-
Enabling apache-SSL
What files need to be edited to enable apache to work in SSL mode (https), port 443?
thanks in advance,
Jim
-
Junior Member
registered user
hi,
the mod_ssl module is loaded in /etc/apache/httpd.conf so it should be enabled.
other modules, like PHP, server-info & server-status also work fine ...
only problem is that the httpd.conf is write-proteced (linked), so i copied it to alt.conf, edited that file and enabled the modules i wanted and used "apache -f /etc/apache/alt.conf"
i searched around a bit and found this :
http://ist.uwaterloo.ca/security/lib.../howto/ssleay/
it seems you need to install a certificate to enable SSL ??
Goner
-
Originally Posted by
Goner
hi,
the mod_ssl module is loaded in /etc/apache/httpd.conf so it should be enabled.
other modules, like PHP, server-info & server-status also work fine ...
only problem is that the httpd.conf is write-proteced (linked), so i copied it to alt.conf, edited that file and enabled the modules i wanted and used "apache -f /etc/apache/alt.conf"
i searched around a bit and found this :
http://ist.uwaterloo.ca/security/lib.../howto/ssleay/
it seems you need to install a certificate to enable SSL ??
Goner
I tried various other things, including creating a certificate, was not able to get it to work on port 443 using SSL yet.
Jim
-
Ok,
I got it working after this:
I used the (installed) libapache-mod-ssl package to create certificates.
Go to /usr/share/doc/libapache-mod-ssl/examples
Unzip gid-mkcert.sh.gz and run it.
Fill out all the fields, and a bunch of server.* and ca.* files will be created in the current directory.
(remember the pass phrases you use).
Copy the .key files (ca.key and server.key) to /etc/apache/ssl.key
Copy the .crt files (ca.crt and server.crt) to /etc/apache/ssl.crt
Copy the .crs files (ca.crs and server.crs) to /etc/apache/ssl.crs
Add the following to /etc/apache/httpd.conf:
Code:
Listen 80
Listen 443
And:
Code:
<VirtualHost _default_:443>
DocumentRoot /var/www
ServerName My.server.com
ServerAdmin webmaster@my.server.com
ErrorLog /var/log/apache/ssl_error_log
TransferLog /var/log/apache/ssl_access_log
SSLEngine On
SSLCertificateFile /etc/apache/conf/ssl.crt/server.crt
SSLCertificateKeyFile /etc/apache/conf/ssl.key/server.key
<Files ~ "\.(cgi|shtml|php)$">
SSLOptions +StdEnvVars
</Files>
<Directory "/cgi-bin">
SSLOptions +StdEnvVars
</Directory>
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
CustomLog /var/log/apache/ssl_request_log \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>
Restart the httpd server:
Code:
/etc/init.d/apache restart
You will be asked for the RSA pass phrase.
Regards,
IKK
Similar Threads
-
By helios17 in forum General Support
Replies: 1
Last Post: 11-21-2004, 01:11 AM
-
By cul971 in forum General Support
Replies: 2
Last Post: 11-05-2003, 02:05 PM
-
By blackshadow in forum General Support
Replies: 1
Last Post: 06-10-2003, 04:11 PM
-
By dafne in forum Customising & Remastering
Replies: 1
Last Post: 05-23-2003, 12:05 PM
-
By Cyber in forum Customising & Remastering
Replies: 0
Last Post: 12-18-2002, 03:07 PM
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
New Sealed Cisco SFP-10G-LR 10GBASE-LR SFP Plug-in Transceiver Module
$15.00
ARISTA SFP-10G-SR 10GBASE-SR SFP+ Optical Transceiver ModuXVR-00001-02 Lot of 10
$65.35
NEW Genuine ARISTA SFP-10G-LR - 10GBASE-LR XVR-10003-20 Transciever
$49.99
1G/2.5G Dual Port Media Converter SFP, Gigabit SFP Repeater without Transceiver
$15.99
🔥🔥🔥Genuine Cisco SFP-10G-SR V03 10GBASE-SR SFP+ Transceiver 10-2415-03 🔥🔥🔥
$8.00
HP 10Gb SR SFP+ 10GBASE-SR 455885-001 10Gigabit Ethernet Transceiver 456096-001
$6.99
HP 560SFP+ Dual Port 10GB SFP+ Ethernet Adapter Intel X520-DA2 Card 669279-001
$12.99
Mellanox Original MFM1T02A-SR 10GbE 10GBASE-SR SFP+ Transceiver
$9.00
For Cisco SFP-10G-T, Ubiquiti UF-RJ45-10G Transceiver, SFP+ to RJ45 10GBase-T
$46.54
Cisco C3KX-NM-10G 10Gb SFP Network Module for 3750-X / 3560-X - NEW / SEALED
$63.74