTPS页面时,stats.psychicbazaar.com证书似乎以某种方式错误地加载,导致IE中出现“不匹配的地址”警告,以及在wget中：
@H_301_1@
ERROR: certificate common name `stats.psychicbazaar.com' doesn't match requested host name `www.psychicbazaar.com'.
$curl -Iv https://www.psychicbazaar.com/shop/checkout
* 最佳答案
# dig stats.psychicbazaar.com
[...]
;; ANSWER SECTION:
stats.psychicbazaar.com. 3600 IN A 178.79.183.162
[...]
# dig www.psychicbazaar.com
[...]
;; ANSWER SECTION:
www.psychicbazaar.com. 3600 IN A 178.79.183.162
[...]
@H_301_1@As a rule,it is impossible to host more than one SSL virtual host on the same IP address and port. This is because Apache needs to know the name of the host in order to choose the correct certificate to setup the encryption layer. But the name of the host being requested is contained only in the HTTP request headers,which are part of the encrypted content. It is therefore not available until after the encryption is already negotiated.
