[SLE] apache ssl

From: Richard Chamberlain (sunsetandlabrea_at_mac.com)
Date: 01/12/04

  • Next message: Serge Bogaerts: "[SLE] 9.0: Nonfunctioning USB Keyboard"
    To: suse-linux-e@suse.com
    Date: Mon, 12 Jan 2004 22:03:47 +0000
    
    

    Hello,

    We've installed 9.0 professional and then the Apache 1.3.28 package.

    I want to get this working with a self-signed certificate so we
    installed mod_ssl via yast and then attempted to follow various
    instructions on the web. None of these worked.

    The last one I followed was
    http://www.eclectica.ca/howto/ssl-cert-howto.php.

    I'm using webmin to switch on ssl on a virtual server and I then stop
    and restart apache.

    It starts seemingly without error and apache works fine on port 80,
    but nothing is bound to 443 at all.

    apache error_log:

    [Mon Jan 12 17:43:14 2004] [notice] Apache/1.3.28 (Linux/SuSE)
    PHP/4.3.3 mod_ssl/2.8.15 OpenSSL/0.9.7b configured -- resuming normal
    operations
    [Mon Jan 12 17:43:14 2004] [notice] suEXEC mechanism enabled (wrapper:
    /usr/sbin/suexec)
    [Mon Jan 12 17:43:14 2004] [info] Server built: Oct 29 2003 19:51:11
    [Mon Jan 12 17:43:14 2004] [notice] Accept mutex: sysvsem (Default:
    sysvsem)

    ssl_engine_log:

    [12/Jan/2004 17:25:28 03842] [info] Server: Apache/1.3.28, Interface:
    mod_ssl/2.8.15, Library: OpenSSL/0.9.7b
    [12/Jan/2004 17:25:28 03842] [info] Init: 1st startup round (still not
    detached)
    [12/Jan/2004 17:25:28 03842] [info] Init: Initializing OpenSSL library
    [12/Jan/2004 17:25:28 03842] [info] Init: Loading certificate &
    private key of SSL-aware server trinity.jadu.co.uk:443
    [12/Jan/2004 17:25:28 03842] [info] Init: Seeding PRNG with 136 bytes
    of entropy
    [12/Jan/2004 17:25:28 03842] [info] Init: Generating temporary RSA
    private keys (512/1024 bits)
    [12/Jan/2004 17:25:29 03842] [info] Init: Configuring temporary DH
    parameters (512/1024 bits)
    [12/Jan/2004 17:25:30 03843] [info] Init: 2nd startup round (already
    detached)
    [12/Jan/2004 17:25:30 03843] [info] Init: Reinitializing OpenSSL
    library
    [12/Jan/2004 17:25:30 03843] [info] Shared memory session cache
    initialised
    [12/Jan/2004 17:25:30 03843] [info] Init: Seeding PRNG with 136 bytes
    of entropy
    [12/Jan/2004 17:25:30 03843] [info] Init: Configuring temporary RSA
    private keys (512/1024 bits)
    [12/Jan/2004 17:25:30 03843] [info] Init: Configuring temporary DH
    parameters (512/1024 bits)
    [12/Jan/2004 17:25:30 03843] [info] Init: Initializing (virtual)
    servers for SSL
    [12/Jan/2004 17:25:30 03843] [info] Init: Configuring server
    trinity.jadu.co.uk:443 for SSL protocol

    Here's the virtual host from httpd.conf:

    <VirtualHost 192.168.0.14:443>
    DocumentRoot /home/kbcouncil/secure_html
    SSLEngine on
    SSLCertificateFile /home/jadudev/CA/cert.pem
    SSLCertificateKeyFile /home/jadudev/CA/key.pem
    UserDir /home/*/secure_html
    LogLevel info
    </VirtualHost>

    I should mention that although the server is configured as
    trinity.jadu.co.uk it's not actually accessible from that domain, but
    only internally on our network.

    Anybody any hints how I get this working? We've been banging our head
    against it for a couple of days now :-/

    Many thanks,

    Richard

    -- 
    Check the headers for your unsubscription address
    For additional commands send e-mail to suse-linux-e-help@suse.com
    Also check the archives at http://lists.suse.com
    Please read the FAQs: suse-linux-e-faq@suse.com
    

  • Next message: Serge Bogaerts: "[SLE] 9.0: Nonfunctioning USB Keyboard"

    Relevant Pages

    • RE: php4
      ... Mod_php4 only gets loaded if you define SSL. ... Of course I restarted apache after the install... ... # Based upon the NCSA server configuration files originally by Rob McCool. ... Not all browsers support this. ...
      (freebsd-newbies)
    • RE: php4
      ... Mod_php4 only gets loaded if you define SSL. ... Of course I restarted apache after the install... ... # Based upon the NCSA server configuration files originally by Rob McCool. ... Not all browsers support this. ...
      (freebsd-questions)
    • Re: Get remote IP in self-calling script
      ... environment variable contains the IP of the server. ... Post your perl code together with the two form HTML page (the first one, ... And in fact to load a page via ssl, no matter if html or perl, the ... and why apache behaves like this. ...
      (comp.lang.perl.misc)
    • Re: Get remote IP in self-calling script
      ... environment variable contains the IP of the server. ... The remote IP should already be logged, ... And in fact to load a page via ssl, no matter if html or perl, the customers of my ISP have to write the prefix ... and why apache behaves like this. ...
      (comp.lang.perl.misc)
    • Re: apache question
      ... # Based upon the NCSA server configuration files originally by Rob McCool. ... # configuration directives that give the server its instructions. ... Directives that control the operation of the Apache server process as ...
      (alt.php)