jplaguna
04-24-2002, 07:41 PM
After activating SSL with a self-signed certificate for one of the virtual sites on our RaQ4, I am getting the following error when trying to restart httpd
/etc/rc.d/init.d/httpd restart
Shutting down Web Service: httpd
Setting up Web Service: mod_perl: Invalid command 'SSLengine', perhaps mis-spelled or defined by a module not included in the server configuration /usr/sbin/httpd
When trying to access the site with https://, it just hangs... no Page Not Found error or anything.
Any ideas? Thanks in advance.
:) Jp
Yes that's correct. You are enabling SSLEngine On, without defining SSL. To do this, you need to add a module include. Here is an example:
<IfModule mod_ssl.c>
<VirtualHost _default_:443>
DocumentRoot "/home/www/whatever"
ServerName www.whatever.com
ServerAdmin admin@whatever.com
ErrorLog /var/log/httpd/error_log
SSLEngine on
SSLCipherSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
SSLCertificateFile /etc/ssl/certs/server.crt
SSLCertificateKeyFile /etc/ssl/private/server.key
SSLCACertificatePath /etc/ssl/certs
SSLCACertificateFile /etc/ssl/certs/ca.crt
SSLCARevocationPath /etc/ssl/crl
SSLVerifyClient none
SSLVerifyDepth 10
SSLOptions +ExportCertData +StrictRequire
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
SetEnvIf Request_URI \.gif$ gif-image
CustomLog /var/log/httpd/ssl_request_log \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b" env=!gif-image
</VirtualHost>
</IfModule>
Note, this isn't the best way to do this.
jplaguna
04-26-2002, 03:28 PM
when i do a "locate mod_ssl"... nothing is returned... am i missing this file?
jplaguna
04-26-2002, 03:29 PM
there are two mod_ssl files, but no "mod_ssl.c"
locate mod_ssl:
/usr/lib/perl5/site_perl/5.005/i386-linux/auto/Apache/include/modules/ssl/mod_ssl.h
/usr/libexec/webmin/apache/mod_ssl.pl
jplaguna
04-26-2002, 09:45 PM
i finally got ssl working on the root cobalt site... after enabling ssl and generating the certificate, the cobalt gui responded with a message "SSL has been reconfigured"... shortly after, it was working on all sites.
:) jp