Web Hosting Talk







View Full Version : SSL problem: Invalid command 'SSLengine'


jplaguna
04-24-2002, 07:41 PM
After activating SSL with a self-signed certificate for one of the virtual sites on our RaQ4, I am getting the following error when trying to restart httpd

/etc/rc.d/init.d/httpd restart
Shutting down Web Service: httpd
Setting up Web Service: mod_perl: Invalid command 'SSLengine', perhaps mis-spelled or defined by a module not included in the server configuration /usr/sbin/httpd

When trying to access the site with https://, it just hangs... no Page Not Found error or anything.

Any ideas? Thanks in advance.

:) Jp

Reg
04-24-2002, 09:01 PM
Yes that's correct. You are enabling SSLEngine On, without defining SSL. To do this, you need to add a module include. Here is an example:

<IfModule mod_ssl.c>
<VirtualHost _default_:443>

DocumentRoot "/home/www/whatever"
ServerName www.whatever.com
ServerAdmin admin@whatever.com
ErrorLog /var/log/httpd/error_log

SSLEngine on
SSLCipherSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL

SSLCertificateFile /etc/ssl/certs/server.crt
SSLCertificateKeyFile /etc/ssl/private/server.key
SSLCACertificatePath /etc/ssl/certs
SSLCACertificateFile /etc/ssl/certs/ca.crt
SSLCARevocationPath /etc/ssl/crl
SSLVerifyClient none
SSLVerifyDepth 10

SSLOptions +ExportCertData +StrictRequire
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
SetEnvIf Request_URI \.gif$ gif-image
CustomLog /var/log/httpd/ssl_request_log \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b" env=!gif-image
</VirtualHost>
</IfModule>


Note, this isn't the best way to do this.

jplaguna
04-26-2002, 03:28 PM
when i do a "locate mod_ssl"... nothing is returned... am i missing this file?

jplaguna
04-26-2002, 03:29 PM
there are two mod_ssl files, but no "mod_ssl.c"


locate mod_ssl:

/usr/lib/perl5/site_perl/5.005/i386-linux/auto/Apache/include/modules/ssl/mod_ssl.h
/usr/libexec/webmin/apache/mod_ssl.pl

jplaguna
04-26-2002, 09:45 PM
i finally got ssl working on the root cobalt site... after enabling ssl and generating the certificate, the cobalt gui responded with a message "SSL has been reconfigured"... shortly after, it was working on all sites.

:) jp