SSL by Domain Name Error

SSL by Domain Name Error

am 14.06.2007 17:07:41 von Rob Archer

This is a multi-part message in MIME format.

------_=_NextPart_001_01C7AE95.C10443EE
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Apache 2.2.4 Windows 2000 Server=20
=20
Have created the key through open ssl and configured apache (using
http://raibledesigns.com/wiki/Wiki.jsp?page=3DApacheSSL instructions) and
can access https via the IP address of the web server but not the domain
name. When trying to get the to the webserver via the domain name
through https it says internet explorer cannot display this web page.
Using the normal http protocol I can get the "It Works" page through
both IP address and domain name.
=20
Have tried to get around this by fiddling about with the virtual hosts
settings but haven't found any solution. Can anyone help !!!


Any opinions expressed in this email are those of the individual and not ne=
cessarily the Company. This email and any files transmitted with it are con=
fidential and solely for use by the intended recipient(s). It may contain m=
aterial protected by Statutory or Regulatory Law. If you are not the intend=
ed recipient or the person responsible for delivering to the intended recip=
ient, you have received this email in error and its use is strictly prohibi=
ted. If you have received it in error please notify our Network Administrat=
or.

Although this email and any attachments are believed to be free of any viru=
s, or any other defect which might affect any computer or IT system into wh=
ich they are received and opened, it is the responsibility of the recipient=
to ensure that they are virus free and no responsibility is accepted by Re=
tainagroup Ltd for any loss or damage arising in any way from receipt or us=
e thereof.

Company Registered in England No. 3164074. Registered Address: Unit 5, St.=
John's Court, Foster Road, Ashford Business Park, Ashford, Kent. TN24 0SJ.

(Tech Email: exadmin@retainagroup.co.uk, Tech No.01233 333104, Main No. =
01233 333000)=20

This message has been scanned for viruses by BlackSpider MailControl

------_=_NextPart_001_01C7AE95.C10443EE
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable


Message




Apache 2.=
2.4 Windows=20
2000 Server

size=3D2> 

Have crea=
ted the key=20
through open ssl and configured apache (using href=3D"http://raibledesigns.com/wiki/Wiki.jsp?page=3DApache SSL">http://rai=
bledesigns.com/wiki/Wiki.jsp?page=3DApacheSSL instructions)=20
and

can acces=
s https via=20
the IP address of the web server but not the domain name. When trying to ge=
t the=20
to the webserver via the domain name through https it says internet explore=
r=20
cannot display this web page. Using the normal http protocol I can get the =
"It=20
Works" page through both IP address and domain name.
class=3D292045014-14062007>

size=3D2> 

Have trie=
d to get=20
around this by fiddling about with the virtual hosts settings but haven't f=
ound=20
any solution. Can anyone help !!!




Any opinions expressed in this email are those of the ind=
ividual and not necessarily the Company. This email and any files transmitt=
ed with it are confidential and solely for use by the intended recipient(s)=
.. It may contain material protected by Statutory or Regulatory Law. If you =
are not the intended recipient or the person responsible for delivering to =
the intended recipient, you have received this email in error and its use i=
s strictly prohibited. If you have received it in error please notify our N=
etwork Administrator.


Altho=
ugh this email and any attachments are believed to be free of any virus, or=
any other defect which might affect any computer or IT system into which t=
hey are received and opened, it is the responsibility of the recipient to e=
nsure that they are virus free and no responsibility is accepted by Retaina=
group Ltd for any loss or damage arising in any way from receipt or use the=
reof.


Compa=
ny Registered in England No. 3164074.  Registered Address: Unit 5, St.=
John's Court, Foster Road, Ashford Business Park, Ashford, Kent. TN24 0SJ.=


(Tech Email: ">exadmin@retainagroup.co.uk,  Tech No.01233 333104,  &n=
bsp;Main No. 01233 333000)


>This message has been scanned for viruses by blackspider.com/"> size=3D2>BlackSpider MailControl




------_=_NextPart_001_01C7AE95.C10443EE--
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

RE: SSL by Domain Name Error

am 18.06.2007 10:47:34 von Rob Archer

This is a multi-part message in MIME format.

------_=_NextPart_001_01C7B185.50C49872
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Anybody have any suggestions ?

-----Original Message-----
From: Rob Archer=20
Sent: 14 June 2007 16:08
To: 'modssl-users@modssl.org'
Subject: SSL by Domain Name Error
=09
=09
=09
Apache 2.2.4 Windows 2000 Server=20

Have created the key through open ssl and configured apache
(using http://raibledesigns.com/wiki/Wiki.jsp?page=3DApacheSSL
instructions) and
can access https via the IP address of the web server but not
the domain name. When trying to get the to the webserver via the domain
name through https it says internet explorer cannot display this web
page. Using the normal http protocol I can get the "It Works" page
through both IP address and domain name.

Have tried to get around this by fiddling about with the virtual
hosts settings but haven't found any solution. Can anyone help !!!



Any opinions expressed in this email are those of the individual and not ne=
cessarily the Company. This email and any files transmitted with it are con=
fidential and solely for use by the intended recipient(s). It may contain m=
aterial protected by Statutory or Regulatory Law. If you are not the intend=
ed recipient or the person responsible for delivering to the intended recip=
ient, you have received this email in error and its use is strictly prohibi=
ted. If you have received it in error please notify our Network Administrat=
or.

Although this email and any attachments are believed to be free of any viru=
s, or any other defect which might affect any computer or IT system into wh=
ich they are received and opened, it is the responsibility of the recipient=
to ensure that they are virus free and no responsibility is accepted by Re=
tainagroup Ltd for any loss or damage arising in any way from receipt or us=
e thereof.

Company Registered in England No. 3164074. Registered Address: Unit 5, St.=
John's Court, Foster Road, Ashford Business Park, Ashford, Kent. TN24 0SJ.

(Tech Email: exadmin@retainagroup.co.uk, Tech No.01233 333104, Main No. =
01233 333000)=20

This message has been scanned for viruses by BlackSpider MailControl

------_=_NextPart_001_01C7B185.50C49872
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable


Message



class=3D913444608-18062007>Anybody have any suggestions ? V>


NT=20
face=3DTahoma size=3D2>-----Original Message-----
From: Rob Arc=
her=20

Sent: 14 June 2007 16:08
To:=20
'modssl-users@modssl.org'
Subject: SSL by Domain Name=20
Error



Apache =
2.2.4=20
Windows 2000 Server

size=3D2> 

Have cr=
eated the=20
key through open ssl and configured apache (using href=3D"http://raibledesigns.com/wiki/Wiki.jsp?page=3DApache SSL">http://r=
aibledesigns.com/wiki/Wiki.jsp?page=3DApacheSSL instructions)=20
and

can acc=
ess https=20
via the IP address of the web server but not the domain name. When trying=
to=20
get the to the webserver via the domain name through https it says intern=
et=20
explorer cannot display this web page. Using the normal http protocol I c=
an=20
get the "It Works" page through both IP address and domain=20
name.

size=3D2> 

Have tr=
ied to get=20
around this by fiddling about with the virtual hosts settings but haven't=
=20
found any solution. Can anyone help=20
!!!




Any opinions expressed in this email are those of the ind=
ividual and not necessarily the Company. This email and any files transmitt=
ed with it are confidential and solely for use by the intended recipient(s)=
.. It may contain material protected by Statutory or Regulatory Law. If you =
are not the intended recipient or the person responsible for delivering to =
the intended recipient, you have received this email in error and its use i=
s strictly prohibited. If you have received it in error please notify our N=
etwork Administrator.


Altho=
ugh this email and any attachments are believed to be free of any virus, or=
any other defect which might affect any computer or IT system into which t=
hey are received and opened, it is the responsibility of the recipient to e=
nsure that they are virus free and no responsibility is accepted by Retaina=
group Ltd for any loss or damage arising in any way from receipt or use the=
reof.


Compa=
ny Registered in England No. 3164074.  Registered Address: Unit 5, St.=
John's Court, Foster Road, Ashford Business Park, Ashford, Kent. TN24 0SJ.=


(Tech Email: ">exadmin@retainagroup.co.uk,  Tech No.01233 333104,  &n=
bsp;Main No. 01233 333000)


>This message has been scanned for viruses by blackspider.com/"> size=3D2>BlackSpider MailControl




------_=_NextPart_001_01C7B185.50C49872--
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: SSL by Domain Name Error

am 18.06.2007 17:12:48 von ohannet

Rob Archer wrote:
> Anybody have any suggestions ?

> Have created the key through open ssl and configured apache (using
> http://raibledesigns.com/wiki/Wiki.jsp?page=ApacheSSL instructions) and
> can access https via the IP address of the web server but not the
> domain name. When trying to get the to the webserver via the domain
> name through https it says internet explorer cannot display this web
> page. Using the normal http protocol I can get the "It Works" page
> through both IP address and domain name.
>
> Have tried to get around this by fiddling about with the virtual
> hosts settings but haven't found any solution. Can anyone help !!!

You might try adding a NameVirtualHost directive:

NameVirtualHost 1.2.3.4:443

(Your own IP address in place of '1.2.3.4'.)

If that doesn't help, please show us the block for
this domain in your current Apache configuration.

--
Omar W. Hannet
http://www.allez-oop.net/
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

RE: SSL by Domain Name Error

am 18.06.2007 17:47:52 von Rob Archer

Thanks for the response, I'm using the following in the httpd.conf
file:-


SSLMutex default
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
SSLSessionCache none
ErrorLog logs/ssl.log
LogLevel info



SSLEngine On
SSLCertificateFile conf/ssl/server.crt
SSLCertificateKeyFile conf/ssl/server.key



-----Original Message-----
From: owner-modssl-users@modssl.org
[mailto:owner-modssl-users@modssl.org] On Behalf Of Omar W. Hannet
Sent: 18 June 2007 16:13
To: modssl-users@modssl.org
Subject: Re: SSL by Domain Name Error


Rob Archer wrote:
> Anybody have any suggestions ?

> Have created the key through open ssl and configured apache (using
> http://raibledesigns.com/wiki/Wiki.jsp?page=3DApacheSSL
instructions) and
> can access https via the IP address of the web server but not the
> domain name. When trying to get the to the webserver via the
domain
> name through https it says internet explorer cannot display this
web
> page. Using the normal http protocol I can get the "It Works" page
> through both IP address and domain name.
>
> Have tried to get around this by fiddling about with the virtual
> hosts settings but haven't found any solution. Can anyone help !!!

You might try adding a NameVirtualHost directive:

NameVirtualHost 1.2.3.4:443

(Your own IP address in place of '1.2.3.4'.)

If that doesn't help, please show us the block for this
domain in your current Apache configuration.

--=20
Omar W. Hannet
http://www.allez-oop.net/
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org


Click
https://www.mailcontrol.com/sr/wQw0zmjPoHdJTZGyOCrrhg==
fMgBK8DIcc6MewdBLPY6HM3uCsIoIfWJQ!0Y2VdZHSsmugCwvzzwfe946vzF omHzKSVMo!xh
LH2GhBuaixmbErtfYMN4HkbPTCJC6Pv3JUYJ7cQJe9p9qcDVg+Z43dzgaPp! JI8EBMOY08Pc
LiPsL1wg48Tzt71za7Vke8vo28dsU9mY8+kaYom to report this email as spam.
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: SSL by Domain Name Error

am 18.06.2007 18:05:49 von ohannet

What's the result when you set ServerName to your domain
name within the virtual host?:


ServerName example.com
SSLEngine On
SSLCertificateFile conf/ssl/server.crt
SSLCertificateKeyFile conf/ssl/server.key


Rob Archer wrote:
> Thanks for the response, I'm using the following in the httpd.conf
> file:-
>
>
> SSLMutex default
> SSLRandomSeed startup builtin
> SSLRandomSeed connect builtin
> SSLSessionCache none
> ErrorLog logs/ssl.log
> LogLevel info
>

>
>
> SSLEngine On
> SSLCertificateFile conf/ssl/server.crt
> SSLCertificateKeyFile conf/ssl/server.key
>

>
>
> -----Original Message-----
> From: owner-modssl-users@modssl.org
> [mailto:owner-modssl-users@modssl.org] On Behalf Of Omar W. Hannet
> Sent: 18 June 2007 16:13
> To: modssl-users@modssl.org
> Subject: Re: SSL by Domain Name Error
>
>
> Rob Archer wrote:
>> Anybody have any suggestions ?
>
>> Have created the key through open ssl and configured apache (using
>> http://raibledesigns.com/wiki/Wiki.jsp?page=ApacheSSL
> instructions) and
>> can access https via the IP address of the web server but not the
>> domain name. When trying to get the to the webserver via the
> domain
>> name through https it says internet explorer cannot display this
> web
>> page. Using the normal http protocol I can get the "It Works" page
>> through both IP address and domain name.
>>
>> Have tried to get around this by fiddling about with the virtual
>> hosts settings but haven't found any solution. Can anyone help !!!
>
> You might try adding a NameVirtualHost directive:
>
> NameVirtualHost 1.2.3.4:443
>
> (Your own IP address in place of '1.2.3.4'.)
>
> If that doesn't help, please show us the block for this
> domain in your current Apache configuration.
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

RE: SSL by Domain Name Error

am 18.06.2007 18:30:03 von Rob Archer

Unfortunately exactly the same, I've even put the domain name as the
virtual host and it behaves the same !!!

(i.e )

I was thinking that the way the web server is set up is by "web
forwarding", where the holders of our domain name forward requests onto
the ip address of our web server. This works for http, could it be
possible that something needs configuring at the company that holds our
domain name (easily.co.uk) to forward on https requests, or is that a
real long shot ?



-----Original Message-----
From: owner-modssl-users@modssl.org
[mailto:owner-modssl-users@modssl.org] On Behalf Of Omar W. Hannet
Sent: 18 June 2007 17:06
To: modssl-users@modssl.org
Subject: Re: SSL by Domain Name Error


What's the result when you set ServerName to your domain
name within the virtual host?:


ServerName example.com
SSLEngine On
SSLCertificateFile conf/ssl/server.crt
SSLCertificateKeyFile conf/ssl/server.key


Rob Archer wrote:
> Thanks for the response, I'm using the following in the httpd.conf
> file:-
>=20
>
> SSLMutex default
> SSLRandomSeed startup builtin
> SSLRandomSeed connect builtin
> SSLSessionCache none
> ErrorLog logs/ssl.log
> LogLevel info
>

>=20
>
> SSLEngine On
> SSLCertificateFile conf/ssl/server.crt
> SSLCertificateKeyFile conf/ssl/server.key
>

>=20
>=20
> -----Original Message-----
> From: owner-modssl-users@modssl.org=20
> [mailto:owner-modssl-users@modssl.org] On Behalf Of Omar W. Hannet
> Sent: 18 June 2007 16:13
> To: modssl-users@modssl.org
> Subject: Re: SSL by Domain Name Error
>=20
>=20
> Rob Archer wrote:
>> Anybody have any suggestions ?
>=20
>> Have created the key through open ssl and configured apache
(using
>> http://raibledesigns.com/wiki/Wiki.jsp?page=3DApacheSSL
> instructions) and
>> can access https via the IP address of the web server but not the
>> domain name. When trying to get the to the webserver via the
> domain
>> name through https it says internet explorer cannot display this
> web
>> page. Using the normal http protocol I can get the "It Works"
page
>> through both IP address and domain name.
>>
>> Have tried to get around this by fiddling about with the virtual
>> hosts settings but haven't found any solution. Can anyone help=20
>> !!!
>=20
> You might try adding a NameVirtualHost directive:
>=20
> NameVirtualHost 1.2.3.4:443
>=20
> (Your own IP address in place of '1.2.3.4'.)
>=20
> If that doesn't help, please show us the block for this=20
> domain in your current Apache configuration.
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org


Click
https://www.mailcontrol.com/sr/wQw0zmjPoHdJTZGyOCrrhg==
1zjrSD8hWEe96repmpaOSdLMvmLORniQDfYJTSjBfD!nkU9R0u8dlLFoNT85 Zo6jf9yegQzk
pg9iGvxGJKsNeMk8vpdiUWF8qBDGGfaGgdaAcnXV!xUKnI0XzkSD3mUR0s5m D0+fIpcaD4yO
5vBMHXJE1FQ0bouh7TVke8vo28dsfWWo4QK!9LC to report this email as spam.
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Ref : RE: SSL by Domain Name Error

am 19.06.2007 09:47:28 von abel.nivault

Virutal host name based doesn't work with ssl mod
you must configure ssl with ip based virtual hosts


Abel NIVAULT
Inspecteur PSE- PSN-CT - CSI LYON
abel.nivault@dgi.finances.gouv.fr




"Rob Archer"
Envoy=E9 par : owner-modssl-users@modssl.org
18/06/2007 18:30
Veuillez r=E9pondre =E0 modssl-users

=20
Pour :
cc :=20
Objet : RE: SSL by Domain Name Error


Unfortunately exactly the same, I've even put the domain name as the
virtual host and it behaves the same !!!

(i.e )

I was thinking that the way the web server is set up is by "web
forwarding", where the holders of our domain name forward requests onto
the ip address of our web server. This works for http, could it be
possible that something needs configuring at the company that holds our
domain name (easily.co.uk) to forward on https requests, or is that a
real long shot ?



-----Original Message-----
From: owner-modssl-users@modssl.org
[mailto:owner-modssl-users@modssl.org] On Behalf Of Omar W. Hannet
Sent: 18 June 2007 17:06
To: modssl-users@modssl.org
Subject: Re: SSL by Domain Name Error


What's the result when you set ServerName to your domain
name within the virtual host?:


ServerName example.com
SSLEngine On
SSLCertificateFile conf/ssl/server.crt
SSLCertificateKeyFile conf/ssl/server.key


Rob Archer wrote:
> Thanks for the response, I'm using the following in the httpd.conf
> file:-
>=20
>
> SSLMutex default
> SSLRandomSeed startup builtin
> SSLRandomSeed connect builtin
> SSLSessionCache none
> ErrorLog logs/ssl.log
> LogLevel info
>

>=20
>
> SSLEngine On
> SSLCertificateFile conf/ssl/server.crt
> SSLCertificateKeyFile conf/ssl/server.key
>

>=20
>=20
> -----Original Message-----
> From: owner-modssl-users@modssl.org=20
> [mailto:owner-modssl-users@modssl.org] On Behalf Of Omar W. Hannet
> Sent: 18 June 2007 16:13
> To: modssl-users@modssl.org
> Subject: Re: SSL by Domain Name Error
>=20
>=20
> Rob Archer wrote:
>> Anybody have any suggestions ?
>=20
>> Have created the key through open ssl and configured apache
(using
>> http://raibledesigns.com/wiki/Wiki.jsp?page=3DApacheSSL
> instructions) and
>> can access https via the IP address of the web server but not the
>> domain name. When trying to get the to the webserver via the
> domain
>> name through https it says internet explorer cannot display this
> web
>> page. Using the normal http protocol I can get the "It Works"
page
>> through both IP address and domain name.
>>=20
>> Have tried to get around this by fiddling about with the virtual
>> hosts settings but haven't found any solution. Can anyone help=20
>> !!!
>=20
> You might try adding a NameVirtualHost directive:
>=20
> NameVirtualHost 1.2.3.4:443
>=20
> (Your own IP address in place of '1.2.3.4'.)
>=20
> If that doesn't help, please show us the block for this=20
> domain in your current Apache configuration.
____________________ ____=5F=
____________________ ____=5F=
____________________
Apache Interface to OpenSSL (mod=5Fssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org


Click
https://www.mailcontrol.com/sr/wQw0zmjPoHdJTZGyOCrrhg==
1zjrSD8hWEe96repmpaOSdLMvmLORniQDfYJTSjBfD!nkU9R0u8dlLFoNT85 Zo6jf9yegQzk
pg9iGvxGJKsNeMk8vpdiUWF8qBDGGfaGgdaAcnXV!xUKnI0XzkSD3mUR0s5m D0+fIpcaD4yO
5vBMHXJE1FQ0bouh7TVke8vo28dsfWWo4QK!9LC to report this email as spam.
____________________ ____=5F=
____________________ ____=5F=
____________________
Apache Interface to OpenSSL (mod=5Fssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org



____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

RE: Ref : RE: SSL by Domain Name Error

am 19.06.2007 10:08:11 von Rob Archer

I read this on other posts, so does that mean I'll never be able to configu=
re my apache set up to be accessed like this :-

https:\\www.mydomain.com


-----Original Message-----
From: owner-modssl-users@modssl.org [mailto:owner-modssl-users@modssl.org] =
On Behalf Of abel.nivault@dgi.finances.gouv.fr
Sent: 19 June 2007 08:47
To: modssl-users@modssl.org
Cc: modssl-users@modssl.org; owner-modssl-users@modssl.org
Subject: Ref : RE: SSL by Domain Name Error


Virutal host name based doesn't work with ssl mod
you must configure ssl with ip based virtual hosts


Abel NIVAULT
Inspecteur PSE- PSN-CT - CSI LYON abel.nivault@dgi.finances.gouv.fr




"Rob Archer"
Envoy=E9 par : owner-modssl-users@modssl.org
18/06/2007 18:30
Veuillez r=E9pondre =E0 modssl-users

=20
Pour :
cc :=20
Objet : RE: SSL by Domain Name Error


Unfortunately exactly the same, I've even put the domain name as the virtua=
l host and it behaves the same !!!

(i.e )

I was thinking that the way the web server is set up is by "web forwarding"=
, where the holders of our domain name forward requests onto the ip address=
of our web server. This works for http, could it be possible that somethin=
g needs configuring at the company that holds our domain name (easily.co.uk=
) to forward on https requests, or is that a real long shot ?



-----Original Message-----
From: owner-modssl-users@modssl.org [mailto:owner-modssl-users@modssl.org] =
On Behalf Of Omar W. Hannet
Sent: 18 June 2007 17:06
To: modssl-users@modssl.org
Subject: Re: SSL by Domain Name Error


What's the result when you set ServerName to your domain
name within the virtual host?:


ServerName example.com
SSLEngine On
SSLCertificateFile conf/ssl/server.crt
SSLCertificateKeyFile conf/ssl/server.key


Rob Archer wrote:
> Thanks for the response, I'm using the following in the httpd.conf
> file:-
>=20
>
> SSLMutex default
> SSLRandomSeed startup builtin
> SSLRandomSeed connect builtin
> SSLSessionCache none
> ErrorLog logs/ssl.log
> LogLevel info
>

>=20
>
> SSLEngine On
> SSLCertificateFile conf/ssl/server.crt
> SSLCertificateKeyFile conf/ssl/server.key
>

>=20
>=20
> -----Original Message-----
> From: owner-modssl-users@modssl.org
> [mailto:owner-modssl-users@modssl.org] On Behalf Of Omar W. Hannet
> Sent: 18 June 2007 16:13
> To: modssl-users@modssl.org
> Subject: Re: SSL by Domain Name Error
>=20
>=20
> Rob Archer wrote:
>> Anybody have any suggestions ?
>=20
>> Have created the key through open ssl and configured apache
(using
>> http://raibledesigns.com/wiki/Wiki.jsp?page=3DApacheSSL
> instructions) and
>> can access https via the IP address of the web server but not the
>> domain name. When trying to get the to the webserver via the
> domain
>> name through https it says internet explorer cannot display this
> web
>> page. Using the normal http protocol I can get the "It Works"
page
>> through both IP address and domain name.
>>=20
>> Have tried to get around this by fiddling about with the virtual
>> hosts settings but haven't found any solution. Can anyone help
>> !!!
>=20
> You might try adding a NameVirtualHost directive:
>=20
> NameVirtualHost 1.2.3.4:443
>=20
> (Your own IP address in place of '1.2.3.4'.)
>=20
> If that doesn't help, please show us the block for this
> domain in your current Apache configuration.
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org


Click
https://www.mailcontrol.com/sr/wQw0zmjPoHdJTZGyOCrrhg==
1zjrSD8hWEe96repmpaOSdLMvmLORniQDfYJTSjBfD!nkU9R0u8dlLFoNT85 Zo6jf9yegQzk
pg9iGvxGJKsNeMk8vpdiUWF8qBDGGfaGgdaAcnXV!xUKnI0XzkSD3mUR0s5m D0+fIpcaD4yO
5vBMHXJE1FQ0bouh7TVke8vo28dsfWWo4QK!9LC to report this email as spam. ____=
____________________________________________________________ ______
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org



____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Ref : RE: Ref : RE: SSL by Domain Name Error

am 19.06.2007 10:52:31 von abel.nivault

No, you speak here about the url to access your web server.=20
What I ment is : when you configure your virtual host in httpd.conf, if=20
you want it to run in https mod, you have to set up the virtual host=20
directive with an IP an not with a host name:


ServerName example.com
SSLEngine On
SSLCertificateFile conf/ssl/server.crt
SSLCertificateKeyFile conf/ssl/server.key


will work


ServerName example.com
SSLEngine On
SSLCertificateFile conf/ssl/server.crt
SSLCertificateKeyFile conf/ssl/server.key


will not

Abel NIVAULT
Inspecteur PSE- PSN-CT - CSI LYON
abel.nivault@dgi.finances.gouv.fr




"Rob Archer"
Envoy=E9 par : owner-modssl-users@modssl.org
19/06/2007 10:08
Veuillez r=E9pondre =E0 modssl-users

=20
Pour :
cc :=20
Objet : RE: Ref : RE: SSL by Domain Name Error


I read this on other posts, so does that mean I'll never be able to=20
configure my apache set up to be accessed like this :-

https:\\www.mydomain.com


-----Original Message-----
From: owner-modssl-users@modssl.org [mailto:owner-modssl-users@modssl.org] =

On Behalf Of abel.nivault@dgi.finances.gouv.fr
Sent: 19 June 2007 08:47
To: modssl-users@modssl.org
Cc: modssl-users@modssl.org; owner-modssl-users@modssl.org
Subject: Ref : RE: SSL by Domain Name Error


Virutal host name based doesn't work with ssl mod
you must configure ssl with ip based virtual hosts


Abel NIVAULT
Inspecteur PSE- PSN-CT - CSI LYON abel.nivault@dgi.finances.gouv.fr




"Rob Archer"
Envoy=E9 par : owner-modssl-users@modssl.org
18/06/2007 18:30
Veuillez r=E9pondre =E0 modssl-users

=20
Pour :
cc :=20
Objet : RE: SSL by Domain Name Error


Unfortunately exactly the same, I've even put the domain name as the=20
virtual host and it behaves the same !!!

(i.e )

I was thinking that the way the web server is set up is by "web=20
forwarding", where the holders of our domain name forward requests onto=20
the ip address of our web server. This works for http, could it be=20
possible that something needs configuring at the company that holds our=20
domain name (easily.co.uk) to forward on https requests, or is that a real =

long shot ?



-----Original Message-----
From: owner-modssl-users@modssl.org [mailto:owner-modssl-users@modssl.org] =

On Behalf Of Omar W. Hannet
Sent: 18 June 2007 17:06
To: modssl-users@modssl.org
Subject: Re: SSL by Domain Name Error


What's the result when you set ServerName to your domain
name within the virtual host?:


ServerName example.com
SSLEngine On
SSLCertificateFile conf/ssl/server.crt
SSLCertificateKeyFile conf/ssl/server.key


Rob Archer wrote:
> Thanks for the response, I'm using the following in the httpd.conf
> file:-
>=20
>
> SSLMutex default
> SSLRandomSeed startup builtin
> SSLRandomSeed connect builtin
> SSLSessionCache none
> ErrorLog logs/ssl.log
> LogLevel info
>

>=20
>
> SSLEngine On
> SSLCertificateFile conf/ssl/server.crt
> SSLCertificateKeyFile conf/ssl/server.key
>

>=20
>=20
> -----Original Message-----
> From: owner-modssl-users@modssl.org
> [mailto:owner-modssl-users@modssl.org] On Behalf Of Omar W. Hannet
> Sent: 18 June 2007 16:13
> To: modssl-users@modssl.org
> Subject: Re: SSL by Domain Name Error
>=20
>=20
> Rob Archer wrote:
>> Anybody have any suggestions ?
>=20
>> Have created the key through open ssl and configured apache
(using
>> http://raibledesigns.com/wiki/Wiki.jsp?page=3DApacheSSL
> instructions) and
>> can access https via the IP address of the web server but not the
>> domain name. When trying to get the to the webserver via the
> domain
>> name through https it says internet explorer cannot display this
> web
>> page. Using the normal http protocol I can get the "It Works"
page
>> through both IP address and domain name.
>>=20
>> Have tried to get around this by fiddling about with the virtual
>> hosts settings but haven't found any solution. Can anyone help
>> !!!
>=20
> You might try adding a NameVirtualHost directive:
>=20
> NameVirtualHost 1.2.3.4:443
>=20
> (Your own IP address in place of '1.2.3.4'.)
>=20
> If that doesn't help, please show us the block for this
> domain in your current Apache configuration.
____________________ ____=5F=
____________________ ____=5F=
____________________
Apache Interface to OpenSSL (mod=5Fssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org


Click
https://www.mailcontrol.com/sr/wQw0zmjPoHdJTZGyOCrrhg==
1zjrSD8hWEe96repmpaOSdLMvmLORniQDfYJTSjBfD!nkU9R0u8dlLFoNT85 Zo6jf9yegQzk
pg9iGvxGJKsNeMk8vpdiUWF8qBDGGfaGgdaAcnXV!xUKnI0XzkSD3mUR0s5m D0+fIpcaD4yO
5vBMHXJE1FQ0bouh7TVke8vo28dsfWWo4QK!9LC to report this email as spam.=20
____________________ ____=5F=
____________________ ____=5F=
____________________
Apache Interface to OpenSSL (mod=5Fssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org



____________________ ____=5F=
____________________ ____=5F=
____________________
Apache Interface to OpenSSL (mod=5Fssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org
____________________ ____=5F=
____________________ ____=5F=
____________________
Apache Interface to OpenSSL (mod=5Fssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org



____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

RE: Ref : RE: Ref : RE: SSL by Domain Name Error

am 19.06.2007 11:05:46 von Rob Archer


ServerName example.com
SSLEngine On
SSLCertificateFile conf/ssl/server.crt
SSLCertificateKeyFile conf/ssl/server.key


This is exactly how I've got it set up and unfortunately I can't use SSL th=
rough my domain name (https://www.mydomain.com) but can access it via my ip=
address (https://1.2.3.4).


-----Original Message-----
From: owner-modssl-users@modssl.org [mailto:owner-modssl-users@modssl.org] =
On Behalf Of abel.nivault@dgi.finances.gouv.fr
Sent: 19 June 2007 09:53
To: modssl-users@modssl.org
Subject: Ref : RE: Ref : RE: SSL by Domain Name Error


No, you speak here about the url to access your web server.=20
What I ment is : when you configure your virtual host in httpd.conf, if=20
you want it to run in https mod, you have to set up the virtual host=20
directive with an IP an not with a host name:


ServerName example.com
SSLEngine On
SSLCertificateFile conf/ssl/server.crt
SSLCertificateKeyFile conf/ssl/server.key


will work


ServerName example.com
SSLEngine On
SSLCertificateFile conf/ssl/server.crt
SSLCertificateKeyFile conf/ssl/server.key


will not

Abel NIVAULT
Inspecteur PSE- PSN-CT - CSI LYON abel.nivault@dgi.finances.gouv.fr




"Rob Archer"
Envoy=E9 par : owner-modssl-users@modssl.org
19/06/2007 10:08
Veuillez r=E9pondre =E0 modssl-users

=20
Pour :
cc :=20
Objet : RE: Ref : RE: SSL by Domain Name Error


I read this on other posts, so does that mean I'll never be able to=20
configure my apache set up to be accessed like this :-

https:\\www.mydomain.com


-----Original Message-----
From: owner-modssl-users@modssl.org [mailto:owner-modssl-users@modssl.org]=
=20
On Behalf Of abel.nivault@dgi.finances.gouv.fr
Sent: 19 June 2007 08:47
To: modssl-users@modssl.org
Cc: modssl-users@modssl.org; owner-modssl-users@modssl.org
Subject: Ref : RE: SSL by Domain Name Error


Virutal host name based doesn't work with ssl mod
you must configure ssl with ip based virtual hosts


Abel NIVAULT
Inspecteur PSE- PSN-CT - CSI LYON abel.nivault@dgi.finances.gouv.fr




"Rob Archer"
Envoy=E9 par : owner-modssl-users@modssl.org
18/06/2007 18:30
Veuillez r=E9pondre =E0 modssl-users

=20
Pour :
cc :=20
Objet : RE: SSL by Domain Name Error


Unfortunately exactly the same, I've even put the domain name as the=20
virtual host and it behaves the same !!!

(i.e )

I was thinking that the way the web server is set up is by "web=20
forwarding", where the holders of our domain name forward requests onto=20
the ip address of our web server. This works for http, could it be=20
possible that something needs configuring at the company that holds our=20
domain name (easily.co.uk) to forward on https requests, or is that a real=
=20
long shot ?



-----Original Message-----
From: owner-modssl-users@modssl.org [mailto:owner-modssl-users@modssl.org]=
=20
On Behalf Of Omar W. Hannet
Sent: 18 June 2007 17:06
To: modssl-users@modssl.org
Subject: Re: SSL by Domain Name Error


What's the result when you set ServerName to your domain
name within the virtual host?:


ServerName example.com
SSLEngine On
SSLCertificateFile conf/ssl/server.crt
SSLCertificateKeyFile conf/ssl/server.key


Rob Archer wrote:
> Thanks for the response, I'm using the following in the httpd.conf
> file:-
>=20
>
> SSLMutex default
> SSLRandomSeed startup builtin
> SSLRandomSeed connect builtin
> SSLSessionCache none
> ErrorLog logs/ssl.log
> LogLevel info
>

>=20
>
> SSLEngine On
> SSLCertificateFile conf/ssl/server.crt
> SSLCertificateKeyFile conf/ssl/server.key
>

>=20
>=20
> -----Original Message-----
> From: owner-modssl-users@modssl.org=20
> [mailto:owner-modssl-users@modssl.org] On Behalf Of Omar W. Hannet
> Sent: 18 June 2007 16:13
> To: modssl-users@modssl.org
> Subject: Re: SSL by Domain Name Error
>=20
>=20
> Rob Archer wrote:
>> Anybody have any suggestions ?
>=20
>> Have created the key through open ssl and configured apache
(using
>> http://raibledesigns.com/wiki/Wiki.jsp?page=3DApacheSSL
> instructions) and
>> can access https via the IP address of the web server but not the
>> domain name. When trying to get the to the webserver via the
> domain
>> name through https it says internet explorer cannot display this
> web
>> page. Using the normal http protocol I can get the "It Works"
page
>> through both IP address and domain name.
>>=20
>> Have tried to get around this by fiddling about with the virtual
>> hosts settings but haven't found any solution. Can anyone help=20
>> !!!
>=20
> You might try adding a NameVirtualHost directive:
>=20
> NameVirtualHost 1.2.3.4:443
>=20
> (Your own IP address in place of '1.2.3.4'.)
>=20
> If that doesn't help, please show us the block for this=20
> domain in your current Apache configuration.
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org


Click
https://www.mailcontrol.com/sr/wQw0zmjPoHdJTZGyOCrrhg==
1zjrSD8hWEe96repmpaOSdLMvmLORniQDfYJTSjBfD!nkU9R0u8dlLFoNT85 Zo6jf9yegQzk
pg9iGvxGJKsNeMk8vpdiUWF8qBDGGfaGgdaAcnXV!xUKnI0XzkSD3mUR0s5m D0+fIpcaD4yO
5vBMHXJE1FQ0bouh7TVke8vo28dsfWWo4QK!9LC to report this email as spam.=20
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org



____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org



____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Ref : RE: Ref : RE: Ref : RE: SSL by Domain Name Error

am 19.06.2007 11:08:14 von abel.nivault

What is the message in apache error log file ?


Abel NIVAULT
Inspecteur PSE- PSN-CT - CSI LYON
abel.nivault@dgi.finances.gouv.fr




"Rob Archer"
Envoy=E9 par : owner-modssl-users@modssl.org
19/06/2007 11:05
Veuillez r=E9pondre =E0 modssl-users

=20
Pour :
cc :=20
Objet : RE: Ref : RE: Ref : RE: SSL by Domain Name Error



ServerName example.com
SSLEngine On
SSLCertificateFile conf/ssl/server.crt
SSLCertificateKeyFile conf/ssl/server.key


This is exactly how I've got it set up and unfortunately I can't use SSL=20
through my domain name (https://www.mydomain.com) but can access it via my =
ip address (https://1.2.3.4).


-----Original Message-----
From: owner-modssl-users@modssl.org [mailto:owner-modssl-users@modssl.org] =

On Behalf Of abel.nivault@dgi.finances.gouv.fr
Sent: 19 June 2007 09:53
To: modssl-users@modssl.org
Subject: Ref : RE: Ref : RE: SSL by Domain Name Error


No, you speak here about the url to access your web server.=20
What I ment is : when you configure your virtual host in httpd.conf, if=20
you want it to run in https mod, you have to set up the virtual host=20
directive with an IP an not with a host name:


ServerName example.com
SSLEngine On
SSLCertificateFile conf/ssl/server.crt
SSLCertificateKeyFile conf/ssl/server.key


will work


ServerName example.com
SSLEngine On
SSLCertificateFile conf/ssl/server.crt
SSLCertificateKeyFile conf/ssl/server.key


will not

Abel NIVAULT
Inspecteur PSE- PSN-CT - CSI LYON abel.nivault@dgi.finances.gouv.fr




"Rob Archer"
Envoy=E9 par : owner-modssl-users@modssl.org
19/06/2007 10:08
Veuillez r=E9pondre =E0 modssl-users

=20
Pour :
cc :=20
Objet : RE: Ref : RE: SSL by Domain Name Error


I read this on other posts, so does that mean I'll never be able to=20
configure my apache set up to be accessed like this :-

https:\\www.mydomain.com


-----Original Message-----
From: owner-modssl-users@modssl.org [mailto:owner-modssl-users@modssl.org] =


On Behalf Of abel.nivault@dgi.finances.gouv.fr
Sent: 19 June 2007 08:47
To: modssl-users@modssl.org
Cc: modssl-users@modssl.org; owner-modssl-users@modssl.org
Subject: Ref : RE: SSL by Domain Name Error


Virutal host name based doesn't work with ssl mod
you must configure ssl with ip based virtual hosts


Abel NIVAULT
Inspecteur PSE- PSN-CT - CSI LYON abel.nivault@dgi.finances.gouv.fr




"Rob Archer"
Envoy=E9 par : owner-modssl-users@modssl.org
18/06/2007 18:30
Veuillez r=E9pondre =E0 modssl-users

=20
Pour :
cc :=20
Objet : RE: SSL by Domain Name Error


Unfortunately exactly the same, I've even put the domain name as the=20
virtual host and it behaves the same !!!

(i.e )

I was thinking that the way the web server is set up is by "web=20
forwarding", where the holders of our domain name forward requests onto=20
the ip address of our web server. This works for http, could it be=20
possible that something needs configuring at the company that holds our=20
domain name (easily.co.uk) to forward on https requests, or is that a real =


long shot ?



-----Original Message-----
From: owner-modssl-users@modssl.org [mailto:owner-modssl-users@modssl.org] =


On Behalf Of Omar W. Hannet
Sent: 18 June 2007 17:06
To: modssl-users@modssl.org
Subject: Re: SSL by Domain Name Error


What's the result when you set ServerName to your domain
name within the virtual host?:


ServerName example.com
SSLEngine On
SSLCertificateFile conf/ssl/server.crt
SSLCertificateKeyFile conf/ssl/server.key


Rob Archer wrote:
> Thanks for the response, I'm using the following in the httpd.conf
> file:-
>=20
>
> SSLMutex default
> SSLRandomSeed startup builtin
> SSLRandomSeed connect builtin
> SSLSessionCache none
> ErrorLog logs/ssl.log
> LogLevel info
>

>=20
>
> SSLEngine On
> SSLCertificateFile conf/ssl/server.crt
> SSLCertificateKeyFile conf/ssl/server.key
>

>=20
>=20
> -----Original Message-----
> From: owner-modssl-users@modssl.org=20
> [mailto:owner-modssl-users@modssl.org] On Behalf Of Omar W. Hannet
> Sent: 18 June 2007 16:13
> To: modssl-users@modssl.org
> Subject: Re: SSL by Domain Name Error
>=20
>=20
> Rob Archer wrote:
>> Anybody have any suggestions ?
>=20
>> Have created the key through open ssl and configured apache
(using
>> http://raibledesigns.com/wiki/Wiki.jsp?page=3DApacheSSL
> instructions) and
>> can access https via the IP address of the web server but not the
>> domain name. When trying to get the to the webserver via the
> domain
>> name through https it says internet explorer cannot display this
> web
>> page. Using the normal http protocol I can get the "It Works"
page
>> through both IP address and domain name.
>>=20
>> Have tried to get around this by fiddling about with the virtual
>> hosts settings but haven't found any solution. Can anyone help=20
>> !!!
>=20
> You might try adding a NameVirtualHost directive:
>=20
> NameVirtualHost 1.2.3.4:443
>=20
> (Your own IP address in place of '1.2.3.4'.)
>=20
> If that doesn't help, please show us the block for this=20
> domain in your current Apache configuration.
____________________ ____=5F=
____________________ ____=5F=
____________________
Apache Interface to OpenSSL (mod=5Fssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org


Click
https://www.mailcontrol.com/sr/wQw0zmjPoHdJTZGyOCrrhg==
1zjrSD8hWEe96repmpaOSdLMvmLORniQDfYJTSjBfD!nkU9R0u8dlLFoNT85 Zo6jf9yegQzk
pg9iGvxGJKsNeMk8vpdiUWF8qBDGGfaGgdaAcnXV!xUKnI0XzkSD3mUR0s5m D0+fIpcaD4yO
5vBMHXJE1FQ0bouh7TVke8vo28dsfWWo4QK!9LC to report this email as spam.=20
____________________ ____=5F=
____________________ ____=5F=
____________________
Apache Interface to OpenSSL (mod=5Fssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org



____________________ ____=5F=
____________________ ____=5F=
____________________
Apache Interface to OpenSSL (mod=5Fssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org
____________________ ____=5F=
____________________ ____=5F=
____________________
Apache Interface to OpenSSL (mod=5Fssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org



____________________ ____=5F=
____________________ ____=5F=
____________________
Apache Interface to OpenSSL (mod=5Fssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org
____________________ ____=5F=
____________________ ____=5F=
____________________
Apache Interface to OpenSSL (mod=5Fssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org



____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

RE: Ref : RE: Ref : RE: Ref : RE: SSL by Domain Name Error

am 19.06.2007 11:58:10 von Rob Archer

I can't find an error in the error.log, access.log or ssl.log files.

In the access.log file it logs :-

When accessing the web site via http and the ip address=20

0.0.0.0 - - [19/Jun/2007:10:27:04 +0100] "GET / HTTP/1.1" 304 -

When accessing the web site via https and the ip address=20

0.0.0.0 - - [19/Jun/2007:10:28:12 +0100] "GET / HTTP/1.1" 200 44
0.0.0.0 - - [19/Jun/2007:10:28:12 +0100] "GET /favicon.ico HTTP/1.1" 404 209

When accessing the web site via http and the domain name

0.0.0.0 - - [19/Jun/2007:10:28:39 +0100] "GET / HTTP/1.1" 304 -


No entry for https and domain name in the access.log and a "Internet Explor=
er cannot display the webpage" in ie when trying to get to the server.


-----Original Message-----
From: owner-modssl-users@modssl.org [mailto:owner-modssl-users@modssl.org] =
On Behalf Of abel.nivault@dgi.finances.gouv.fr
Sent: 19 June 2007 10:08
To: modssl-users@modssl.org
Subject: Ref : RE: Ref : RE: Ref : RE: SSL by Domain Name Error


What is the message in apache error log file ?


Abel NIVAULT
Inspecteur PSE- PSN-CT - CSI LYON abel.nivault@dgi.finances.gouv.fr




"Rob Archer"
Envoy=E9 par : owner-modssl-users@modssl.org
19/06/2007 11:05
Veuillez r=E9pondre =E0 modssl-users

=20
Pour :
cc :=20
Objet : RE: Ref : RE: Ref : RE: SSL by Domain Name Error



ServerName example.com
SSLEngine On
SSLCertificateFile conf/ssl/server.crt
SSLCertificateKeyFile conf/ssl/server.key


This is exactly how I've got it set up and unfortunately I can't use SSL=20
through my domain name (https://www.mydomain.com) but can access it via my =
ip address (https://1.2.3.4).


-----Original Message-----
From: owner-modssl-users@modssl.org [mailto:owner-modssl-users@modssl.org]=
=20
On Behalf Of abel.nivault@dgi.finances.gouv.fr
Sent: 19 June 2007 09:53
To: modssl-users@modssl.org
Subject: Ref : RE: Ref : RE: SSL by Domain Name Error


No, you speak here about the url to access your web server.=20
What I ment is : when you configure your virtual host in httpd.conf, if=20
you want it to run in https mod, you have to set up the virtual host=20
directive with an IP an not with a host name:


ServerName example.com
SSLEngine On
SSLCertificateFile conf/ssl/server.crt
SSLCertificateKeyFile conf/ssl/server.key


will work


ServerName example.com
SSLEngine On
SSLCertificateFile conf/ssl/server.crt
SSLCertificateKeyFile conf/ssl/server.key


will not

Abel NIVAULT
Inspecteur PSE- PSN-CT - CSI LYON abel.nivault@dgi.finances.gouv.fr




"Rob Archer"
Envoy=E9 par : owner-modssl-users@modssl.org
19/06/2007 10:08
Veuillez r=E9pondre =E0 modssl-users

=20
Pour :
cc :=20
Objet : RE: Ref : RE: SSL by Domain Name Error


I read this on other posts, so does that mean I'll never be able to=20
configure my apache set up to be accessed like this :-

https:\\www.mydomain.com


-----Original Message-----
From: owner-modssl-users@modssl.org [mailto:owner-modssl-users@modssl.org]=
=20

On Behalf Of abel.nivault@dgi.finances.gouv.fr
Sent: 19 June 2007 08:47
To: modssl-users@modssl.org
Cc: modssl-users@modssl.org; owner-modssl-users@modssl.org
Subject: Ref : RE: SSL by Domain Name Error


Virutal host name based doesn't work with ssl mod
you must configure ssl with ip based virtual hosts


Abel NIVAULT
Inspecteur PSE- PSN-CT - CSI LYON abel.nivault@dgi.finances.gouv.fr




"Rob Archer"
Envoy=E9 par : owner-modssl-users@modssl.org
18/06/2007 18:30
Veuillez r=E9pondre =E0 modssl-users

=20
Pour :
cc :=20
Objet : RE: SSL by Domain Name Error


Unfortunately exactly the same, I've even put the domain name as the=20
virtual host and it behaves the same !!!

(i.e )

I was thinking that the way the web server is set up is by "web=20
forwarding", where the holders of our domain name forward requests onto=20
the ip address of our web server. This works for http, could it be=20
possible that something needs configuring at the company that holds our=20
domain name (easily.co.uk) to forward on https requests, or is that a real=
=20

long shot ?



-----Original Message-----
From: owner-modssl-users@modssl.org [mailto:owner-modssl-users@modssl.org]=
=20

On Behalf Of Omar W. Hannet
Sent: 18 June 2007 17:06
To: modssl-users@modssl.org
Subject: Re: SSL by Domain Name Error


What's the result when you set ServerName to your domain
name within the virtual host?:


ServerName example.com
SSLEngine On
SSLCertificateFile conf/ssl/server.crt
SSLCertificateKeyFile conf/ssl/server.key


Rob Archer wrote:
> Thanks for the response, I'm using the following in the httpd.conf
> file:-
>=20
>
> SSLMutex default
> SSLRandomSeed startup builtin
> SSLRandomSeed connect builtin
> SSLSessionCache none
> ErrorLog logs/ssl.log
> LogLevel info
>

>=20
>
> SSLEngine On
> SSLCertificateFile conf/ssl/server.crt
> SSLCertificateKeyFile conf/ssl/server.key
>

>=20
>=20
> -----Original Message-----
> From: owner-modssl-users@modssl.org
> [mailto:owner-modssl-users@modssl.org] On Behalf Of Omar W. Hannet
> Sent: 18 June 2007 16:13
> To: modssl-users@modssl.org
> Subject: Re: SSL by Domain Name Error
>=20
>=20
> Rob Archer wrote:
>> Anybody have any suggestions ?
>=20
>> Have created the key through open ssl and configured apache
(using
>> http://raibledesigns.com/wiki/Wiki.jsp?page=3DApacheSSL
> instructions) and
>> can access https via the IP address of the web server but not the
>> domain name. When trying to get the to the webserver via the
> domain
>> name through https it says internet explorer cannot display this
> web
>> page. Using the normal http protocol I can get the "It Works"
page
>> through both IP address and domain name.
>>=20
>> Have tried to get around this by fiddling about with the virtual
>> hosts settings but haven't found any solution. Can anyone help
>> !!!
>=20
> You might try adding a NameVirtualHost directive:
>=20
> NameVirtualHost 1.2.3.4:443
>=20
> (Your own IP address in place of '1.2.3.4'.)
>=20
> If that doesn't help, please show us the block for this
> domain in your current Apache configuration.
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org


Click
https://www.mailcontrol.com/sr/wQw0zmjPoHdJTZGyOCrrhg==
1zjrSD8hWEe96repmpaOSdLMvmLORniQDfYJTSjBfD!nkU9R0u8dlLFoNT85 Zo6jf9yegQzk
pg9iGvxGJKsNeMk8vpdiUWF8qBDGGfaGgdaAcnXV!xUKnI0XzkSD3mUR0s5m D0+fIpcaD4yO
5vBMHXJE1FQ0bouh7TVke8vo28dsfWWo4QK!9LC to report this email as spam.=20
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org



____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org



____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org



____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: Ref : RE: Ref : RE: Ref : RE: SSL by Domain Name Error

am 19.06.2007 18:06:59 von ohannet

Rob Archer wrote:

> No entry for https and domain name in the access.log and a "Internet Explorer cannot display the webpage" in ie when trying to get to the server.

Do you have access to the openssl command line program?
It would tell you whether you are making a connection, and
possibly shed some light on the problem. Like this:

openssl s_client -connect www.mydomain.com:443 -debug
GET /

--
Omar W. Hannet
http://www.allez-oop.net/
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

RE: SSL by Domain Name Error

am 19.06.2007 18:20:47 von Rob Archer

When accessing it by ip address using the debug option of openssl it
returns what you would expect (i.e. the text of the key certificate).

When accessing by domain name it says :-

Loading 'screen' into random state - done
Connect: bad file descriptor
Connect:errno=3D10060


I assume this is the equivalent of the "Internet Explorer cannot display
the webpage" error in IE !!!


-----Original Message-----
From: owner-modssl-users@modssl.org
[mailto:owner-modssl-users@modssl.org] On Behalf Of Omar W. Hannet
Sent: 19 June 2007 17:07
To: modssl-users@modssl.org
Subject: Re: Ref : RE: Ref : RE: Ref : RE: SSL by Domain Name Error


Rob Archer wrote:

> No entry for https and domain name in the access.log and a "Internet=20
> Explorer cannot display the webpage" in ie when trying to get to the=20
> server.

Do you have access to the openssl command line program?
It would tell you whether you are making a connection, and possibly shed
some light on the problem. Like this:

openssl s_client -connect www.mydomain.com:443 -debug
GET /

--=20
Omar W. Hannet
http://www.allez-oop.net/
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org


Click
https://www.mailcontrol.com/sr/wQw0zmjPoHdJTZGyOCrrhg==
fEC2jdu7IGByacx3ArIKIUT!lvVH!USL09885GdzcRHkJQbUg!t!lTlF8wvs pJ8KRJ!C1T7b
oyyYNM1LsOoq7xQn9PpPmf0RViWH8KrV2XgKm6g+xXis8qqUS8WsUnUSQI75 M3p9YidETs!4
SYY9PML3cPraQ8WwaBWlXfwQkELAaC8nK3p6uY3 to report this email as spam.
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: SSL by Domain Name Error

am 19.06.2007 18:28:24 von ohannet

I'll bet you're right when you say your provider may not be
forwarding https requests properly. I'd run this one past
them and see what they have to say about it.

Rob Archer wrote:
> When accessing it by ip address using the debug option of openssl it
> returns what you would expect (i.e. the text of the key certificate).
>
> When accessing by domain name it says :-
>
> Loading 'screen' into random state - done
> Connect: bad file descriptor
> Connect:errno=10060
>
>
> I assume this is the equivalent of the "Internet Explorer cannot display
> the webpage" error in IE !!!
>
>
> -----Original Message-----
> From: owner-modssl-users@modssl.org
> [mailto:owner-modssl-users@modssl.org] On Behalf Of Omar W. Hannet
> Sent: 19 June 2007 17:07
> To: modssl-users@modssl.org
> Subject: Re: Ref : RE: Ref : RE: Ref : RE: SSL by Domain Name Error
>
>
> Rob Archer wrote:
>
>> No entry for https and domain name in the access.log and a "Internet
>> Explorer cannot display the webpage" in ie when trying to get to the
>> server.
>
> Do you have access to the openssl command line program?
> It would tell you whether you are making a connection, and possibly shed
> some light on the problem. Like this:
>
> openssl s_client -connect www.mydomain.com:443 -debug
> GET /

____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

RE: SSL by Domain Name Error

am 19.06.2007 18:37:09 von Rob Archer

I'll have a word with them tomorrow see what they say !!!

-----Original Message-----
From: owner-modssl-users@modssl.org
[mailto:owner-modssl-users@modssl.org] On Behalf Of Omar W. Hannet
Sent: 19 June 2007 17:28
To: modssl-users@modssl.org
Subject: Re: SSL by Domain Name Error


I'll bet you're right when you say your provider may not be forwarding
https requests properly. I'd run this one past them and see what they
have to say about it.

Rob Archer wrote:
> When accessing it by ip address using the debug option of openssl it=20
> returns what you would expect (i.e. the text of the key certificate).
>=20
> When accessing by domain name it says :-
>=20
> Loading 'screen' into random state - done
> Connect: bad file descriptor
> Connect:errno=3D10060
>=20
>=20
> I assume this is the equivalent of the "Internet Explorer cannot=20
> display the webpage" error in IE !!!
>=20
>=20
> -----Original Message-----
> From: owner-modssl-users@modssl.org=20
> [mailto:owner-modssl-users@modssl.org] On Behalf Of Omar W. Hannet
> Sent: 19 June 2007 17:07
> To: modssl-users@modssl.org
> Subject: Re: Ref : RE: Ref : RE: Ref : RE: SSL by Domain Name Error
>=20
>=20
> Rob Archer wrote:
>=20
>> No entry for https and domain name in the access.log and a "Internet
>> Explorer cannot display the webpage" in ie when trying to get to the=20
>> server.
>=20
> Do you have access to the openssl command line program?
> It would tell you whether you are making a connection, and possibly=20
> shed some light on the problem. Like this:
>=20
> openssl s_client -connect www.mydomain.com:443 -debug
> GET /

____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org


Click
https://www.mailcontrol.com/sr/wQw0zmjPoHdJTZGyOCrrhg==
NoIrNOBa4kXlVepWQxhvS70n7wnaGifHgxpDYH9XzgnhdWNGqAEoj0QjdX2j mb6nMJ8gJruT
33EzOK5GVXfbNyKb+LzKW!I6Mmqa51c3EUWCLSmoTIRNb1cRcyi5C3p!RNtj A2lYb5YgUOqG
mlb5L!FRO2AUfWDh4BWlXfwQkELAaC8nK3p6uY3 to report this email as spam.
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

RE: SSL by Domain Name Error

am 20.06.2007 12:38:58 von Rob Archer

Just to let you all know I spoke to the domain name hosting company and
the DNS setting wasn't correct. Traffic is forwarded to our server but
our A name record didn't point to the correct ip address of the web
server and tech support was surprised it was working.

Will update the A name record and hopefully all should work !!!

Thanks for the replies !!!

-----Original Message-----
From: owner-modssl-users@modssl.org
[mailto:owner-modssl-users@modssl.org] On Behalf Of Rob Archer
Sent: 19 June 2007 17:37
To: modssl-users@modssl.org
Subject: RE: SSL by Domain Name Error


I'll have a word with them tomorrow see what they say !!!

-----Original Message-----
From: owner-modssl-users@modssl.org
[mailto:owner-modssl-users@modssl.org] On Behalf Of Omar W. Hannet
Sent: 19 June 2007 17:28
To: modssl-users@modssl.org
Subject: Re: SSL by Domain Name Error


I'll bet you're right when you say your provider may not be forwarding
https requests properly. I'd run this one past them and see what they
have to say about it.

Rob Archer wrote:
> When accessing it by ip address using the debug option of openssl it
> returns what you would expect (i.e. the text of the key certificate).
>=20
> When accessing by domain name it says :-
>=20
> Loading 'screen' into random state - done
> Connect: bad file descriptor
> Connect:errno=3D10060
>=20
>=20
> I assume this is the equivalent of the "Internet Explorer cannot
> display the webpage" error in IE !!!
>=20
>=20
> -----Original Message-----
> From: owner-modssl-users@modssl.org
> [mailto:owner-modssl-users@modssl.org] On Behalf Of Omar W. Hannet
> Sent: 19 June 2007 17:07
> To: modssl-users@modssl.org
> Subject: Re: Ref : RE: Ref : RE: Ref : RE: SSL by Domain Name Error
>=20
>=20
> Rob Archer wrote:
>=20
>> No entry for https and domain name in the access.log and a "Internet=20
>> Explorer cannot display the webpage" in ie when trying to get to the=20
>> server.
>=20
> Do you have access to the openssl command line program?
> It would tell you whether you are making a connection, and possibly
> shed some light on the problem. Like this:
>=20
> openssl s_client -connect www.mydomain.com:443 -debug
> GET /

____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org


Click
https://www.mailcontrol.com/sr/wQw0zmjPoHdJTZGyOCrrhg==
NoIrNOBa4kXlVepWQxhvS70n7wnaGifHgxpDYH9XzgnhdWNGqAEoj0QjdX2j mb6nMJ8gJruT
33EzOK5GVXfbNyKb+LzKW!I6Mmqa51c3EUWCLSmoTIRNb1cRcyi5C3p!RNtj A2lYb5YgUOqG
mlb5L!FRO2AUfWDh4BWlXfwQkELAaC8nK3p6uY3 to report this email as spam.
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: SSL by Domain Name Error

am 21.06.2007 20:10:21 von dufresne

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



more likely www.mydomain.com is not in DNS, perhaps trying this works:

https://mydomain.com

If that works it is DNS issues.

Thanks,

Ron DuFresne


On Tue, 19 Jun 2007, Omar W. Hannet wrote:

> I'll bet you're right when you say your provider may not be
> forwarding https requests properly. I'd run this one past
> them and see what they have to say about it.
>
> Rob Archer wrote:
>> When accessing it by ip address using the debug option of openssl it
>> returns what you would expect (i.e. the text of the key certificate).
>>
>> When accessing by domain name it says :-
>>
>> Loading 'screen' into random state - done
>> Connect: bad file descriptor
>> Connect:errno=10060
>>
>>
>> I assume this is the equivalent of the "Internet Explorer cannot display
>> the webpage" error in IE !!!
>>
>>
>> -----Original Message-----
>> From: owner-modssl-users@modssl.org
>> [mailto:owner-modssl-users@modssl.org] On Behalf Of Omar W. Hannet
>> Sent: 19 June 2007 17:07
>> To: modssl-users@modssl.org
>> Subject: Re: Ref : RE: Ref : RE: Ref : RE: SSL by Domain Name Error
>>
>>
>> Rob Archer wrote:
>>
>>> No entry for https and domain name in the access.log and a "Internet
>>> Explorer cannot display the webpage" in ie when trying to get to the
>>> server.
>>
>> Do you have access to the openssl command line program?
>> It would tell you whether you are making a connection, and possibly shed
>> some light on the problem. Like this:
>>
>> openssl s_client -connect www.mydomain.com:443 -debug
>> GET /
>
> ____________________________________________________________ __________
> Apache Interface to OpenSSL (mod_ssl) www.modssl.org
> User Support Mailing List modssl-users@modssl.org
> Automated List Manager majordomo@modssl.org
>

- --
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
admin & senior security consultant: sysinfo.com
http://sysinfo.com
Key fingerprint = 9401 4B13 B918 164C 647A E838 B2DF AFCC 94B0 6629

....We waste time looking for the perfect lover
instead of creating the perfect love.

-Tom Robbins
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFGer8Qst+vzJSwZikRAqLUAKDUuvO8OPDrUqBCSRcVBzIMqQqD3QCg kknb
OfdmiAQeSnhLiCJFg4hsVlQ=
=ItZS
-----END PGP SIGNATURE-----
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org