You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Frank Karrari <ne...@hotmail.com> on 2003/10/10 21:55:28 UTC
[users@httpd] SSL
Hi guys,
I've downloaded and installed apache 2.0.47 for the first time ever
and I've problem configure apache running SSL mode,
do I need still install mode_ssl package? any example would help me a lot.
current setting:
#
# Bring in additional module-specific configurations
#
<IfModule mod_ssl.c>
Include conf/ssl.conf
</IfModule>
Thanks in advance
Frank
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] SSL
Posted by Leif W <wa...@usa.net>.
----- Original Message -----
From: "Frank Karrari" <ne...@hotmail.com>
To: <us...@httpd.apache.org>
Sent: Friday, October 10, 2003 9:25 PM
Subject: Re: [users@httpd] SSL
> Leif
>
> Thanks for advise I did build with --enable-ssl & --enable-cgi.
> Now when I start apachectl startssl I'm getting the following error.
>
> Syntax error on line 110 of /usr/local/apache2/conf/ssl.conf:
> SSLCertificateFile: file '/usr/local/apache2/conf/ssl.crt/server.crt' does
> not exist or is empty
>
> do I have to create my own certificate file?
Three parts, a private key file (KEY), a certificate signing request (CSR),
and a self-signed certificate (CRT) for testing. See my post from within
the past couple days on how to do this. Search the mailing list archives
for "openssl". Better yet, here it is.
http://marc.theaimsgroup.com/?l=apache-httpd-users&m=106572573311336&w=2
Leif
> Frank
>
> ----- Original Message -----
> From: "Leif W" <wa...@usa.net>
> To: <us...@httpd.apache.org>
> Sent: Friday, October 10, 2003 2:39 PM
> Subject: Re: [users@httpd] SSL
>
>
> > Ok, on a unix-like OS it should be trivial.
> >
> > ./configure --help | less
> >
> > Check out the --enable-ssl option.
> >
> > Leif
> >
> > ----- Original Message -----
> > From: "Frank Karrari" <ne...@hotmail.com>
> > To: <us...@httpd.apache.org>
> > Sent: Friday, October 10, 2003 5:26 PM
> > Subject: Re: [users@httpd] SSL
> >
> >
> > > I'm running AIX 5.1 and I configured, compiled and installed it from
> > scratch
> > > ./configure (no options)
> > > make
> > > make install
> > >
> > > all happened in AIX 5.1 gcc compiler
> > >
> > > Frank
> > >
> > > ----- Original Message -----
> > > From: "Leif W" <wa...@usa.net>
> > > To: <us...@httpd.apache.org>
> > > Sent: Friday, October 10, 2003 1:57 PM
> > > Subject: Re: [users@httpd] SSL
> > >
> > >
> > > > Which OS? If Windows, as the filename says, it has no_ssl support
> built
> > > in.
> > > > In either windows or *nix, you have to recompile from source for SSL
> > > support
> > > > (have you ever compiled any signifigant size C programs?), or find a
> > > > precompiled binary with SSL support. Apache 2.0.47 source has a
> mod_ssl
> > > > with it already. As you will notice from either of the extra module
> > > > packages Apache-SSL or mod_ssl projects, those are for the 1.3.x
> servers
> > > > only. And maybe you haven't got to it yet, but remember this for
when
> > you
> > > > do. When doing virtual hosting and SSL, you can only have one SSL
> > > cert/key
> > > > pair for each IP:port pair. Search the archives to learn more.
> > > >
> > > > Leif
> > > >
> > > > ----- Original Message -----
> > > > From: "Frank Karrari" <ne...@hotmail.com>
> > > > To: <us...@httpd.apache.org>
> > > > Sent: Friday, October 10, 2003 3:55 PM
> > > > Subject: [users@httpd] SSL
> > > >
> > > >
> > > > > Hi guys,
> > > > >
> > > > > I've downloaded and installed apache 2.0.47 for the first time
ever
> > > > > and I've problem configure apache running SSL mode,
> > > > > do I need still install mode_ssl package? any example would help
me
> a
> > > lot.
> > > > >
> > > > > current setting:
> > > > > #
> > > > > # Bring in additional module-specific configurations
> > > > > #
> > > > > <IfModule mod_ssl.c>
> > > > > Include conf/ssl.conf
> > > > > </IfModule>
> > > > >
> > > > > Thanks in advance
> > > > >
> > > > > Frank
> > > > >
> > > >
> > ---------------------------------------------------------------------
> > > > > The official User-To-User support forum of the Apache HTTP Server
> > > Project.
> > > > > See <URL:http://httpd.apache.org/userslist.html> for more info.
> > > > > To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> > > > > " from the digest: users-digest-unsubscribe@httpd.apache.org
> > > > > For additional commands, e-mail: users-help@httpd.apache.org
> > > > >
> > > > >
> > > > >
> > > >
> > > >
> > > >
> > >
> ---------------------------------------------------------------------
> > > > The official User-To-User support forum of the Apache HTTP Server
> > Project.
> > > > See <URL:http://httpd.apache.org/userslist.html> for more info.
> > > > To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> > > > " from the digest: users-digest-unsubscribe@httpd.apache.org
> > > > For additional commands, e-mail: users-help@httpd.apache.org
> > > >
> > > >
> > >
> > > ---------------------------------------------------------------------
> > > The official User-To-User support forum of the Apache HTTP Server
> Project.
> > > See <URL:http://httpd.apache.org/userslist.html> for more info.
> > > To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> > > " from the digest: users-digest-unsubscribe@httpd.apache.org
> > > For additional commands, e-mail: users-help@httpd.apache.org
> > >
> > >
> >
> >
> >
> > ---------------------------------------------------------------------
> > The official User-To-User support forum of the Apache HTTP Server
Project.
> > See <URL:http://httpd.apache.org/userslist.html> for more info.
> > To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> > " from the digest: users-digest-unsubscribe@httpd.apache.org
> > For additional commands, e-mail: users-help@httpd.apache.org
> >
> >
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
>
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] SSL
Posted by Frank Karrari <ne...@hotmail.com>.
Leif
Thanks for advise I did build with --enable-ssl & --enable-cgi.
Now when I start apachectl startssl I'm getting the following error.
Syntax error on line 110 of /usr/local/apache2/conf/ssl.conf:
SSLCertificateFile: file '/usr/local/apache2/conf/ssl.crt/server.crt' does
not exist or is empty
do I have to create my own certificate file?
Frank
----- Original Message -----
From: "Leif W" <wa...@usa.net>
To: <us...@httpd.apache.org>
Sent: Friday, October 10, 2003 2:39 PM
Subject: Re: [users@httpd] SSL
> Ok, on a unix-like OS it should be trivial.
>
> ./configure --help | less
>
> Check out the --enable-ssl option.
>
> Leif
>
> ----- Original Message -----
> From: "Frank Karrari" <ne...@hotmail.com>
> To: <us...@httpd.apache.org>
> Sent: Friday, October 10, 2003 5:26 PM
> Subject: Re: [users@httpd] SSL
>
>
> > I'm running AIX 5.1 and I configured, compiled and installed it from
> scratch
> > ./configure (no options)
> > make
> > make install
> >
> > all happened in AIX 5.1 gcc compiler
> >
> > Frank
> >
> > ----- Original Message -----
> > From: "Leif W" <wa...@usa.net>
> > To: <us...@httpd.apache.org>
> > Sent: Friday, October 10, 2003 1:57 PM
> > Subject: Re: [users@httpd] SSL
> >
> >
> > > Which OS? If Windows, as the filename says, it has no_ssl support
built
> > in.
> > > In either windows or *nix, you have to recompile from source for SSL
> > support
> > > (have you ever compiled any signifigant size C programs?), or find a
> > > precompiled binary with SSL support. Apache 2.0.47 source has a
mod_ssl
> > > with it already. As you will notice from either of the extra module
> > > packages Apache-SSL or mod_ssl projects, those are for the 1.3.x
servers
> > > only. And maybe you haven't got to it yet, but remember this for when
> you
> > > do. When doing virtual hosting and SSL, you can only have one SSL
> > cert/key
> > > pair for each IP:port pair. Search the archives to learn more.
> > >
> > > Leif
> > >
> > > ----- Original Message -----
> > > From: "Frank Karrari" <ne...@hotmail.com>
> > > To: <us...@httpd.apache.org>
> > > Sent: Friday, October 10, 2003 3:55 PM
> > > Subject: [users@httpd] SSL
> > >
> > >
> > > > Hi guys,
> > > >
> > > > I've downloaded and installed apache 2.0.47 for the first time ever
> > > > and I've problem configure apache running SSL mode,
> > > > do I need still install mode_ssl package? any example would help me
a
> > lot.
> > > >
> > > > current setting:
> > > > #
> > > > # Bring in additional module-specific configurations
> > > > #
> > > > <IfModule mod_ssl.c>
> > > > Include conf/ssl.conf
> > > > </IfModule>
> > > >
> > > > Thanks in advance
> > > >
> > > > Frank
> > > >
> > >
> ---------------------------------------------------------------------
> > > > The official User-To-User support forum of the Apache HTTP Server
> > Project.
> > > > See <URL:http://httpd.apache.org/userslist.html> for more info.
> > > > To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> > > > " from the digest: users-digest-unsubscribe@httpd.apache.org
> > > > For additional commands, e-mail: users-help@httpd.apache.org
> > > >
> > > >
> > > >
> > >
> > >
> > >
> > > ---------------------------------------------------------------------
> > > The official User-To-User support forum of the Apache HTTP Server
> Project.
> > > See <URL:http://httpd.apache.org/userslist.html> for more info.
> > > To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> > > " from the digest: users-digest-unsubscribe@httpd.apache.org
> > > For additional commands, e-mail: users-help@httpd.apache.org
> > >
> > >
> >
> > ---------------------------------------------------------------------
> > The official User-To-User support forum of the Apache HTTP Server
Project.
> > See <URL:http://httpd.apache.org/userslist.html> for more info.
> > To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> > " from the digest: users-digest-unsubscribe@httpd.apache.org
> > For additional commands, e-mail: users-help@httpd.apache.org
> >
> >
>
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] SSL
Posted by Leif W <wa...@usa.net>.
Ok, on a unix-like OS it should be trivial.
./configure --help | less
Check out the --enable-ssl option.
Leif
----- Original Message -----
From: "Frank Karrari" <ne...@hotmail.com>
To: <us...@httpd.apache.org>
Sent: Friday, October 10, 2003 5:26 PM
Subject: Re: [users@httpd] SSL
> I'm running AIX 5.1 and I configured, compiled and installed it from
scratch
> ./configure (no options)
> make
> make install
>
> all happened in AIX 5.1 gcc compiler
>
> Frank
>
> ----- Original Message -----
> From: "Leif W" <wa...@usa.net>
> To: <us...@httpd.apache.org>
> Sent: Friday, October 10, 2003 1:57 PM
> Subject: Re: [users@httpd] SSL
>
>
> > Which OS? If Windows, as the filename says, it has no_ssl support built
> in.
> > In either windows or *nix, you have to recompile from source for SSL
> support
> > (have you ever compiled any signifigant size C programs?), or find a
> > precompiled binary with SSL support. Apache 2.0.47 source has a mod_ssl
> > with it already. As you will notice from either of the extra module
> > packages Apache-SSL or mod_ssl projects, those are for the 1.3.x servers
> > only. And maybe you haven't got to it yet, but remember this for when
you
> > do. When doing virtual hosting and SSL, you can only have one SSL
> cert/key
> > pair for each IP:port pair. Search the archives to learn more.
> >
> > Leif
> >
> > ----- Original Message -----
> > From: "Frank Karrari" <ne...@hotmail.com>
> > To: <us...@httpd.apache.org>
> > Sent: Friday, October 10, 2003 3:55 PM
> > Subject: [users@httpd] SSL
> >
> >
> > > Hi guys,
> > >
> > > I've downloaded and installed apache 2.0.47 for the first time ever
> > > and I've problem configure apache running SSL mode,
> > > do I need still install mode_ssl package? any example would help me a
> lot.
> > >
> > > current setting:
> > > #
> > > # Bring in additional module-specific configurations
> > > #
> > > <IfModule mod_ssl.c>
> > > Include conf/ssl.conf
> > > </IfModule>
> > >
> > > Thanks in advance
> > >
> > > Frank
> > >
> > > ---------------------------------------------------------------------
> > > The official User-To-User support forum of the Apache HTTP Server
> Project.
> > > See <URL:http://httpd.apache.org/userslist.html> for more info.
> > > To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> > > " from the digest: users-digest-unsubscribe@httpd.apache.org
> > > For additional commands, e-mail: users-help@httpd.apache.org
> > >
> > >
> > >
> >
> >
> >
> > ---------------------------------------------------------------------
> > The official User-To-User support forum of the Apache HTTP Server
Project.
> > See <URL:http://httpd.apache.org/userslist.html> for more info.
> > To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> > " from the digest: users-digest-unsubscribe@httpd.apache.org
> > For additional commands, e-mail: users-help@httpd.apache.org
> >
> >
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] SSL
Posted by Frank Karrari <ne...@hotmail.com>.
I'm running AIX 5.1 and I configured, compiled and installed it from scratch
./configure (no options)
make
make install
all happened in AIX 5.1 gcc compiler
Frank
----- Original Message -----
From: "Leif W" <wa...@usa.net>
To: <us...@httpd.apache.org>
Sent: Friday, October 10, 2003 1:57 PM
Subject: Re: [users@httpd] SSL
> Which OS? If Windows, as the filename says, it has no_ssl support built
in.
> In either windows or *nix, you have to recompile from source for SSL
support
> (have you ever compiled any signifigant size C programs?), or find a
> precompiled binary with SSL support. Apache 2.0.47 source has a mod_ssl
> with it already. As you will notice from either of the extra module
> packages Apache-SSL or mod_ssl projects, those are for the 1.3.x servers
> only. And maybe you haven't got to it yet, but remember this for when you
> do. When doing virtual hosting and SSL, you can only have one SSL
cert/key
> pair for each IP:port pair. Search the archives to learn more.
>
> Leif
>
> ----- Original Message -----
> From: "Frank Karrari" <ne...@hotmail.com>
> To: <us...@httpd.apache.org>
> Sent: Friday, October 10, 2003 3:55 PM
> Subject: [users@httpd] SSL
>
>
> > Hi guys,
> >
> > I've downloaded and installed apache 2.0.47 for the first time ever
> > and I've problem configure apache running SSL mode,
> > do I need still install mode_ssl package? any example would help me a
lot.
> >
> > current setting:
> > #
> > # Bring in additional module-specific configurations
> > #
> > <IfModule mod_ssl.c>
> > Include conf/ssl.conf
> > </IfModule>
> >
> > Thanks in advance
> >
> > Frank
> >
> > ---------------------------------------------------------------------
> > The official User-To-User support forum of the Apache HTTP Server
Project.
> > See <URL:http://httpd.apache.org/userslist.html> for more info.
> > To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> > " from the digest: users-digest-unsubscribe@httpd.apache.org
> > For additional commands, e-mail: users-help@httpd.apache.org
> >
> >
> >
>
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] SSL
Posted by Leif W <wa...@usa.net>.
Which OS? If Windows, as the filename says, it has no_ssl support built in.
In either windows or *nix, you have to recompile from source for SSL support
(have you ever compiled any signifigant size C programs?), or find a
precompiled binary with SSL support. Apache 2.0.47 source has a mod_ssl
with it already. As you will notice from either of the extra module
packages Apache-SSL or mod_ssl projects, those are for the 1.3.x servers
only. And maybe you haven't got to it yet, but remember this for when you
do. When doing virtual hosting and SSL, you can only have one SSL cert/key
pair for each IP:port pair. Search the archives to learn more.
Leif
----- Original Message -----
From: "Frank Karrari" <ne...@hotmail.com>
To: <us...@httpd.apache.org>
Sent: Friday, October 10, 2003 3:55 PM
Subject: [users@httpd] SSL
> Hi guys,
>
> I've downloaded and installed apache 2.0.47 for the first time ever
> and I've problem configure apache running SSL mode,
> do I need still install mode_ssl package? any example would help me a lot.
>
> current setting:
> #
> # Bring in additional module-specific configurations
> #
> <IfModule mod_ssl.c>
> Include conf/ssl.conf
> </IfModule>
>
> Thanks in advance
>
> Frank
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
>
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org