Re: [webmin-l] Odd SSL issue

[Jamie C. <jca...@we...>]

On 3/May/2007 11:57 Obantec Support wrote ..
> Hi
> 
> i have switched to SSL and a new port above 10000 (99999 is not the real
> value i am using) due to lots of attempts to get access to /etc/shadow
> etc.
> 
> in my /var/webmin/miniserv.error  i see
> 
> [03/May/2007:19:44:40 +0100] [<snipped IP>] Bad Request : This web server
> is 
> running in SSL mode. Try the URL <a 
> href='https://some.domain.net:99999/'>https://some.domain.net:99999/</a>
> instead.<br>
> Failed to initialize SSL connection
> Failed to initialize SSL connection
> Failed to initialize SSL connection
> 
> yet apart from the warning about the self cert. SSL padlock is up.
> 
> do i need to get a full SSL cert or can i assume it is now running in SSL?
> 
> SSL certificate status shows "This CA Root certificate is not trusted 
> because it is not in the Trusted Root Certification Authorities store."

Yes, you are now running in SSL mode. You don't really need to get a proper
signed CA unless you have a lot of users connecting to Webmin, and want
them to be sure that they are really connecting to your server and not
some attacker who has used DNS poisoning to redirect them..

 - Jamie