Monday, February 18, 2002, 12:04:31 PM, Mads wrote:
MT> On Mon, Feb 18, 2002 at 10:28:49AM +0100, S�ren Neigaard wrote:
>> I'm having some problems with my router, so I'm not sure where my
>> problem is, in the router or in my httpd.conf
>>
MT> First look in your error_log from apache.
It doesn't get hit. Should I not be able to connect to my SSL site by
trying ssl.duketech.net in my browser?
>> If I do a portscan of my machine, port 443 return stealth. But it
>> should be open. Can port 443 return stealth because there is no server
>> listening, or is it because it is closed?
>>
MT> netstat -an|grep 443 locally on the machine or
Returns nothing.
MT> openssl s_client -connect 192.168.1.4:443
Gives:
connect: Connection refused
connect:errno=61
>> Anyway I have attached a snippet from my httpd.conf, where I have
>> tried to adjust the example to my needs. Now I was hoping you guys
>> could tell me if it look ok. It looks like this:
>>
>> <IfDefine SSL>
>> <VirtualHost 192.168.1.4:443>
>> DocumentRoot "/usr/local/www/data"
>> ServerName ssl.duketech.net
>> ServerAdmin [EMAIL PROTECTED]
>> ErrorLog /var/log/httpd-error.log
>> TransferLog /var/log/httpd-access.log
>> SSLEngine on
>> SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
>> <Files ~ "\.(cgi|shtml|phtml|php3?)$">
>> SSLOptions +StdEnvVars
>> </Files>
>> <Directory "/usr/local/www/cgi-bin">
>> SSLOptions +StdEnvVars
>> </Directory>
>> SetEnvIf User-Agent ".*MSIE.*" \
>> nokeepalive ssl-unclean-shutdown \
>> downgrade-1.0 force-response-1.0
>> CustomLog /var/log/ssl_request_log \
>> "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
>> </VirtualHost>
>> </IfDefine>
>>
MT> You need the SSLCertificateFile and SSLCertificateKeyFile directives too -
Ok I have those now.
--
Med venlig hilsen/Best regards,
S�ren Neigaard mailto:[EMAIL PROTECTED]
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]