View previous topic :: View next topic |
Author |
Message |
Aquitaine n00b
![n00b n00b](/images/ranks/rank_rect_0.gif)
Joined: 12 Jun 2003 Posts: 8
|
Posted: Fri Jun 13, 2003 1:00 pm Post subject: Installing a new SSL cert for Apache |
|
|
Quickie here:
I followed OpenSSL instructions for generating a new root CA and then individual certs. I made one for my webserver, but I can't figure out how to tell Apache where it lives. Apache was emerged with mod_ssl. All the instructions I found online suggest this:
SSLCertificateFile /path/to/cert
SSLCertificateKeyFile /path/to/key
But if I try that, Apache complains that it's an invalid command. I feel as though I'm missing something obvious. :> |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
samokk Tux's lil' helper
![Tux's lil' helper Tux's lil' helper](/images/ranks/rank_rect_1.gif)
![](images/avatars/gallery/The Matrix/movie_the_matrix_neo.gif)
Joined: 13 Jun 2003 Posts: 116 Location: Paris, France
|
Posted: Fri Jun 13, 2003 1:32 pm Post subject: |
|
|
Hi,
look in /etc/apache2/conf/modules.d
sam |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
kopfarzt Apprentice
![Apprentice Apprentice](/images/ranks/rank_rect_2.gif)
![](images/avatars/gallery/Simpsons/simpsons_dr_hibbert.gif)
Joined: 05 Apr 2003 Posts: 170 Location: Vienna, Austria
|
Posted: Fri Jun 13, 2003 1:48 pm Post subject: Re: Installing a new SSL cert for Apache |
|
|
Aquitaine wrote: | But if I try that, Apache complains that it's an invalid command. I feel as though I'm missing something obvious. :> |
Did you add/uncomment -D SSL in APACHE2_OPTS in /etc/conf.d/apache2 ?
kopfarzt |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
Aquitaine n00b
![n00b n00b](/images/ranks/rank_rect_0.gif)
Joined: 12 Jun 2003 Posts: 8
|
Posted: Fri Jun 13, 2003 3:39 pm Post subject: |
|
|
Yup. Although it's not apache2. It's 1.3.27.
APACHE_OPTS="-D SSL -D PHP4" |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
kopfarzt Apprentice
![Apprentice Apprentice](/images/ranks/rank_rect_2.gif)
![](images/avatars/gallery/Simpsons/simpsons_dr_hibbert.gif)
Joined: 05 Apr 2003 Posts: 170 Location: Vienna, Austria
|
Posted: Sun Jun 15, 2003 6:35 pm Post subject: |
|
|
As you see in our suggestions, we are using apache2, perhaps it's different with version 1.
Anyway your problem sounds like apache does not load/activate mod_ssl. So either it's not loaded (in apache2 it seems to be included by default, but perhaps you can see it in your version by calling apache -l) or it is disabled (do you have the SSLEngine on line?).
So just to make sure: a SSL enabled virtual server here looks like:
Code: |
NameVirtualHost aaa.bbb.ccc.ddd:443
<VirtualHost aaa.bbb.ccc.ddd:443>
ServerName foo.bar.com
SSLEngine on
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNUL
L
SSLCertificateFile conf/ssl/foo.bar.com.crt
SSLCertificateKeyFile conf/ssl/foo.bar.com.key
SSLOptions +StdEnvVars
DocumentRoot /home/www/foo.bar.com
</VirtualHost>
|
kopfarzt |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
|