Wrong Website Showing Over HTTPS

Contents

• Wrong Website Showing Over HTTPS

  • How the Issue Manifests

  • Cause of the Issue

  • How to Resolve

How the Issue Manifests

Navigating to a domain over https://{domain.com} (replacing {domain.com} with the corresponding information) loads the homepage for another website on the server.

Cause of the Issue

The domain does not have an SSL certificate.

When a domain is accessed over https, Apache will check to see if that domain has a :443 section listed in its vhost file. The :443 section is created when an SSL certificate is added to a domain.

If the domain’s vhost does not have a :443 section, Apache will then check the first vhost, alphabetically, on the same IP, which does have a :443 section. If one is found, it will load that domain, instead.

If there are no vhosts on the server with a :443 section, Apache will default to the /var/www/html directory.

This is not a limitation of InterWorx. It is the process in which Apache handles SNI and multiple domains on the same IP address. Detailed information can be found here.

How to Resolve

There are multiple options that may be taken to resolve this issue:

• Create an SSL certificate for the domain

• Enable or run AutoSSL. AutoSSL will automatically create SSL certificates for new domains without SSL certificates that resolve to the server when the daily cron runs each day. This script can also be run, manually

• Move the domain that does not have an SSL certificate to its own, dedicated, IP

• Move the domain that does have an SSL certificate to its own, dedicated, IP

• Remove any redirects that may be in place to automatically redirect the domain to https until an SSL certificate is created for it