FQDN for Home System?

[Larry Lindstrom]

Hi Experts:

I'm having trouble getting Apache/mod-ssl to work with my
self signed certificates:

[warn] RSA server certificate CommonName (CN) `tiamat' does
NOT match server name!?

Tiamat is the name of the host that's running apache/mod-ssl.
I'm wondering if mod-ssl is complaining because I don't have a
FQDN in my "/etc/hosts".

My registered domain name points into my web page at my ISP.

My computers are behind one of those consumer firewall/router/
hubs on a cable modem. The cable company offers only DHCP so I
might have a different IP address next week.

Should I use my registered domain name in "/etc/hosts" like
this?

192.168.0.1 tiamat <domain-name.com> loghost

My registered domain name has no relation to the computers in
my living room, on that cable modem.

Thanks
Larry

[Larry Lindstrom]

Thomas H Jones II wrote:

>
> In article <3F28873C.3E0C591@aracnet.com>,
> Larry Lindstrom <larryl@aracnet.com> wrote:

> >Hi Experts:
> >
> > I'm having trouble getting Apache/mod-ssl to work with my
> >self signed certificates:
> >
> > [warn] RSA server certificate CommonName (CN) `tiamat' does
> > NOT match server name!?

>
> You will get this any time you access a server using one name but the
> certificate holds a different CommonName. When you browse to the SSL
> page, what URL do you put in. If it isn't [url]https://tiamat/[/url], you will
> get that warning message.
>
> -tom
>
> --
>
> "You can only be -so- accurate with a claw-hammer." --me

Thanks Tom:

The error message is being generated when I bring up the Apache
server. I've tried entering my registered domain name in /etc/hosts:

192.168.0.1 tiamat tiamat.<registered domain name> loghost

I've tried to start fresh, with a new ssl key:

$ openssl genrsa -out privkey.pem 2048
Generating RSA private key, 2048 bit long modulus
.................................................. .........................................+++
..............+++
unable to write 'random state'
e is 65537 (0x10001)
$

I've looked at the log of a key I created a couple of weeks ago,
and it also had this warning.

$ openssl version
OpenSSL 0.9.7b 10 Apr 2003
$

Is this problem with the "random state" causing the
failure to start Apache/Mod-ssl.
Suggestions?

This is all a fresh build, mod-ssl and Apache are current.

Thanks
Larry