DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUGĀ·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=37031>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED ANDĀ·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=37031

           Summary: Unconstructive error message with common mod_ssl
                    configuration mistake
           Product: Apache httpd-2.0
           Version: 2.0.54
          Platform: Other
        OS/Version: other
            Status: NEW
          Severity: normal
          Priority: P2
         Component: mod_ssl
        AssignedTo: [email protected]
        ReportedBy: [EMAIL PROTECTED]


I have a simple webserver, for which I wanted to add SSL support. So I added 
mod_ssl, looked at the 
configuration.
I then found a howto, complete with the procedure for generating a (self)signed 
certificate. But then 
came the hard part: there was absolutely no documentation whatsoever on how you 
would add SSL 
support for even the simple case of having just one webserver, let alone 
several virtual domains.

I googled somewhat and vaguely remembered something I did once with Apache 1.3 
and made a copy 
of ssl.conf and added my own stuff to it. Of course I also added "Listen 443" 
to the ports.conf and 
finally I added "SSLEngine On" after the check that everything was correct.

I immediately found the following error message in my error.log:

    Illegal attempt to re-initialise SSL for server (theoretically shouldn't 
happen!)

The last addition drew most of my attention, because it was very much possible 
what I was doing and in 
my mind not very stupid either. I googled for it, but I didn't come up with 
much.

I finally tried to disable "SSLEngine On", leaving the rest of the 
configuration in and that worked, httpd 
was even listening on port 443 (plain text, but still).

After a couple of days of letting this sink in, I finally came up with the 
solution, googled for the 
configuration of virtual hosts and got it to work by changing the configuration 
by using a virtual host 
for SSL.

Conclusion:
The error message is vague at best and the addition between parenthesis should 
be deleted 
immediately. It is very much possible to make this to happen and only makes the 
user feel stupid.

And it would also be nice if there was some really simple example configuration 
for how to configure 
SSL. (And perhaps add the error message to the FAQ as well, because there's not 
a lot of google hits for 
it that provide useful feedback).

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to