mod_ssl issue, https is not working
I have installed Apache-V2.39-compiled with mod_ssl module. I have installed OpenSSL-V-0.9.6c and php4.2.2 on my server. I have created the RSA certificate and Private key and moved them in to the path described in the ssl.conf file. When I do ./apachectl startssl, the ssl starts but when I open netscape to go to the https://servername, it prompts me that I am about to go to the secure website,and I click okay and then it tells me that the website is not found. my http://servername site works, but https://servername does not, so what do I need to do? Why does the https now working? I have looked every where to find information about this and nothing has worked for me so far so, I would really appriciate some help on this issue? Thank You, PayalSuratwala __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED]
configure.bat
Title: configure.bat I am stuck at the configure.bat. C:\temp\mod_ssl-2.8.10-1.3.26configure.bat --with-apache=../apache_1.3.26 --with-ssl=/openssl Configuring mod_ssl/2.8.10 for Apache/1.3.26 + Apache location: ..\apache_1.3.26 (Version 1.3.26) + OpenSSL location: \openssl + Applying packages to Apache source tree: o Extended API (EAPI) Bad file descriptor at configure.bat line 210. What's the problem here??
RE: mod_ssl issue, https is not working
There are many reason such as a port is not setup right, theres a conflict with other programs. When you reply to this attach your error log. If you want to you can aso attach the httpd.conf or ssl.conf. This might help us understand what is happening on your system. -Original Message- From: Payal Suratwala [mailto:[EMAIL PROTECTED]] Sent: Thursday, July 11, 2002 2:55 PM To: [EMAIL PROTECTED] Subject: mod_ssl issue, https is not working I have installed Apache-V2.39-compiled with mod_ssl module. I have installed OpenSSL-V-0.9.6c and php4.2.2 on my server. I have created the RSA certificate and Private key and moved them in to the path described in the ssl.conf file. When I do ./apachectl startssl, the ssl starts but when I open netscape to go to the https://servername, it prompts me that I am about to go to the secure website,and I click okay and then it tells me that the website is not found. my http://servername site works, but https://servername does not, so what do I need to do? Why does the https now working? I have looked every where to find information about this and nothing has worked for me so far so, I would really appriciate some help on this issue? Thank You, PayalSuratwala __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED] __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED]
Could I add more than one CA to http.conf.
Dear Sir: If we want to allow the users that have the certificate is signed by two CA(For examble Verisign and Hitrust). How could I do? If I execute the SSLCACertificateFile command tow times. The Second command is work, but the first CS is disable. OS : Windows 2000. WEB Server: Apache 1.3, mod_ssl 2.6.1, OpenSSL 0.8.5 Is there any command to solve the problem? Thanks Bruce Huang (¶À¤å½å) FoongTone §»³q¼Æ½X¬ì§Þ ¥x¥_¿¤¤¤©M¥«¤¤¥¿¸ô866¸¹14¼Ó Tel: 886-2-8861 ext 636 __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED]
RE: Could I add more than one CA to http.conf.
Hi Sir: I have got the solution. Thanks. Bruce Huang -Original Message- From: ¶À¤å½å Sent: Friday, July 12, 2002 2:06 PM To: '[EMAIL PROTECTED]' Subject: Could I add more than one CA to http.conf. Dear Sir: If we want to allow the users that have the certificate is signed by two CA(For examble Verisign and Hitrust). How could I do? If I execute the SSLCACertificateFile command tow times. The Second command is work, but the first CS is disable. OS : Windows 2000. WEB Server: Apache 1.3, mod_ssl 2.6.1, OpenSSL 0.8.5 Is there any command to solve the problem? Thanks Bruce Huang (¶À¤å½å) FoongTone §»³q¼Æ½X¬ì§Þ ¥x¥_¿¤¤¤©M¥«¤¤¥¿¸ô866¸¹14¼Ó Tel: 886-2-8861 ext 636 __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED]
Re: RE: mod_ssl issue, https is not working
Exactly I am also facing a similar problem like this I had posted my email last night but I am wondering why my email is not there I have installed apache_1.3.26 openssl 0.9.6d and also modssl My http server working but not https Please suggest something as I am in a great need to set up a https sever for some testing On Fri, 12 Jul 2002 Ashmore, Samuel R wrote : There are many reason such as a port is not setup right, theres a conflict with other programs. When you reply to this attach your error log. If you want to you can aso attach the httpd.conf or ssl.conf. This might help us understand what is happening on your system. -Original Message- From: Payal Suratwala [mailto:[EMAIL PROTECTED]] Sent: Thursday, July 11, 2002 2:55 PM To: [EMAIL PROTECTED] Subject: mod_ssl issue, https is not working I have installed Apache-V2.39-compiled with mod_ssl module. I have installed OpenSSL-V-0.9.6c and php4.2.2 on my server. I have created the RSA certificate and Private key and moved them in to the path described in the ssl.conf file. When I do ./apachectl startssl, the ssl starts but when I open netscape to go to the https://servername, it prompts me that I am about to go to the secure website,and I click okay and then it tells me that the website is not found. my http://servername site works, but https://servername does not, so what do I need to do? Why does the https now working? I have looked every where to find information about this and nothing has worked for me so far so, I would really appriciate some help on this issue? Thank You, PayalSuratwala __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] _ There is always a better job for you at Monsterindia.com. Go now http://monsterindia.rediff.com/jobs __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED]
Re: mod_ssl issue, https is not working
Can you post your config file? Shalen wrote: Exactly I am also facing a similar problem like this I had posted my email last night but I am wondering why my email is not there I have installed apache_1.3.26 openssl 0.9.6d and also modssl My http server working but not https Please suggest something as I am in a great need to set up a https sever for some testing On Fri, 12 Jul 2002 Ashmore, Samuel R wrote : There are many reason such as a port is not setup right, theres a conflict with other programs. When you reply to this attach your error log. If you want to you can aso attach the httpd.conf or ssl.conf. This might help us understand what is happening on your system. -Original Message- From: Payal Suratwala [mailto:[EMAIL PROTECTED]] Sent: Thursday, July 11, 2002 2:55 PM To: [EMAIL PROTECTED] Subject: mod_ssl issue, https is not working I have installed Apache-V2.39-compiled with mod_ssl module. I have installed OpenSSL-V-0.9.6c and php4.2.2 on my server. I have created the RSA certificate and Private key and moved them in to the path described in the ssl.conf file. When I do ./apachectl startssl, the ssl starts but when I open netscape to go to the https://servername, it prompts me that I am about to go to the secure website,and I click okay and then it tells me that the website is not found. my http://servername site works, but https://servername does not, so what do I need to do? Why does the https now working? I have looked every where to find information about this and nothing has worked for me so far so, I would really appriciate some help on this issue? Thank You, PayalSuratwala __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED] __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED] _ There is always a better job for you at Monsterindia.com. Go now http://monsterindia.rediff.com/jobs __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED] __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED]
RE: mod_ssl issue, https is not working
Have you created an SSL virtualhost? As well as installing mod_ssl, you laso have to define a virtual host to make use of it. Also, you have to tell the server to listen to port 443, e.g. Listen 192.168.0.1:443 VirtualHost 192.168.0.1:443 ...etc Rgds, owen Boyle -Original Message- From: Payal Suratwala [mailto:[EMAIL PROTECTED]] Sent: Donnerstag, 11. Juli 2002 22:55 To: [EMAIL PROTECTED] Subject: mod_ssl issue, https is not working I have installed Apache-V2.39-compiled with mod_ssl module. I have installed OpenSSL-V-0.9.6c and php4.2.2 on my server. I have created the RSA certificate and Private key and moved them in to the path described in the ssl.conf file. When I do ./apachectl startssl, the ssl starts but when I open netscape to go to the https://servername, it prompts me that I am about to go to the secure website,and I click okay and then it tells me that the website is not found. my http://servername site works, but https://servername does not, so what do I need to do? Why does the https now working? I have looked every where to find information about this and nothing has worked for me so far so, I would really appriciate some help on this issue? Thank You, PayalSuratwala __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED] __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED]
RE: mod_ssl issue, https is not working
ALthough if you just use the default installs the virtual host is already setup -Original Message- From: Boyle Owen [mailto:[EMAIL PROTECTED]] Sent: Friday, July 12, 2002 8:30 AM To: [EMAIL PROTECTED] Subject: RE: mod_ssl issue, https is not working Have you created an SSL virtualhost? As well as installing mod_ssl, you laso have to define a virtual host to make use of it. Also, you have to tell the server to listen to port 443, e.g. Listen 192.168.0.1:443 VirtualHost 192.168.0.1:443 ...etc Rgds, owen Boyle -Original Message- From: Payal Suratwala [mailto:[EMAIL PROTECTED]] Sent: Donnerstag, 11. Juli 2002 22:55 To: [EMAIL PROTECTED] Subject: mod_ssl issue, https is not working I have installed Apache-V2.39-compiled with mod_ssl module. I have installed OpenSSL-V-0.9.6c and php4.2.2 on my server. I have created the RSA certificate and Private key and moved them in to the path described in the ssl.conf file. When I do ./apachectl startssl, the ssl starts but when I open netscape to go to the https://servername, it prompts me that I am about to go to the secure website,and I click okay and then it tells me that the website is not found. my http://servername site works, but https://servername does not, so what do I need to do? Why does the https now working? I have looked every where to find information about this and nothing has worked for me so far so, I would really appriciate some help on this issue? Thank You, PayalSuratwala __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED] __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED] __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED]
Problems using shmht Session Cache in Apache 2.0.39
Hi,
I'm trying to use shmht Session Cache in Apache 2.0.39 on Solaris8. I
get the followin g message in the error_log:
[Fri Jul 12 14:20:39 2002] [error] initialize MM bogus %pRMM
My settings regarding session cache are as follows:
SSLSessionCache shmht:/users/webs/apache/log/ssl_gcache_data(640
00)
SSLSessionCacheTimeout 300
I traced this down to the following snippet from /modules/ssl/ssl_scache
_shmht.c :
void ssl_scache_shmht_init(server_rec *s, apr_pool_t *p)
{
SSLModConfigRec *mc = myModConfig(s);
table_t *ta;
int ta_errno;
apr_size_t avail;
int n;
apr_status_t rv;
/*
* Create shared memory segment
*/
if (mc-szSessionCacheDataFile == NULL) {
ap_log_error(APLOG_MARK, APLOG_ERR, 0, s,
SSLSessionCache required);
ssl_die();
}
if ((rv = apr_shm_create((mc-pSessionCacheDataMM),
mc-nSessionCacheDataSize,
mc-szSessionCacheDataFile, mc-pPool)) !=
APR_SUCCESS) {
ap_log_error(APLOG_MARK, APLOG_ERR, rv, s,
Cannot allocate shared memory);
ssl_die();
}
if ((rv = apr_rmm_init((mc-pSessionCacheDataRMM), NULL,
apr_shm_baseaddr_get(mc-pSessionCacheDataMM),
mc-nSessionCacheDataSize, mc-pPool)) !=
APR_SUCCESS) {
ap_log_error(APLOG_MARK, APLOG_ERR, rv, s,
Cannot initialize rmm);
ssl_die();
}
ap_log_error(APLOG_MARK, APLOG_ERR, 0, s,
initialize MM %p RMM %p,
mc-pSessionCacheDataMM, mc-pSessionCacheDataRMM);
The last line seems strange. Why is a error message printed if there is
nothing wrong? Shouldn't APLOG_ERR be changed to APLOG_INFO ? And are
the values to be printed correctly set?
BTW: shmcb works without problems.
Has anybody noticed the same problem?
Cheers
Georg
UUNET - a WorldCom Company
UUNET Deutschland GmbH
Sebrathweg 20
44149 Dortmund
Germany
Tel. +49 231 972 1128
Fax. +49 231 972 1180
[EMAIL PROTECTED]
http://www.worldcom.com/de/
__
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]
trouble getting set up
I got the binaries distribution of Apache 2.0.39 for Windows 2000. Unfortunately I got it without MOD-SSL built, which I guess is the only way it comes. The2.0.39 versionof Apache wouldn't install like version 2.0.36 did. I still haven't figured out how to install it but I assume RTFM and followingthe manual installation instructions will work. PLEASE somone let me know ifthis version can't be installed at all. Next I downloaded the source files and went to build the apache and MOD_SSL source, because I figured that is something I would have to do to get MOD_SSL installed and working. Uckfay. I have Borland C++ Builder5 and Microsoft Visual Studio with MS-C++ 6 installed on my computer. Neither will allow me to build the project. It seems like the platform of choice is Microsoft VC++, cause the Borland compiler switcher look different,so MSVC++ is the compiler I tried hardest to get to work. Ikeep getting errors like those appended below... I am not a VC++ programmer by trade, so it goes without saying that I could not have written Apache from scratch in C. I haven't a clue why the file-set won't compile, but assume that it is undocumented compiler configuration requirements -- or files missing from source distribution. Any help greatly appreciated. Bill Angushttp://www.psychtest.com Trying to compile the base project fails as follows: Deleting intermediate files and output files for project 'libapr - Win32 Debug'.Deleting intermediate files and output files for project 'gen_uri_delims - Win32 Debug'.Deleting intermediate files and output files for project 'xml - Win32 Debug'.Deleting intermediate files and output files for project 'libaprutil - Win32 Debug'.Build : warning : failed to (or don't know how to) build 'C:\apachesource\httpd-2.0.39\srclib\apr-util\uri\gen_uri_delims.exe'Deleting intermediate files and output files for project 'dftables - Win32 Debug'.Deleting intermediate files and output files for project 'pcre - Win32 Debug'.Deleting intermediate files and output files for project 'pcreposix - Win32 Debug'.Deleting intermediate files and output files for project 'gen_test_char - Win32 Debug'.Deleting intermediate files and output files for project 'libhttpd - Win32 Debug'.Deleting intermediate files and output files for project 'Apache - Win32 Debug'.Configuration: libapr - Win32 DebugCreating apr.h from apr.hwCreating Version Resource'awk' is not recognized as an internal or external command,operable program or batch file.Error executing c:\winnt\system32\cmd.exe. Apache.exe - 1 error(s), 0 warning(s) Trying to compile MOD-SSL fails as follows: Deleting intermediate files and output files for project 'mod_ssl - Win32 Debug'.Configuration: mod_ssl - Win32 DebugGenerating ssl_expr_parse.c/.h from ssl_expr_parse.y'bison' is not recognized as an internal or external command,operable program or batch file.The system cannot find the file specified.Could Not Find C:\apachesource\httpd-2.0.39\modules\ssl\y.tab.cThe system cannot find the file specified.Could Not Find C:\apachesource\httpd-2.0.39\modules\ssl\y.tab.hError executing c:\winnt\system32\cmd.exe. mod_ssl.so - 1 error(s), 0 warning(s)
RE: trouble getting set up
Yes problem is that you need Win32 utilities awk and bison... Download them somewhere put in directory in PATH and try compile again... Jan Skola -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Bill Angus Sent: Friday, July 12, 2002 11:25 PM To: [EMAIL PROTECTED] Subject: trouble getting set up I got the binaries distribution of Apache 2.0.39 for Windows 2000. Unfortunately I got it without MOD-SSL built, which I guess is the only way it comes. The2.0.39 versionof Apache wouldn't install like version 2.0.36 did. I still haven't figured out how to install it but I assume RTFM and followingthe manual installation instructions will work. PLEASE somone let me know ifthis version can't be installed at all. Next I downloaded the source files and went to build the apache and MOD_SSL source, because I figured that is something I would have to do to get MOD_SSL installed and working. Uckfay. I have Borland C++ Builder5 and Microsoft Visual Studio with MS-C++ 6 installed on my computer. Neither will allow me to build the project. It seems like the platform of choice is Microsoft VC++, cause the Borland compiler switcher look different,so MSVC++ is the compiler I tried hardest to get to work. Ikeep getting errors like those appended below... I am not a VC++ programmer by trade, so it goes without saying that I could not have written Apache from scratch in C. I haven't a clue why the file-set won't compile, but assume that it is undocumented compiler configuration requirements -- or files missing from source distribution. Any help greatly appreciated. Bill Angus http://www.psychtest.com Trying to compile the base project fails as follows: Deleting intermediate files and output files for project 'libapr - Win32 Debug'. Deleting intermediate files and output files for project 'gen_uri_delims - Win32 Debug'. Deleting intermediate files and output files for project 'xml - Win32 Debug'. Deleting intermediate files and output files for project 'libaprutil - Win32 Debug'. Build : warning : failed to (or don't know how to) build 'C:\apachesource\httpd-2.0.39\srclib\apr-util\uri\gen_uri_delims.exe' Deleting intermediate files and output files for project 'dftables - Win32 Debug'. Deleting intermediate files and output files for project 'pcre - Win32 Debug'. Deleting intermediate files and output files for project 'pcreposix - Win32 Debug'. Deleting intermediate files and output files for project 'gen_test_char - Win32 Debug'. Deleting intermediate files and output files for project 'libhttpd - Win32 Debug'. Deleting intermediate files and output files for project 'Apache - Win32 Debug'. Configuration: libapr - Win32 Debug Creating apr.h from apr.hw Creating Version Resource 'awk' is not recognized as an internal or external command, operable program or batch file. Error executing c:\winnt\system32\cmd.exe. Apache.exe - 1 error(s), 0 warning(s) Trying to compile MOD-SSL fails as follows: Deleting intermediate files and output files for project 'mod_ssl - Win32 Debug'. Configuration: mod_ssl - Win32 Debug Generating ssl_expr_parse.c/.h from ssl_expr_parse.y 'bison' is not recognized as an internal or external command, operable program or batch file. The system cannot find the file specified. Could Not Find C:\apachesource\httpd-2.0.39\modules\ssl\y.tab.c The system cannot find the file specified. Could Not Find C:\apachesource\httpd-2.0.39\modules\ssl\y.tab.h Error executing c:\winnt\system32\cmd.exe. mod_ssl.so - 1 error(s), 0 warning(s)
RE: trouble getting set up
On Sat, 13 Jul 2002, [iso-8859-2] Jan ©kola wrote: Yes problem is that you need Win32 utilities ,awk' and ,bison'... Download them somewhere put in directory in PATH and try compile again... Right. See also http://apr.apache.org/compiling_win32.html . --Cliff __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED]
I am having a heck of a time - Please help.
I have poured through all the documentation I can find on enabling mod_ssl with Apache 1.3.26 but keep coming up short. If I static link the mod_ssl it works fine but when I try to enable DSO and use it as a shared library I keep getting ap_add_config_define : referenced symbol not found. I have the following config setup for the apache build: #!/bin/ksh SSL_BASE=/usr/local/ssl \ EAPI_MM=../mm-1.1.3 \ EAPI_MM_CORE_PATH=logs/httpd.mm \ LIBS=/usr/lib/libC.so.5 \ CFLAGS=-fPIC \ ./configure --prefix=/opt/apache \ --enable-rule=EAPI \ --enable-module=ssl \ --enable-shared=ssl \ --disable-rule=SSL_COMPAT \ --enable-rule=SSL_SDBM \ --enable-suexec \ --suexec-caller=http I have followed the instructions in the modssl install guide to patch Apache. Please verify the following build for mod_ssl: ./configure --with-apache=../apache_1.3.26 \ --with-ssl=/usr/local/ssl \ --with-mm=../mm-1.1.3 If you can help (point me to some documentation) I would be very grateful... David S. Loesche [EMAIL PROTECTED] Yipes Communications, Inc. Main: (415) 901-2000 114 Sansome Street, Suite 1045 Direct: (415) 901-2210 San Francisco, CA 94104 Fax:(415) 901-2201 http://www.yipes.com Yipes is the defining provider of fully scalable bandwidth for businesses. We offer fully managed high-speed Internet and Nationwide LAN-to-LAN services at speeds ranging from 1 Mbps to 1 Gbps, in 1 Mbps increments. Yipes delivers this uniquely flexible service over the first nationwide system of optical IP networks. __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED]
