Wrong Website Displays if Apache SSL is disabled and browser attempts to access using https://

General Discussion
1

Hi guys,
this is somewhat strange.

Virtualmin gpl server is displaying a different client ssl website (https://domain2.com.au) when i disable apache ssl website in virtualmin/edit virtual server domain1.com.au and one attempts to access the correct website using https://domain1.com.au

If i access http://domain1.com.au the correct website displays.

I am not sure whether to categorise this as a major problem or not?

What causes a virtualmin virtual server to do this?

2

Hi,

If SSL isn’t enabled for a website, the “default” website is used for all calls to “https://any-domain-without-ssl-enabled.com”. This is how Apache works by default and is not out of the ordinary.

The reason is simple, you don’t have an SSL configuration for the website, so Apache defaults to one that is configured as it’s sharing the same IP address.