On Wed, Mar 10, 1999, Gilles L. Chong Hok Yuen wrote:
> i think tt ive installed the mod-ssl correctly. Apache is properly
> patched, i.e apachectl startssl works (http://www.abc.com is on).
> "/apache_1.3.4/bin/httpd -l" displays mod_ssl.c. But when i try
> "https://www.abc.com", browser gives error, something like "unable to
> connect to server". Do i need to put the following in the httpd.conf
> file:
>
> <VirtualHost another-ssl.fictional.co:443>
> Port 443
> SSLVerifyClient 2
> SSLVerifyDepth 10
> SSLCertificateKeyFile /www/certs/another-ssl.fictional.co.key
> SSLCertificateFile /www/certs/another-ssl.fictional.co.cert
> SSLCACertificateFile /www/certs/another-CA.cert
> DocumentRoot /www/hosts/another-ssl.fictional.co/docs
> TransferLog /www/hosts/another-ssl.fictional.co/logs/access.log
> SSLLogFile /www/hosts/another-ssl.fictional.co/logs/ssl.log
> ErrorLog /www/hosts/another-ssl.fictional.co/logs/error.log
> </VirtualHost>
Sure, you need such an entry. Plus a corresponding ``Listen 443'', of course.
> Im trying to run a non-ssl apache server (main server) and a ssl apache
> server. Do i need to open the port 443 in the firewall if im installing the
> ssl apache server on the internal network?
Yes, when you're firewall also filters ports, you've to allow connections to
port 443 (HTTPS) in addition to 80 (HTTP), too.
> Will the url be
> http://www.abc.com:443 then?
What? No, it should be https://www.abc.com/ which is equivalent to
https://www.abc.com:443/. Using http://www.abc.com:443 just leads to an error
page saying that you're connecting via HTTP to an HTTPS port.
> Also why is the apache ssl server installed in the /usr/local/apache
> directory when i did "./configure --prefix=/apache/apache_1.3.4"?
I'm sure --prefix works. When it was installed into /usr/local/apache although
you used --prefix=/apache/apache_1.3.4 you messed up something. You can always
add the --show-layout option to see what installation path layout is choosen.
Please check with this option first.
Ralf S. Engelschall
[EMAIL PROTECTED]
www.engelschall.com
______________________________________________________________________
Apache Interface to SSLeay (mod_ssl) www.engelschall.com/sw/mod_ssl/
Official Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
