Fwd: Re: [olug] Apache and https

[Jon H. Larsen]

I'm trying to remember what I did to get olug.org to listen with SSL, but 
it's been a few months back (May).

Can you connect locally?

lynx https://localhost

Do you see port 443 listening?

netstat -an|grep 443

Does SuSeFirewall2 have a setting for https in the allowed ports?

Sorry if this is the obvious stuff, but I didn't see all of the messages 
on this topic to know if my questions were previously answered.

Jon L.

On Tue, 27 Sep 2005, Craig Wolf wrote:

> Date: Tue, 27 Sep 2005 06:35:01 -0500
> From: Craig Wolf <cjwolf at mpsomaha.org>
> Reply-To: Omaha Linux User Group <olug at olug.org>
> To: olug at olug.org
> Subject: Re: Fwd: Re: [olug] Apache and https
> 
> Yes:
> APACHE_MODULES="access actions alias auth auth_dbm autoindex cgi dir env
> expires include log_config mime negotiation setenvif ssl suexec userdir
> php4"
> 
> Ok, noticed that in one fiel it said make sure you created your
> certificate so I recreated my cert.  Now when you try to hit the
> page/gif, it times out...I am making progress.  Any more ideas?
> 
> Craig Wolf
> Linux Web Server Support
> Desktop/Network Specialist
> 402-894-6283
> 
> >>> relayer at levania.org 09/26/05 7:04 PM >>>
> (coming in late)
> 
> Does your module list have 'ssl' in it?
> 
> /etc/sysconfig/apache2:
> 
> APACHE_MODULES="access actions alias auth auth_dbm autoindex cgi dir env
> 
> expires include log_config mime negotiation setenvif ssl suexec userdir 
> php4 vhost_alias"
> 
> 
> 
> Craig Wolf wrote:
> > Yes: 
> > [Mon Sep 26 14:07:31 2005] [error] [client 205.202.189.64] Invalid
> > method in request \x80g\x01\x03\x01
> > [Mon Sep 26 14:07:31 2005] [error] [client 205.202.189.64] Invalid
> > method in request \x80g\x01\x03
> > 
> > Googling says that SSL is not turned on but from what I can tell, SSL
> > is configured (/etc/apache2/vhosts.d/vhost-ssl.template) but I am not
> > sure how to test if it is on or if there is somewhere else that the
> > "SSLEngine on" option should be set.
> > I wold look in my Apache config book but it is only for Apache 1.x,
> not
> > 2.x.
> > 
> > Craig Wolf
> > Linux Web Server Support
> > Desktop/Network Specialist
> > 402-894-6283
> > 
> > 
> > 
> >>>>tetherow at shwisp.net 9/26/2005 >>>
> > 
> > so it is not answering on 443?  Is it showing anything in the error
> > log? 
> > 
> > sorry, coming into this one late...
> > 
> > 	Sam Tetherow
> > 	Sandhills Wireless
> > 	402-376-4752
> > 
> > 
> > 
> > Craig Wolf wrote:
> > 
> > 
> >>Ok, somewhere we went off-list with this...anyone else??  I have
> > 
> > added
> > 
> >>the  "-D SSL" and "-D SSL_DEFAULT_VHOST" to the start statement but
> >>still no go...any other ideas appreciated!
> >>
> >>Craig Wolf
> >>Linux Web Server Support
> >>Desktop/Network Specialist
> >>402-894-6283
> >>
> >>
> >> 
> >>
> >>
> >>>>>"Daniel Linder" <dan at linder.org> 9/22/2005 >>>
> >>>>>       
> >>>>>
> >>
> >>
> >>-----BEGIN PGP SIGNED MESSAGE-----
> >>Hash: SHA1
> >>
> >>
> >>
> >>On Thu, September 22, 2005 09:40, Craig Wolf wrote:
> >>
> >> 
> >>
> >>
> >>>Log file info:
> >>>   
> >>>
> >>
> >> 
> >>
> >>
> >>>[Thu Sep 22 09:17:11 2005] [error] [client 205.202.189.64] Invalid
> >>>   
> >>>
> >>
> >> 
> >>
> >>
> >>>method in request \x80g\x01\x03
> >>>   
> >>>
> >>
> >> 
> >>
> >>
> >>>link: https://www.mpsfoundation.org/images/f-header.gif 
> >>>   
> >>>
> >>
> >> 
> >>
> >>
> >> 
> >>
> >>
> >>>What a concept...logfile.  Ok some searching on that presents
> >>>   
> >>>
> >>
> >>itself
> >>
> >> 
> >>
> >>
> >>>that SSLEngine is not on.  Where/what file do I add that to?
> >>>   
> >>>
> >>
> >>
> >>
> >>On my Gentoo system, it's under
> >>"/etc/apache2/modules.d/41_mod_ssl.default-vhost.conf".  If
> >>you can't find it there, you can try going to the /etc directory and
> >>running:
> >>
> >> egrep -irl sslengine .
> >>
> >>and that will spit the file names where "sslengine" (ignoring
> >>case) are found.
> >>
> >>
> >>
> >>You might also need the "-D SSL" option in the
> >>/etc/conf.d/apache2 file.  Here is mine:
> >>
> >>APACHE2_OPTS="-D DEFAULT_VHOST -D SSL -D PHP4 -D SSL_DEFAULT_VHOST -D
> >>USERDIR"
> >>
> >>
> >>
> >>With Apache2 you need both the "-D SSL" and "-D
> >>SSL_DEFAULT_VHOST" if you need the Virtual Hosts to do SSL.
> >>
> >>
> >>
> >>Dan
> >>
> 
> 
> 

-- 
Jon H. Larsen  - relayer -at- levania -dot- org
Omaha Linux Users Group - http://www.olug.org/
AnimeSunday.org - http://www.animesunday.org/
ICQ#: 10412618 - http://www.levania.org/~relayer/
GPG/PGP Pubkey - http://www.levania.org/~relayer/relayerpubkey.txt