You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@subversion.apache.org by "Charles E. Doucette" <cd...@med-learn.com> on 2003/12/12 20:52:56 UTC
configured Apache SSL, SSL module loads - but nobody's listening on the SSL port (so https: access doesn't work)
I tried to follow the cookbook instructions for setting up SSL on Apache:
http://tortoisesvn.tigris.org/documentation/ch03.html#tsvn-serversetup-apache-6
There were a few problems with the instructions; but, eventually
I got Apache to restart and load the SSL module.
We're currently running Subversion 0.32.1 on a Windows 2000 Server with
Apache 2.0.48.
Here are the relavent lines from my ssl.conf file:
<IfDefine SSL>
Listen 443
<VirtualHost _default_:443>
SSLEngine on
SSLCertificateFile conf/ssl/my-server.crt
SSLCertificateKeyFile conf/ssl/my-server.key
</VirtualHost>
</IfDefine>
Please note that the instructions above told me to delete these lines:
<IfDefine SSL>
</IfDefine>
however, if I do that, Apache won't start.
I did not define or redefine the <Location> elements (they are defined
in the httpd.conf file).
The problem is that apparently Apache is not listening on the SSL port.
Can someone please tell me what to check/try to get https: access to our repository
working?
Thanks,
Chuck
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
RE: configured Apache SSL, SSL module loads - but nobody's listening on the SSL port (so https: access doesn't work)
Posted by "Charles E. Doucette" <cd...@med-learn.com>.
Ok, I fixed my own problem.
When I figured out how to start it manually, I found my problem:
C:\Program Files\Apache Group\Apache2\bin>Apache
Syntax error on line 62 of C:/Program Files/Apache Group/Apache2/conf/ssl.conf:
Invalid SSLMutex argument file:logs/ssl_mutex (Valid SSLMutex mechanisms are: `n
one', `default' )
For some reason, configuration file errors aren't reported in the error log.
This change *definitely* needs to be added to the cookbook:
C:\Program Files\Apache Group\Apache2\conf>fc ssl.default.conf ssl.conf
Comparing files ssl.default.conf and SSL.CONF
***** ssl.default.conf
# SSL engine uses internally for inter-process synchronization.
SSLMutex file:logs/ssl_mutex
***** SSL.CONF
# SSL engine uses internally for inter-process synchronization.
#SSLMutex file:logs/ssl_mutex
SSLMutex default
When I changed SSLMutex to default, everything started working fine.
For the record, the cookbook should be modified slightly.
In step 8, it says "Also you have to enter the URL of you server".
The question it asks when filling out the certificate is for the domain name,
not the site server name (so I filled it out incorrectly the first time).
It also says to type this:
bin\openssl rsa in privkey.pem out myserver.key
but when I do I get this error:
C:\Program Files\Apache Group\Apache2>bin\openssl rsa -in privkey.pem -out my-server.key
unknown option ûin
rsa [options] <infile >outfile
When I start openssl and then use the rsa subcommand from within openssl, it works fine.
I did the other commands like that.
Last but not least it would be nice if the cookbook pointed out that
signing your own certificate will work but that every browser will have
to explicitly accept your certificate unless you pay to have it signed
by a recognized CA (Certifying Authority).
Chuck
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
RE: configured Apache SSL, SSL module loads - but nobody's listening on the SSL port (so https: access doesn't work)
Posted by "Charles E. Doucette" <cd...@med-learn.com>.
> In any case, this is decidedly _not_ Subversion's
> problem/fault and the
> discussion should be taken elsewhere (IMHO).
Well, technically, you're correct. So, perhaps I'll ask my question on an
Apache mailing list.
It's just that to use Subversion over a network it practically requires Apache
and I was trying to follow Subversion's FAQ (which technically referenced TortoiseSVN's instructions) on how to configure Apache SSL
so that perhaps our username/passwords and
definitely our files would be encrypted.
Chuck
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: configured Apache SSL, SSL module loads - but nobody's listening
on the SSL port (so https: access doesn't work)
Posted by John Peacock <jp...@rowman.com>.
Charles E. Doucette wrote:
>
> I was also curious why SSL isn't defined (i.e. why must I delete the IfDefined SSL element?).
That is just the way it is done. The *nix apachectl has a specific target:
apachectl startssl
which serves specifically to #define SSL, so that the appropriate portion of the
configuration files get loaded. I don't know how to do that with the Windows
port, perhaps the Apache website.
In any case, this is decidedly _not_ Subversion's problem/fault and the
discussion should be taken elsewhere (IMHO).
John
--
John Peacock
Director of Information Research and Technology
Rowman & Littlefield Publishing Group
4501 Forbes Boulevard
Suite H
Lanham, MD 20706
301-459-3366 x.5010
fax 301-429-5748
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
RE: configured Apache SSL, SSL module loads - but nobody's listening on the SSL port (so https: access doesn't work)
Posted by "Charles E. Doucette" <cd...@med-learn.com>.
When I comment out the IfDefined element and tried to restart Apache,
I saw this error in the event viewer:
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7024
Date: 12/12/2003
Time: 4:26:13 PM
User: N/A
Computer: MLC-MEDIA
Description:
The Apache2 service terminated with service-specific error 1.
Does anyone know what this means and what I can do about it?
I was also curious why SSL isn't defined (i.e. why must I delete the IfDefined SSL element?).
Chuck
> -----Original Message-----
> From: Arild Fines [mailto:arild.fines@broadpark.no]
> Sent: Friday, December 12, 2003 4:40 PM
> To: cdoucette@med-learn.com; users@subversion.tigris.org
> Subject: RE: configured Apache SSL, SSL module loads - but
> nobody's listening on the SSL port (so https: access doesn't work)
>
>
> Charles E. Doucette wrote:
> > When I comment out those lines, Apache won't start at all.
> Apparently,
> > it can't load the module - so there's never a chance to report any
> > error message. I see nothing in the error log.
>
> If the error happens that early, it can usually be found in
> the Event Log. Take a look there.
>
> --
> Arild
>
> AnkhSVN: http://ankhsvn.tigris.org
> Blog: http://ankhsvn.com/blog
> RSS: http://ankhsvn.com/blog/Rss.aspx
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> For additional commands, e-mail: users-help@subversion.tigris.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
RE: configured Apache SSL, SSL module loads - but nobody's listening on the SSL port (so https: access doesn't work)
Posted by Arild Fines <ar...@broadpark.no>.
Charles E. Doucette wrote:
> When I comment out those lines, Apache won't start at all.
> Apparently, it can't load the module - so there's never a chance
> to report any error message. I see nothing in the error log.
If the error happens that early, it can usually be found in the Event Log.
Take a look there.
--
Arild
AnkhSVN: http://ankhsvn.tigris.org
Blog: http://ankhsvn.com/blog
RSS: http://ankhsvn.com/blog/Rss.aspx
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
RE: configured Apache SSL, SSL module loads - but nobody's listening on the SSL port (so https: access doesn't work)
Posted by "Charles E. Doucette" <cd...@med-learn.com>.
When I comment out those lines, Apache won't start at all.
Apparently, it can't load the module - so there's never a chance
to report any error message. I see nothing in the error log.
I'm starting it from the Apache Service Monitor.
Should I try starting it from the command line?
Will I see an error message then?
Chuck
> -----Original Message-----
> From: SteveKing [mailto:steveking@gmx.ch]
> Sent: Friday, December 12, 2003 4:22 PM
> To: users@subversion.tigris.org
> Subject: Re: configured Apache SSL, SSL module loads - but
> nobody's listening on the SSL port (so https: access doesn't work)
>
>
>
> ----- Original Message -----
> From: "Charles E. Doucette" <cd...@med-learn.com>
>
> >
> > <IfDefine SSL>
> > Listen 443
> > <VirtualHost _default_:443>
> > SSLEngine on
> > SSLCertificateFile conf/ssl/my-server.crt SSLCertificateKeyFile
> > conf/ssl/my-server.key
> > </VirtualHost>
> > </IfDefine>
> >
> > Please note that the instructions above told me to delete
> these lines:
> > <IfDefine SSL> </IfDefine>
> >
> > however, if I do that, Apache won't start.
>
> > The problem is that apparently Apache is not listening on the SSL
> > port.
>
> You tell! No seriously: if you don't remove those lines (and
> don't define "SSL" in the config file) then the lines between
> <IfDefine SSL> and </IfDefine> are _not_ read by apache. So
> don't be surprised if nothing is listening on port 443 -
> apache didn't read that part of your config file.
>
> So if apache won't start if you remove those lines, then
> check the apache error log and see _why_ it won't start.
> Don't just ignore instructions and think it will work anyway.
>
> Stefan
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> For additional commands, e-mail: users-help@subversion.tigris.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: configured Apache SSL, SSL module loads - but nobody's listening on the SSL port (so https: access doesn't work)
Posted by SteveKing <st...@gmx.ch>.
----- Original Message -----
From: "Charles E. Doucette" <cd...@med-learn.com>
>
> <IfDefine SSL>
> Listen 443
> <VirtualHost _default_:443>
> SSLEngine on
> SSLCertificateFile conf/ssl/my-server.crt
> SSLCertificateKeyFile conf/ssl/my-server.key
> </VirtualHost>
> </IfDefine>
>
> Please note that the instructions above told me to delete these lines:
> <IfDefine SSL>
> </IfDefine>
>
> however, if I do that, Apache won't start.
> The problem is that apparently Apache is not listening on the SSL port.
You tell! No seriously: if you don't remove those lines (and don't
define "SSL" in the config file) then the lines between <IfDefine SSL>
and </IfDefine> are _not_ read by apache.
So don't be surprised if nothing is listening on port 443 - apache
didn't read that part of your config file.
So if apache won't start if you remove those lines, then check
the apache error log and see _why_ it won't start. Don't just
ignore instructions and think it will work anyway.
Stefan
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
RE: configured Apache SSL, SSL module loads - but nobody's listening on the SSL port (so https: access doesn't work)
Posted by "Charles E. Doucette" <cd...@med-learn.com>.
I assume that one of my problems is that the <VirtualHost> element that I defined below
didn't work. I tried changing _default_ to the actual external host name
and that didn't help either. Perhaps I have to also define a <VirtualHost> element
in the main configuration file (httpd.conf)?
Chuck
> -----Original Message-----
> From: Charles E. Doucette [mailto:cdoucette@med-learn.com]
> Sent: Friday, December 12, 2003 3:53 PM
> To: users@subversion.tigris.org
> Subject: configured Apache SSL, SSL module loads - but
> nobody's listening on the SSL port (so https: access doesn't work)
>
>
> I tried to follow the cookbook instructions for setting up
> SSL on Apache:
>
http://tortoisesvn.tigris.org/documentation/ch03.html#tsvn-serversetup-apache-6
There were a few problems with the instructions; but, eventually I got Apache to restart and load the SSL module.
We're currently running Subversion 0.32.1 on a Windows 2000 Server with Apache 2.0.48.
Here are the relavent lines from my ssl.conf file:
<IfDefine SSL>
Listen 443
<VirtualHost _default_:443>
SSLEngine on
SSLCertificateFile conf/ssl/my-server.crt
SSLCertificateKeyFile conf/ssl/my-server.key
</VirtualHost>
</IfDefine>
Please note that the instructions above told me to delete these lines: <IfDefine SSL> </IfDefine>
however, if I do that, Apache won't start.
I did not define or redefine the <Location> elements (they are defined in the httpd.conf file).
The problem is that apparently Apache is not listening on the SSL port.
Can someone please tell me what to check/try to get https: access to our repository working?
Thanks,
Chuck
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org