I obvioulsy had abrain lapse :) Never copied over new httpd.conf-dist,
thanks for saving me ! man im glad we have 4 days off this week ! Have
a good T-Day and some Sam Admins to boot.
Thanks to all who replied !
-D
Cdowns wrote:
Subject: Re: SSL not listening.- Need Help
Date: Tue, 20 Nov 2001 21:56:24 -0800 (PST)
From: "J. Johnson" [EMAIL PROTECTED]>
To: Cdowns [EMAIL PROTECTED]>
CC: [EMAIL PROTECTED]
First of all, port 443 should (if the server is setup right, and running)
be the https port. It sort of looks like you have http on port
443, and
your browser is smart enough to ask why it isn't seeing https.
Second, check your log directory: you should (if you've gone the
straight
untouched default) have two ssl logs. Check the dates to see
how current
they are, and then check the messages.
Third, mod_ssl doesn't tell you how or where to add SSL things in
httpd.conf because it should be doing it for you: you should
not have to.
Does your httpd.conf file have a number of "IfDefine SSL>" lines?
If not, you are not using the right file. Possibly it was created,
but
not copied to the conf directory because of an existing file.
Check in
your Apache source area for a 'httpd.conf-dist' file, and see if it
has
SSL lines. If not, mod_ssl may have failed.
(Hopefully you captured the output of your various install steps,
including 'make install', so you could review them for errors.
Right?)
=== JJ =====
On Tue, 20 Nov 2001, Cdowns wrote:
> Ok,
> Im really starting to wonder what is
going on or am I totally crazy. I
> have everything compiled and started /usr/local/apache/apachestl
startssl:
>
> [root@mail1 logs]# /usr/local/apache/bin/apachectl startssl
> /usr/local/apache/bin/apachectl startssl: httpd started
> [root@mail1 logs]#cat /usr/local/apache/logs/error_log
> -snip for brevity ---
> [Tue Nov 20 22:07:22 2001] [info] Server built: Nov 20 2001 21:37:40
> [Tue Nov 20 22:07:22 2001] [notice] Accept mutex: sysvsem (Default:
sysvsem)
> [Tue Nov 20 22:17:44 2001] [info] removed PID file
> /usr/local/apache/logs/httpd.pid (pid=6289)
> [Tue Nov 20 22:17:44 2001] [notice] caught SIGTERM, shutting down
> [Tue Nov 20 22:17:49 2001] [info] created shared memory segment #3456
> [Tue Nov 20 22:17:49 2001] [notice] Apache/1.3.22 (Unix) mod_ssl/2.8.5
> OpenSSL/0.9.6b configured -- resuming normal operations
> [Tue Nov 20 22:17:49 2001] [info] Server built: Nov 20 2001 21:37:40
> [Tue Nov 20 22:17:49 2001] [notice] Accept mutex: sysvsem (Default:
sysvsem)
> [root@mail1 logs]# cat ../conf/httpd.conf | grep Listen
> # Listen: Allows you to bind Apache to specific IP addresses and/or
> #Listen 3000
> #Listen 12.34.56.78:80
> Listen 443
> # See also the VirtualHost> and Listen directives.
>
> I added the Listen 443 to httpd.conf by hand but it does not say
anywhere on
> the mod-ssl-2.8.5 INSTALL Doc to do so.
>
> [root@mail1 logs]# netstat -na | grep 443
> tcp 0
0 127.0.0.1:4443
127.0.0.1:389
TIME_WAIT
> tcp 0
0 127.0.0.1:4439
127.0 .0.1:389
TIME_WAIT
>
> tcp 0
0 127.0.0.1:4438
127.0.0.1:389
TIME_WAIT
> tcp 0
0 0.0.0.0:443
0.0.0.0:*
LISTEN
> [root@mail1 logs]# netstat -na | grep 80
> [root@mail1 logs]#
>
> when I try to access http://www.server.com:443
the site comes up but with no
> SSL ? and When I try https://www.server.com
I get Network IO error ? Ive read
> the INSTALL docs upside down and dont understand what is happening.
If anyone
> has any ideas about this one I would really appreciate it.
>
> Sincerely,
> Christopher M Downs
>
--
Network Security Administrator
Christopher M Downs
Skillsoft Corporation
http://www.skillsoft.com
"you can't point and click your
way to super cracker status -"
