FW: newbie request for assistance

FW: newbie request for assistance

am 03.02.2003 18:52:09 von kurtb

Omar,

Thanks for your response, but isn't this accommodated by the fact that
ssl.conf is "called" from httpd.conf? Note the "Listen 443" below. =20

Here's the extract from the httpd.conf that I believe calls the
ssl.conf.


Include conf/ssl.conf


for the record, here's the only error_log output I'm receiving.
[Mon Feb 03 12:45:51 2003] [warn] Init: Session Cache is not configured
[hint: SSLSessionCache]
[Mon Feb 03 12:45:51 2003] [notice] Apache/2.0.44 (Unix) mod_ssl/2.0.44
OpenSSL/0.9.6g configured -- resuming normal operations

Like I said I'm new at this, so what do I know.

Thanks again for responding.

Kurt
-----Original Message-----
From: Omar TANTAOUI [mailto:omar.tantaoui@atexo.com]=20
Sent: Monday, February 03, 2003 10:58 AM
To: modssl-users@modssl.org
Subject: RE: newbie request for assistance

Have you added the line
"Listen 443"
in your httpd.conf file ? If no, make a search on "Listen 80" and copy
"Listen 443" under.

Omar.

> -----Message d'origine-----
> De : owner-modssl-users@modssl.org
> [mailto:owner-modssl-users@modssl.org]De la part de Kurt A. Buckardt
> Envoye : lundi 3 fevrier 2003 15:49
> A : modssl-users@modssl.org
> Objet : newbie request for assistance
>
>
> I am trying to bring up Apache 2.0.44 with mod_ssl module on Solaris
8,
> and can't get an https connection to the box. Http works just fine.
> Any suggestions on how to proceed would be greatly appreciated.
>
> I've downloaded & installed OpenSSL 0.9.6g (sunfreeware.comn
> I've created a certificate and key:
> /usr/local/apache2/conf/ssl.crt/server.crt
> /usr/local/apache2/conf/ssl.key/server.key
> I've downloaded, compiled, & made Apache with --enable-ssl
>
> Here's Apache's ssl.conf file, which is called from Apache's
httpd.conf
> file:
>
> Listen 443
>
> AddType application/x-x509-ca-cert .crt
> AddType application/x-pkcs7-crl .crl
>
> SSLPassPhraseDialog builtin
>
> SSLSessionCache dbm:logs/ssl_scache
> SSLSessionCacheTimeout 300
>
> SSLMutex file:logs/ssl_mutex
>
> SSLRandomSeed startup builtin
> SSLRandomSeed connect builtin
> SSLRandomSeed startup file:/dev/urandom 512
>
>
>
> DocumentRoot "/usr/local/apache2/htdocs"
> ServerName new.host.name:443
> ServerAdmin you@your.address
> ErrorLog logs/error_log
> TransferLog logs/access_log
>
> SSLEngine on
>
> SSLCipherSuite
> ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+e NULL
>
> SSLCertificateFile /usr/local/apache2/conf/ssl.crt/server.crt
>
> SSLCertificateKeyFile /usr/local/apache2/conf/ssl.key/server.key
>
>
> SSLOptions +StdEnvVars
>

>
> SSLOptions +StdEnvVars
>

>
> SetEnvIf User-Agent ".*MSIE.*" \
> nokeepalive ssl-unclean-shutdown \
> downgrade-1.0 force-response-1.0
>
> CustomLog logs/ssl_request_log \
> "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
>
>

>
>

> ____________________________________________________________ __________
> Apache Interface to OpenSSL (mod_ssl) www.modssl.org
> User Support Mailing List modssl-users@modssl.org
> Automated List Manager majordomo@modssl.org
>
>


____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: FW: newbie request for assistance

am 03.02.2003 18:59:55 von Mads Toftum

On Mon, Feb 03, 2003 at 11:52:09AM -0600, Kurt A. Buckardt wrote:
> for the record, here's the only error_log output I'm receiving.
> [Mon Feb 03 12:45:51 2003] [warn] Init: Session Cache is not configured
> [hint: SSLSessionCache]
> [Mon Feb 03 12:45:51 2003] [notice] Apache/2.0.44 (Unix) mod_ssl/2.0.44
> OpenSSL/0.9.6g configured -- resuming normal operations
>
Right, so you're missing a configuration directive - see
http://httpd.apache.org/docs-2.0/mod/mod_ssl.html#sslsession cache

vh

Mads Toftum
--
`Darn it, who spiked my coffee with water?!' - lwall

____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org