-
Enabling apache-SSL
What files need to be edited to enable apache to work in SSL mode (https), port 443?
thanks in advance,
Jim
-
Junior Member
registered user
hi,
the mod_ssl module is loaded in /etc/apache/httpd.conf so it should be enabled.
other modules, like PHP, server-info & server-status also work fine ...
only problem is that the httpd.conf is write-proteced (linked), so i copied it to alt.conf, edited that file and enabled the modules i wanted and used "apache -f /etc/apache/alt.conf"
i searched around a bit and found this :
http://ist.uwaterloo.ca/security/lib.../howto/ssleay/
it seems you need to install a certificate to enable SSL ??
Goner
-
Originally Posted by
Goner
hi,
the mod_ssl module is loaded in /etc/apache/httpd.conf so it should be enabled.
other modules, like PHP, server-info & server-status also work fine ...
only problem is that the httpd.conf is write-proteced (linked), so i copied it to alt.conf, edited that file and enabled the modules i wanted and used "apache -f /etc/apache/alt.conf"
i searched around a bit and found this :
http://ist.uwaterloo.ca/security/lib.../howto/ssleay/
it seems you need to install a certificate to enable SSL ??
Goner
I tried various other things, including creating a certificate, was not able to get it to work on port 443 using SSL yet.
Jim
-
Ok,
I got it working after this:
I used the (installed) libapache-mod-ssl package to create certificates.
Go to /usr/share/doc/libapache-mod-ssl/examples
Unzip gid-mkcert.sh.gz and run it.
Fill out all the fields, and a bunch of server.* and ca.* files will be created in the current directory.
(remember the pass phrases you use).
Copy the .key files (ca.key and server.key) to /etc/apache/ssl.key
Copy the .crt files (ca.crt and server.crt) to /etc/apache/ssl.crt
Copy the .crs files (ca.crs and server.crs) to /etc/apache/ssl.crs
Add the following to /etc/apache/httpd.conf:
Code:
Listen 80
Listen 443
And:
Code:
<VirtualHost _default_:443>
DocumentRoot /var/www
ServerName My.server.com
ServerAdmin webmaster@my.server.com
ErrorLog /var/log/apache/ssl_error_log
TransferLog /var/log/apache/ssl_access_log
SSLEngine On
SSLCertificateFile /etc/apache/conf/ssl.crt/server.crt
SSLCertificateKeyFile /etc/apache/conf/ssl.key/server.key
<Files ~ "\.(cgi|shtml|php)$">
SSLOptions +StdEnvVars
</Files>
<Directory "/cgi-bin">
SSLOptions +StdEnvVars
</Directory>
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
CustomLog /var/log/apache/ssl_request_log \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>
Restart the httpd server:
Code:
/etc/init.d/apache restart
You will be asked for the RSA pass phrase.
Regards,
IKK
Similar Threads
-
By helios17 in forum General Support
Replies: 1
Last Post: 11-21-2004, 01:11 AM
-
By cul971 in forum General Support
Replies: 2
Last Post: 11-05-2003, 02:05 PM
-
By blackshadow in forum General Support
Replies: 1
Last Post: 06-10-2003, 04:11 PM
-
By dafne in forum Customising & Remastering
Replies: 1
Last Post: 05-23-2003, 12:05 PM
-
By Cyber in forum Customising & Remastering
Replies: 0
Last Post: 12-18-2002, 03:07 PM
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
Vintage Compaq Concerto 2840A Laptop Tablet *PARTS*
$80.00
Vintage Apple Computer Logo Lapel/Hat Pin In Sealed Bag - Made In USA
$99.99
Vintage Atari Planetarium 1520st with SC1224 monitor, computer system
$449.99
NEW Manufacture OLD STYLE Oval 3 Prong Power Cord HP style 125V 7A 875W Vintage
$39.95
Vintage Compaq 141649-004 2 Button PS/2 Gray Mouse M-S34 - FAST SHIPPING - NEW
$8.99
Vintage Logitech Compaq 3 Button Mechanical Ball Scroll Computer Mouse - 6 Pin
$8.99
Vintage Dot Matrix Printer Contin Feed Paper 8.5 x 11. Lots of 5 to 250 sheets.
$4.00
RARE NEW RETAIL BOX VINTAGE AST BTC 5140M WINDOWS PS2 KEYBOARD FCC E5XK8M104M10U
$29.95
Vintage Dell OptiPlex GX280 Intel Pentium 4 @ 3.0GHz 1GB RAM 40 GB HDD No OS
$99.99
Vintage Industrial 1984 Micro Systems - Z80 CPX-BMX Board 128K
$115.00