At 09:55 AM 11/29/01 -0500, you wrote: >On Thu, Nov 29, 2001 at 05:43:36AM -0800, Ben Ocean wrote: >: I just installed an SSL cert on my server. Everything works (yay!) but I >: get these Javascript dialog boxes popping up informing the visitor that my >: pages display both secure and unsecure content. I presume this is because I >: link to graphics from another part of my Web site that is unsecure. Is this >: in fact the problem? If so, is it simply a matter of changing all http >: addresses to https on those graphics? > >Yes, and yes. By not serving images for your "secure" site from your >"secure" server, you're invalidating the basis of SSL - authentication of >the site sending you data.
Not only that, but apparently it won't serve them anyway. I tried by doing a global replace and the cert basically crashed my browser. Here's my problem: In my httpd.conf file I have the following configuration: <VirtualHost 216.145.1.127> ServerAdmin [EMAIL PROTECTED] DocumentRoot /apache/vhosts/constructioncalc ServerName www1.constructioncalc.com ErrorLog /apache/vhosts/constructioncalc/logs/error.log TransferLog /apache/vhosts/constructioncalc/logs/access.log CustomLog /apache/vhosts/constructioncalc/logs/referer.log referer CustomLog /apache/vhosts/constructioncalc/logs/agent.log agent ErrorDocument 401 /errors/401.html ErrorDocument 403 /errors/403.html ErrorDocument 404 /errors/404.html ErrorDocument 500 /errors/500.html Alias /icons/ /apache/vhosts/icons/ ScriptAlias /cgi-bin/ /apache/cgi-bin/constructioncalc/ </VirtualHost> Notice the *www1* in the ServerName above. Then... <VirtualHost 216.145.1.127> ServerAdmin [EMAIL PROTECTED] ServerName www.constructioncalc.com ServerAlias constructioncalc.com # *.constructioncalc.com ErrorDocument 401 /errors/401.html ErrorDocument 403 /errors/403.html ErrorDocument 500 /errors/500.html ErrorDocument 404 /errors/403.html Alias /icons/ /apache/vhosts/icons/ ProxyPass / http://thewebsons.com:8080//constructioncalc/ ProxyPassReverse / http://thewebsons.com:8080//constructioncalc/ ProxyPass /misc_ http://thewebsons.com:8080/constructioncalc/misc_ ProxyPass /p_ http://thewebsons.com:8080/p_ </VirtualHost> Notice *normal* server requests go through a proxy pass to a server called ZServer in the Zope environment. Further on... <IfDefine SSL> <VirtualHost 216.145.1.127:443> SSLEnable ServerAdmin [EMAIL PROTECTED] DocumentRoot /apache/vhosts/constructioncalc ServerName www.constructioncalc.com ErrorLog /apache/vhosts/constructioncalc/logs/error.log TransferLog /apache/vhosts/constructioncalc/logs/access.log CustomLog /apache/vhosts/constructioncalc/logs/referer.log referer CustomLog /apache/vhosts/constructioncalc/logs/agent.log agent ErrorDocument 401 /errors/401.html ErrorDocument 403 /errors/403.html ErrorDocument 404 /errors/404.html ErrorDocument 500 /errors/500.html Alias /icons/ /apache/vhosts/icons/ ScriptAlias /cgi-bin/ /apache/cgi-bin/constructioncalc/ SSLCertificateFile /apache/httpd/conf/ssl_certs/www.constructioncalc.com.crt SSLCertificateKeyFile /apache/httpd/conf/ssl_certs/www.constructioncalc.com.key SSLCACertificatePath /apache/httpd/conf/ssl_certs etc... For some odd, unknown reason, I've had to hard code my images using absolute URLs to the Zope side of things: http://www.constructioncalc.com/images/whatever If I code them to an image file in Apache to where the www1 points, the images don't come up!? Even if I use absolute URLs! So, I'm a little uncertain how to proceed. Also, my certs have *www* in them (see above). Does this actually make a difference? TIA, BenO _______________________________________________ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list
