Hi,

Thanks for the ideas. I tried both using the ip address instead of localhost and i commented out the setting : SSLVerifyClient require, but it still doesn't work.

Anything else that i could do?

Thank you

Vagel

Try (instead of localhost:443) using 192.168.0.225:443, in your openssl

s_client commandline.

---

Mat Butler, Winged Wolf <[EMAIL PROTECTED]>

SPASTIC Web Engineer SPASTIC Server Administrator

----Begin FurryCode v1.3----

FCWw5amrsw A- C+ D H+++ M+++++[servercoder] P+ R++ T+++ W Z++ Sm++

RLCT/M*/LW* a cl/u/v++++>+++++ !d e- f>++++ h++ iwf+++ j p->+ sm++

----End FurryCode v1.3----

 

On Fri, 14 Apr 2000, Vagel Argyrakis wrote:

> Hi all,

>

> I have problems with ssl on my apache server (rh 6.1)

> The certicicate has been created with make certificate

> On launch with apachectl startssl i enter the passphrase and everything seems to be correct, the server starts-up giving as output :

>

> Server my.server.name:443 (RSA)

> Enter pass phrase:

>

> Ok: Pass Phrase Dialog successful.

> ./apachectl startssl: httpd started

>

> But when i try to connect to it using https:// i receive no answer. I also tried to scan the ports and it seems that port 443 is not open.

> This is the ssl related section of my httpd.conf file:

>

> <IfDefine SSL>

> Listen 80

> Listen 443

> AddType application/x-x509-ca-cert .crt

> AddType application/x-pkcs7-crl .crl

> </IfDefine>

>

> SSLPassPhraseDialog builtin

> SSLSessionCache dbm:/usr/local/apache/logs/ssl_scache

> SSLSessionCacheTimeout 300

> SSLMutex file:/usr/local/apache/logs/ssl_mutex

> SSLRandomSeed startup builtin

> SSLRandomSeed connect builtin

>

> SSLLog /usr/local/apache/logs/ssl_engine_log

> SSLLogLevel info

>

> <IfDefine SSL>

> <VirtualHost 192.168.0.225:443>

> DocumentRoot /www/htdocs/

> ErrorLog /usr/local/apache/logs/error_log

> TransferLog /usr/local/apache/logs/access_log

> SSLEngine on

> SSLVerifyClient require

> SSLCertificateFile /usr/local/apache/conf/ssl.crt/server.crt

> SSLCertificateKeyFile /usr/local/apache/conf/ssl.key/server.key

> SSLLogFile /usr/local/apache/logs/ssl_misc_log

>

> <Files ~ "\.(cgi|shtml)$">

> SSLOptions +StdEnvVars

> </Files>

> <Directory "/usr/local/apache/cgi-bin">

> SSLOptions +StdEnvVars

> </Directory>

>

> SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown

>

> </VirtualHost>

> </IfDefine>

>

>

> This is the log in ssl_engine_log :

>

> [11/Apr/2000 08:11:30 01141] [info] Server: Apache/1.3.12, Interface: mod_ssl/2.6.2, Library: OpenSSL/0.9.5a

> [11/Apr/2000 08:11:30 01141] [info] Init: 1st startup round (still not detached)

> [11/Apr/2000 08:11:30 01141] [info] Init: Initializing OpenSSL library

> [11/Apr/2000 08:11:33 01141] [info] Init: Wiped out the queried pass phrases from memory

> [11/Apr/2000 08:11:33 01141] [info] Init: Seeding PRNG with 136 bytes of entropy

> [11/Apr/2000 08:11:33 01141] [info] Init: Generating temporary RSA private keys (512/1024 bits)

> [11/Apr/2000 08:11:34 01141] [info] Init: Configuring temporary DH parameters (512/1024 bits)

>

>

> When i manually test ssl with the command : # ./openssl s_client -connect localhost:443 -state -debug

> i receive the answer :

> connect: Connection refused

> connect:errno=111

>

> Anyone could give me some help?

>

> Thanks in advance

>

> Vagel Argyrakis

>

> [EMAIL PROTECTED]

>

______________________________________________________________________

Apache Interface to OpenSSL (mod_ssl) www.modssl.org

User Support Mailing List [EMAIL PROTECTED]

Automated List Manager [EMAIL PROTECTED]

Reply via email to