You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by ROB DIXON <RD...@wvbep.org> on 2003/10/08 19:07:24 UTC
[users@httpd] help with apache displaying directories
i'll try this again.
i have a redhat 9 box and a mandrake 9 box.
on the webserver on the redhat box i can server directories. i can
request it and browse it just fine.
but on the manadrake box if i create a link to a directory and then
click it i get a page cannot be displayed.
i've check the directive for the directory it appears to be the same as
the redhat box.
but i cant browse the directory on the mandrake box.
what im tryin to do is have a download page that is easy to manage. i
want to just ftp the files to the directory and browse it. making it
easier once again to manage.
i know im just missing something little. plz help.
Robert L. Dixon
State of West Virginia
Bureau of Employment Programs
MIS Division
Technical Support Unit
Telephone: (304)-558-2662
Email:rdixon@wvbep.org
Re: [users@httpd] Apache 2 VirtualHost and SSL
Posted by Joe Apache <ap...@productivitymedia.com>.
If your using the basic SSL setup and your getting Certificate problem,
than the certificate is your problem. Build another certificate and
see what happens... I'm assuming that your build your cert with -x509?
J
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Apache 2 VirtualHost and SSL
Posted by Peter Fleck <fl...@umn.edu>.
That's the setup for the default ssl.conf file and that's what I
have. I just abbreviated the VirtualHost directive in my email.
>I think that the SSL enabled VirtualHost section needs those basic things
>included from ssl.conf. The ssl.conf is setting things in a different
>context than the specific VirtualHost context. I've had success by just
>copying all the basic uncommented things from ssl.conf into each of my SSL
>enabled VirtualHost sections. Note that you can only have one SSL enabled
>VirtualHost per IP:port pair.
>
>Leif
>
>DocumentRoot "/usr/local/apache2/htdocs"
>ServerName www.xxx.com:443
>ServerAdmin you@your.address
>ErrorLog /path/to/logs/error_log
>TransferLog /path/to/logs/access_log
>SSLEngine on
>SSLCipherSuite
>ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
>SSLCertificateFile /path/to/ssl/www.xxx.com.crt
>SSLCertificateKeyFile /path/to/ssl/www.xxx.com.key
><Files ~ "\.(cgi|shtml|phtml|php3?)$">
> SSLOptions +StdEnvVars
></Files>
><Directory "/usr/local/apache2/cgi-bin">
> SSLOptions +StdEnvVars
></Directory>
>SetEnvIf User-Agent ".*MSIE.*" \
> nokeepalive ssl-unclean-shutdown \
> downgrade-1.0 force-response-1.0
>CustomLog logs/ssl_request_log \
> "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
>
>
>
>----- Original Message -----
>From: "Peter Fleck" <fl...@umn.edu>
>To: <us...@httpd.apache.org>
>Sent: Wednesday, October 08, 2003 5:01 PM
>Subject: [users@httpd] Apache 2 VirtualHost and SSL
>
>
>> Greetings,
>>
>> I'm using name-based virtual hosting. I want to have three sites, one
>> using SSL.
>>
>> Running Apache 2 on Redhat Linux 9.
>>
>> SSL is running at least that's what cURL and the openSSL test say.
>> And I get an error whenever I try to go to the SSL page. The error in
>> the ssl_error log is:
>>
>> [warn] RSA server certificate is a CA certificate (BasicConstraints:
>> CA == TRUE !?)
>>
>> So maybe that's the problem? I generated my own certificate and key
>> for testing purposes.
>>
>> Some highlights from my .conf files:
>>
>> Listen 80
>> Listen 443
>>
>> Include conf.d/ssl.conf
>>
>> ServerName www.cancer.umn.edu:80
>> DocumentRoot "/var/www/html"
>>
>> NameVirtualHost 160.94.109.179:80
>>
>> <VirtualHost 160.94.109.179:80>
>> ServerName www.cancer.umn.edu
>> DocumentRoot /var/www/html/cc
>> ...
>> </VirtualHost>
>>
>> <VirtualHost 160.94.109.179:80>
>> ServerName www.tturc.umn.edu
>> DocumentRoot /var/www/html/tturc
>> ...
>> </VirtualHost>
>>
>> # THE ssl.conf file (Include above) is pretty much default except
>> # I commented out the 'Listen 443' since I added that above
>> # VirtualHost directive is:
>>
>> <VirtualHost 160.94.109.179:443>
>> DocumentRoot "/var/www/html/cc-secure"
>> ServerName www.cancer.umn.edu
>> ...
>> </VirtualHost>
>>
>>
>> ### END
>>
>> When I try to connect, the browser gives "Connection refused..." and
>> the error I listed above appears in the ssl_error log. But when I use
>> curl (curl https://www.cancer.umn.edu), I get the page in the ssl
> > directory returned to the terminal window.
--
Peter Fleck
Webmaster | University of Minnesota Cancer Center
Dinnaken Office Bldg.
925 Delaware St. SE
Minneapolis, MN 55414
612-625-8668 | fleck004@umn.edu | www.cancer.umn.edu
Campus Mail: MMC 806
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Apache 2 VirtualHost and SSL
Posted by Leif W <wa...@usa.net>.
I think that the SSL enabled VirtualHost section needs those basic things
included from ssl.conf. The ssl.conf is setting things in a different
context than the specific VirtualHost context. I've had success by just
copying all the basic uncommented things from ssl.conf into each of my SSL
enabled VirtualHost sections. Note that you can only have one SSL enabled
VirtualHost per IP:port pair.
Leif
DocumentRoot "/usr/local/apache2/htdocs"
ServerName www.xxx.com:443
ServerAdmin you@your.address
ErrorLog /path/to/logs/error_log
TransferLog /path/to/logs/access_log
SSLEngine on
SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
SSLCertificateFile /path/to/ssl/www.xxx.com.crt
SSLCertificateKeyFile /path/to/ssl/www.xxx.com.key
<Files ~ "\.(cgi|shtml|phtml|php3?)$">
SSLOptions +StdEnvVars
</Files>
<Directory "/usr/local/apache2/cgi-bin">
SSLOptions +StdEnvVars
</Directory>
SetEnvIf User-Agent ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
CustomLog logs/ssl_request_log \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
----- Original Message -----
From: "Peter Fleck" <fl...@umn.edu>
To: <us...@httpd.apache.org>
Sent: Wednesday, October 08, 2003 5:01 PM
Subject: [users@httpd] Apache 2 VirtualHost and SSL
> Greetings,
>
> I'm using name-based virtual hosting. I want to have three sites, one
> using SSL.
>
> Running Apache 2 on Redhat Linux 9.
>
> SSL is running at least that's what cURL and the openSSL test say.
> And I get an error whenever I try to go to the SSL page. The error in
> the ssl_error log is:
>
> [warn] RSA server certificate is a CA certificate (BasicConstraints:
> CA == TRUE !?)
>
> So maybe that's the problem? I generated my own certificate and key
> for testing purposes.
>
> Some highlights from my .conf files:
>
> Listen 80
> Listen 443
>
> Include conf.d/ssl.conf
>
> ServerName www.cancer.umn.edu:80
> DocumentRoot "/var/www/html"
>
> NameVirtualHost 160.94.109.179:80
>
> <VirtualHost 160.94.109.179:80>
> ServerName www.cancer.umn.edu
> DocumentRoot /var/www/html/cc
> ...
> </VirtualHost>
>
> <VirtualHost 160.94.109.179:80>
> ServerName www.tturc.umn.edu
> DocumentRoot /var/www/html/tturc
> ...
> </VirtualHost>
>
> # THE ssl.conf file (Include above) is pretty much default except
> # I commented out the 'Listen 443' since I added that above
> # VirtualHost directive is:
>
> <VirtualHost 160.94.109.179:443>
> DocumentRoot "/var/www/html/cc-secure"
> ServerName www.cancer.umn.edu
> ...
> </VirtualHost>
>
>
> ### END
>
> When I try to connect, the browser gives "Connection refused..." and
> the error I listed above appears in the ssl_error log. But when I use
> curl (curl https://www.cancer.umn.edu), I get the page in the ssl
> directory returned to the terminal window.
>
> I'm hoping I'm missing something obvious to the experienced apache
> users here. I've scoured the docs with no luck.
>
> Thanks.
> --
> Peter Fleck
> Webmaster | University of Minnesota Cancer Center
> Dinnaken Office Bldg.
> 925 Delaware St. SE
> Minneapolis, MN 55414
> 612-625-8668 | fleck004@umn.edu | www.cancer.umn.edu
> Campus Mail: MMC 806
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
>
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
[users@httpd] Apache 2 VirtualHost and SSL
Posted by Peter Fleck <fl...@umn.edu>.
Greetings,
I'm using name-based virtual hosting. I want to have three sites, one
using SSL.
Running Apache 2 on Redhat Linux 9.
SSL is running at least that's what cURL and the openSSL test say.
And I get an error whenever I try to go to the SSL page. The error in
the ssl_error log is:
[warn] RSA server certificate is a CA certificate (BasicConstraints:
CA == TRUE !?)
So maybe that's the problem? I generated my own certificate and key
for testing purposes.
Some highlights from my .conf files:
Listen 80
Listen 443
Include conf.d/ssl.conf
ServerName www.cancer.umn.edu:80
DocumentRoot "/var/www/html"
NameVirtualHost 160.94.109.179:80
<VirtualHost 160.94.109.179:80>
ServerName www.cancer.umn.edu
DocumentRoot /var/www/html/cc
...
</VirtualHost>
<VirtualHost 160.94.109.179:80>
ServerName www.tturc.umn.edu
DocumentRoot /var/www/html/tturc
...
</VirtualHost>
# THE ssl.conf file (Include above) is pretty much default except
# I commented out the 'Listen 443' since I added that above
# VirtualHost directive is:
<VirtualHost 160.94.109.179:443>
DocumentRoot "/var/www/html/cc-secure"
ServerName www.cancer.umn.edu
...
</VirtualHost>
### END
When I try to connect, the browser gives "Connection refused..." and
the error I listed above appears in the ssl_error log. But when I use
curl (curl https://www.cancer.umn.edu), I get the page in the ssl
directory returned to the terminal window.
I'm hoping I'm missing something obvious to the experienced apache
users here. I've scoured the docs with no luck.
Thanks.
--
Peter Fleck
Webmaster | University of Minnesota Cancer Center
Dinnaken Office Bldg.
925 Delaware St. SE
Minneapolis, MN 55414
612-625-8668 | fleck004@umn.edu | www.cancer.umn.edu
Campus Mail: MMC 806
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] help with apache displaying directories
Posted by Ezra <ez...@acedsl.com>.
Hello Rob:
I haven't read the responses from others but I think you need to check
the permissions on the directories your trying to view.
ROB DIXON wrote:
> i'll try this again.
>
>
> i have a redhat 9 box and a mandrake 9 box.
>
> on the webserver on the redhat box i can server directories. i can
> request it and browse it just fine.
>
> but on the manadrake box if i create a link to a directory and then
> click it i get a page cannot be displayed.
>
> i've check the directive for the directory it appears to be the same as
> the redhat box.
>
> but i cant browse the directory on the mandrake box.
>
> what im tryin to do is have a download page that is easy to manage. i
> want to just ftp the files to the directory and browse it. making it
> easier once again to manage.
>
>
> i know im just missing something little. plz help.
>
> Robert L. Dixon
> State of West Virginia
> Bureau of Employment Programs
> MIS Division
> Technical Support Unit
> Telephone: (304)-558-2662
> Email:rdixon@wvbep.org
>
>
> ------------------------------------------------------------------------
>
> BEGIN:VCARD
> VERSION:2.1
> X-GWTYPE:USER
> FN:DIXON, ROB
> EMAIL;WORK;PREF;NGW:RDIXON@wvbep.org
> N:DIXON;ROB
> END:VCARD
>
>
>
>
> ------------------------------------------------------------------------
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] help with apache displaying directories
Posted by Leif W <wa...@usa.net>.
----- Original Message -----
From: "Chris Johnson" <ch...@sebis.com>
To: <us...@httpd.apache.org>
Sent: Wednesday, October 08, 2003 1:17 PM
Subject: Re: [users@httpd] help with apache displaying directories
> copy the httpd.conf file from redhat to mandrake make sure all the paths
> and username etc are correct and restart.
Yikes, those are two different distributions which may have things set up
differently, and may be creating more work than is necessary, and possibly
causing more problems as the chance for typos rises. Assuming you're using
Apache 2, correct me if I'm wrong.
See more below.
> There is options in the conf to tell apache to follow links and to
> enable indexing.
> good luck,
> chrisj
>
> ROB DIXON wrote:
>
> > i'll try this again.
> >
> >
> > i have a redhat 9 box and a mandrake 9 box.
> >
> > on the webserver on the redhat box i can server directories. i can
> > request it and browse it just fine.
Check your Options directive (
http://httpd.apache.org/docs-2.0/mod/core.html#options ). This option is
Indexes.
> > but on the manadrake box if i create a link to a directory and then
> > click it i get a page cannot be displayed.
Are you using symbolic links, or are you just using the term "link" to mean
"go to a URL in a browser"? If you're using a symbolic link to a directory,
you'll also need to enable FollowSymLinks option or SymLinksIfOwnerMatch.
If you're not using symbolic links, then do not use the *SymLinks* options.
You probably do not want to enable Indexes and FollowSymLinks or
SymLinksIfOwnerMatch across the entire site, but for that specific upload
directory.
Putting it all together, should look something like this:
Directory structure:
<hostname> [2003-10-08@18:35:14] /var/www -> ls -al docroot uploads
docroot
\___ uploads -> ../uploads (assuming symlinks in use for some reason).
|
uploads
DocumentRoot "/path/to/docroot"
<Directory "/path/to/docroot">
# [!] turns on across entire site, but you'd have to do it
# one level up from your uploads if there was a symlink?
Options +SymLinksIfOwnerMatch
</Directory>
Alias "/uploads" "/path/to/uploads"
<Directory "/path/to/uploads">
Options Indexes
AllowOverride None
Order allow,deny
Allow from all
</Directory>
> > i've check the directive for the directory it appears to be the same as
> > the redhat box.
> >
> > but i cant browse the directory on the mandrake box.
> >
> > what im tryin to do is have a download page that is easy to manage. i
> > want to just ftp the files to the directory and browse it. making it
> > easier once again to manage.
Again, this should be pretty straightforward with Options Indexes. Also you
might want to check
http://httpd.apache.org/docs-2.0/mod/mod_autoindex.html#IndexOptions to
further customize the index view.
Leif
> > i know im just missing something little. plz help.
> >
> > Robert L. Dixon
> > State of West Virginia
> > Bureau of Employment Programs
> > MIS Division
> > Technical Support Unit
> > Telephone: (304)-558-2662
> > Email:rdixon@wvbep.org
> >
> >
> > ------------------------------------------------------------------------
> >
> > BEGIN:VCARD
> > VERSION:2.1
> > X-GWTYPE:USER
> > FN:DIXON, ROB
> > EMAIL;WORK;PREF;NGW:RDIXON@wvbep.org
> > N:DIXON;ROB
> > END:VCARD
> >
> >
> >
> >
> > ------------------------------------------------------------------------
> >
> > ---------------------------------------------------------------------
> > The official User-To-User support forum of the Apache HTTP Server
Project.
> > See <URL:http://httpd.apache.org/userslist.html> for more info.
> > To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> > " from the digest: users-digest-unsubscribe@httpd.apache.org
> > For additional commands, e-mail: users-help@httpd.apache.org
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
>
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] help with apache displaying directories
Posted by Chris Johnson <ch...@sebis.com>.
copy the httpd.conf file from redhat to mandrake make sure all the paths
and username etc are correct and restart.
There is options in the conf to tell apache to follow links and to
enable indexing.
good luck,
chrisj
ROB DIXON wrote:
> i'll try this again.
>
>
> i have a redhat 9 box and a mandrake 9 box.
>
> on the webserver on the redhat box i can server directories. i can
> request it and browse it just fine.
>
> but on the manadrake box if i create a link to a directory and then
> click it i get a page cannot be displayed.
>
> i've check the directive for the directory it appears to be the same as
> the redhat box.
>
> but i cant browse the directory on the mandrake box.
>
> what im tryin to do is have a download page that is easy to manage. i
> want to just ftp the files to the directory and browse it. making it
> easier once again to manage.
>
>
> i know im just missing something little. plz help.
>
> Robert L. Dixon
> State of West Virginia
> Bureau of Employment Programs
> MIS Division
> Technical Support Unit
> Telephone: (304)-558-2662
> Email:rdixon@wvbep.org
>
>
> ------------------------------------------------------------------------
>
> BEGIN:VCARD
> VERSION:2.1
> X-GWTYPE:USER
> FN:DIXON, ROB
> EMAIL;WORK;PREF;NGW:RDIXON@wvbep.org
> N:DIXON;ROB
> END:VCARD
>
>
>
>
> ------------------------------------------------------------------------
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org