Empresas
Empregos
  • Sobre nós
  • Soluções
    • Publicação de vagas
      Publique sua vaga e receba candidatos qualificados em 48h.
    • Avaliações de candidatos
      Mais de 500 testes técnicos e psicológicos, mais anti-fraude.
    • Headhunting
      Busca executiva personalizada do início ao fim.
    • Folha de Pagamento + EOR
      Dispersão de folha e EOR em mais de 15 países da LATAM.
  • Preços
  • Empregos

0

259
Visualizações
I installed SSL certificate in Apache, but weakness scan software show it has a wrong host vulnerabilities

OS:Microsoft Server 2019

Web server:Apache

Frontend: Vue.js

Backend: Laravel

I'm setting port 443 to connect my vue.js project, and set port 9999 to connect laravel project.

When I going to "https://my_domain", it show SSL is valid in front of URL bar.

I use Pentest-tools to scan "https://my_domain", the tools show the website is not have any vulnerability.

But when I using Vooki to scan my laravel API, it show I have a medium vulnerability which is "SSL-certificate wrong host".

where am I doing wrong? why when I go to vue.js using browser, it show I installed CA correct, but laravel API show "wrong host" in Vooki?

This is my httpd-vhosts.conf.

<VirtualHost *:443>
    DocumentRoot "C:\Apache24\htdocs\index"
    ServerName my_domain
    ErrorLog "C:\Apache24\logs\error.log"
    CustomLog "C:\Apache24\logs\access.log" combined
    <Directory "C:\Apache24\htdocs\vue_project_name"> 
        Options Indexes FollowSymLinks
        AllowOverride All
        Require all granted
    </Directory>
    <Directory "C:\Apache24\htdocs\vue_project_name\css"> 
        Options Indexes FollowSymLinks
        AllowOverride All
        Require ip my_ip
    </Directory>
    <Directory "C:\Apache24\htdocs\vue_project_name\js"> 
        Options Indexes FollowSymLinks
        AllowOverride All
        Require ip my_ip
    </Directory>
    SSLEngine on
    SSLProtocol -all +TLSv1.2   
    SSLCertificateKeyFile "C:\Apache24\conf\ssl.key\my_domain.key"
    SSLCertificateFile "C:\Apache24\conf\ssl.crt\my_domain.crt"
    SSLCertificateChainFile "C:\Apache24\conf\DigiCertCA.crt"
</VirtualHost>

<VirtualHost *:9999>
    DocumentRoot "C:\Apache24\htdocs\laravel_project_name\public"
    ServerName my_domain
    ErrorLog "C:\Apache24\logs\error.log"
    CustomLog "C:\Apache24\logs\access.log" combined
    <Directory "C:\Apache24\htdocs\laravel_project_name\public"> 
        Options Indexes FollowSymLinks
        AllowOverride All
        Require ip my_ip
    </Directory>
    SSLEngine on
    SSLProtocol -all +TLSv1.2   
    SSLCertificateKeyFile "C:\Apache24\conf\ssl.key\my_domain.key"
    SSLCertificateFile "C:\Apache24\conf\ssl.crt\my_domain.crt"
    SSLCertificateChainFile "C:\Apache24\conf\DigiCertCA.crt"
</VirtualHost>
over 4 years ago · Santiago Trujillo
1 Respostas
Responde à pergunta

0

try this

ServerName example.com

ServerAlias example.com *.example.com
over 4 years ago · Santiago Trujillo Relatório
Responde à pergunta
Encontrar trabalhos remotos

Descubra a nova forma de encontrar um emprego!

melhores empregos
Principais categorias de trabalho
Empresas
Postar vaga Preços Comercial
Jurídico
Termos e Condições Política de privacidade
© 2026 PeakU Inc. All Rights Reserved.
Andres GPT
Recomende algumas ofertas para mim
Preciso de ajuda