You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by tirengarfio <ti...@hotmail.com> on 2009/05/12 14:59:47 UTC

[users@httpd] Ubuntu + Apache + Virtual host + Subversion + SSL tutorial: error about SSL.

Hi,

i've just followed 
[url=http://www.sellersrank.com/ubuntu/setup-apache-subversion-ssl-https-with-virtual-hosts-on-ubuntu/]this[/Url]
tutorial and when i write "https://svn.domain.com" as the tutorial mentions
i get this message:

hi,

i added to my "/etc/hosts" and the message i mentioned in my first post is
not showed any more, now i have another message:

Secure Connection Failed

An error occurred during a connection to svn.domain.com.

SSL received a record that exceeded the maximum permissible length.

(Error code: ssl_error_rx_record_too_long)

The page you are trying to view can not be shown because the authenticity of
the received data could not be verified.

* Please contact the web site owners to inform them of this problem.


Any idea?
-- 
View this message in context: http://www.nabble.com/Ubuntu-%2B-Apache-%2B-Virtual-host-%2B-Subversion-%2B-SSL-tutorial%3A-error-about-SSL.-tp23502072p23502072.html
Sent from the Apache HTTP Server - Users mailing list archive at Nabble.com.


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: [users@httpd] Ubuntu + Apache + Virtual host + Subversion + SSL tutorial: error about SSL.

Posted by tirengarfio <ti...@hotmail.com>.
Thanks both! It is working now. =)

Ciao

Javi


awarnier wrote:
> 
> tirengarfio wrote:
>> Hi again,
>> 
>>> Or just enter
>>> a2ensite www.domain.com
>> 
>> After that and reload apache (/etc/init.d/apache2 reload) i get this
>> error:
>> 
>> Sintax error on line 22 of /etc/apache2/sites-enabled/svn.domain.com:
>> LogLevel takes one argument, Level of verbosity in error logging 
>> ...fail!
>> 
>> The line 22 is this:
>> 
>> LogLevel warn CustomLog /var/log/apache2/access.log combined
>> 
> Should be 2 separate lines :
> LogLevel warn
> CustomLog /var/log/apache2/access.log combined
> 
> Please check the on-line documentation first, before posting.
> This is really easy to find.
> http://httpd.apache.org/docs/2.2/mod/directives.html
> 
> 
> 
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
> 
> 
> 

-- 
View this message in context: http://www.nabble.com/Ubuntu-%2B-Apache-%2B-Virtual-host-%2B-Subversion-%2B-SSL-tutorial%3A-error-about-SSL.-tp23502072p23633487.html
Sent from the Apache HTTP Server - Users mailing list archive at Nabble.com.


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: [users@httpd] Ubuntu + Apache + Virtual host + Subversion + SSL tutorial: error about SSL.

Posted by André Warnier <aw...@ice-sa.com>.
tirengarfio wrote:
> Hi again,
> 
>> Or just enter
>> a2ensite www.domain.com
> 
> After that and reload apache (/etc/init.d/apache2 reload) i get this error:
> 
> Sintax error on line 22 of /etc/apache2/sites-enabled/svn.domain.com:
> LogLevel takes one argument, Level of verbosity in error logging 
> ...fail!
> 
> The line 22 is this:
> 
> LogLevel warn CustomLog /var/log/apache2/access.log combined
> 
Should be 2 separate lines :
LogLevel warn
CustomLog /var/log/apache2/access.log combined

Please check the on-line documentation first, before posting.
This is really easy to find.
http://httpd.apache.org/docs/2.2/mod/directives.html



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: [users@httpd] Ubuntu + Apache + Virtual host + Subversion + SSL tutorial: error about SSL.

Posted by tirengarfio <ti...@hotmail.com>.
Hi again,

> Or just enter
> a2ensite www.domain.com

After that and reload apache (/etc/init.d/apache2 reload) i get this error:

Sintax error on line 22 of /etc/apache2/sites-enabled/svn.domain.com:
LogLevel takes one argument, Level of verbosity in error logging 
...fail!

The line 22 is this:

LogLevel warn CustomLog /var/log/apache2/access.log combined

Javi
-- 
View this message in context: http://www.nabble.com/Ubuntu-%2B-Apache-%2B-Virtual-host-%2B-Subversion-%2B-SSL-tutorial%3A-error-about-SSL.-tp23502072p23632337.html
Sent from the Apache HTTP Server - Users mailing list archive at Nabble.com.


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: [users@httpd] Ubuntu + Apache + Virtual host + Subversion + SSL tutorial: error about SSL.

Posted by André Warnier <aw...@ice-sa.com>.
Dirk GROSSE OSTERHUES wrote:
> Hej Javi,
> 
> 
> it apprears to me that the tutorial you followed lacks some information.
> In debian the directory /etc/apache2/sites-available/ contains
> definitions of your hosts. Yet, those files are not parsed by apache
> directly. As apache is configured in debian only sites sitting in
> /etc/apache2/sites-enabled/ are activated. So, my advice is to check
> which symlinks currently reside in /etc/apache2/sites-enabled/.
> 
> If the corresponding link isn't there create it as follows and restart
> apache:
> ln -s /etc/apache2/sites-available/www.domain.com
> /etc/apache2/sites-enabled/

Or just enter
a2ensite www.domain.com

As long as you are using the Debian package, you may as well use the 
commands that go with it.
an2ensite
prints help.


> 
> Now, check and post the output of "apache2ctl -S" again.
> 
> 
> HTH
> 
> Dirk
> 
> 
> On 19/5/09 17:53, tirengarfio wrote:
>> Thanks Eric, you wrote:
>>
>>> You can't do SSL and non-SSL with a wildcard like this.  Change your
>>> VirtualHosts and NameVirtualHosts to be of the form *:80 and *:443.
>> But... where should i do those changes ? In "www.domain.com"? This is i
>> wrote inside "www.domain.com" file:
>>
>> NameVirtualHost *:443
>> <VirtualHost *:443>
>>   ServerAdmin yourname@domain.com
>>   ServerName svn.domain.com
>>   SSLEngine On
>>   SSLCertificateFile /etc/apache2/ssl/apache.pem
>>   SSLProtocol all
>>   SSLCipherSuite HIGH:MEDIUM
>>   <Location />
>>     Order allow,deny
>>     Allow from all
>>     DAV svn
>>     SVNPath /srv/svn/repos/projectname
>>     AuthType Basic
>>     AuthName "domain.com Subversion Repository"
>>     AuthUserFile /etc/apache2/dav_svn.passwd
>>     Require valid-user
>>   </Location>
>>   ErrorLog /var/log/apache2/error.log
>>
>>   # Possible values include: debug, info, notice, warn, error, crit, alert,
>> emerg.
>>   LogLevel warn CustomLog /var/log/apache2/access.log combined
>> </VirtualHost>
>>
>>
>>> Turn on SSL in the *:443.
>> SSL is turned on in www.domain.com: "SSLEngine On", do you mean that?
> 
> 


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: [users@httpd] Ubuntu + Apache + Virtual host + Subversion + SSL tutorial: error about SSL.

Posted by Dirk GROSSE OSTERHUES <di...@ke.tu-darmstadt.de>.
Hej Javi,


it apprears to me that the tutorial you followed lacks some information.
In debian the directory /etc/apache2/sites-available/ contains
definitions of your hosts. Yet, those files are not parsed by apache
directly. As apache is configured in debian only sites sitting in
/etc/apache2/sites-enabled/ are activated. So, my advice is to check
which symlinks currently reside in /etc/apache2/sites-enabled/.

If the corresponding link isn't there create it as follows and restart
apache:
ln -s /etc/apache2/sites-available/www.domain.com
/etc/apache2/sites-enabled/

Now, check and post the output of "apache2ctl -S" again.


HTH

Dirk


On 19/5/09 17:53, tirengarfio wrote:
> Thanks Eric, you wrote:
> 
>> You can't do SSL and non-SSL with a wildcard like this.  Change your
>> VirtualHosts and NameVirtualHosts to be of the form *:80 and *:443.
> 
> But... where should i do those changes ? In "www.domain.com"? This is i
> wrote inside "www.domain.com" file:
> 
> NameVirtualHost *:443
> <VirtualHost *:443>
>   ServerAdmin yourname@domain.com
>   ServerName svn.domain.com
>   SSLEngine On
>   SSLCertificateFile /etc/apache2/ssl/apache.pem
>   SSLProtocol all
>   SSLCipherSuite HIGH:MEDIUM
>   <Location />
>     Order allow,deny
>     Allow from all
>     DAV svn
>     SVNPath /srv/svn/repos/projectname
>     AuthType Basic
>     AuthName "domain.com Subversion Repository"
>     AuthUserFile /etc/apache2/dav_svn.passwd
>     Require valid-user
>   </Location>
>   ErrorLog /var/log/apache2/error.log
> 
>   # Possible values include: debug, info, notice, warn, error, crit, alert,
> emerg.
>   LogLevel warn CustomLog /var/log/apache2/access.log combined
> </VirtualHost>
> 
> 
>> Turn on SSL in the *:443.
> 
> SSL is turned on in www.domain.com: "SSLEngine On", do you mean that?


-- 
Dirk große Osterhues <di...@ke.tu-darmstadt.de>
* Hochschulstrasse 10, Room E322, D-64289 Darmstadt
* Tel: ++49 (6151) 16-6634, Fax: ++49 (6151) 16-5482
* PGP-Key-Fingerprint: E92F410DFF8DABA78B6804A75A426BA67F8FAC70

Re: [users@httpd] Ubuntu + Apache + Virtual host + Subversion + SSL tutorial: error about SSL.

Posted by tirengarfio <ti...@hotmail.com>.
Thanks Eric, you wrote:

> You can't do SSL and non-SSL with a wildcard like this.  Change your
> VirtualHosts and NameVirtualHosts to be of the form *:80 and *:443.

But... where should i do those changes ? In "www.domain.com"? This is i
wrote inside "www.domain.com" file:

NameVirtualHost *:443
<VirtualHost *:443>
  ServerAdmin yourname@domain.com
  ServerName svn.domain.com
  SSLEngine On
  SSLCertificateFile /etc/apache2/ssl/apache.pem
  SSLProtocol all
  SSLCipherSuite HIGH:MEDIUM
  <Location />
    Order allow,deny
    Allow from all
    DAV svn
    SVNPath /srv/svn/repos/projectname
    AuthType Basic
    AuthName "domain.com Subversion Repository"
    AuthUserFile /etc/apache2/dav_svn.passwd
    Require valid-user
  </Location>
  ErrorLog /var/log/apache2/error.log

  # Possible values include: debug, info, notice, warn, error, crit, alert,
emerg.
  LogLevel warn CustomLog /var/log/apache2/access.log combined
</VirtualHost>


> Turn on SSL in the *:443.

SSL is turned on in www.domain.com: "SSLEngine On", do you mean that?
-- 
View this message in context: http://www.nabble.com/Ubuntu-%2B-Apache-%2B-Virtual-host-%2B-Subversion-%2B-SSL-tutorial%3A-error-about-SSL.-tp23502072p23619130.html
Sent from the Apache HTTP Server - Users mailing list archive at Nabble.com.


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: [users@httpd] Ubuntu + Apache + Virtual host + Subversion + SSL tutorial: error about SSL.

Posted by Eric Covener <co...@gmail.com>.
On Tue, May 19, 2009 at 6:46 AM, tirengarfio <ti...@hotmail.com> wrote:
>
> Hi Eric,
>
> deltah@gnewsense:/srv/svn/repos$ apache2ctl -S
> apache2: Could not reliably determine the server's fully qualified domain
> name, using 127.0.1.1 for ServerName
> VirtualHost configuration:
> wildcard NameVirtualHosts and _default_ servers:
> *:*                    is a NameVirtualHost
>         default server 127.0.1.1 (/etc/apache2/sites-enabled/000-default:2)
>         port * namevhost 127.0.1.1

You can't do SSL and non-SSL with a wildcard like this.  Change your
VirtualHosts and NameVirtualHosts to be of the form *:80 and *:443.
Turn on SSL in the *:443.

-- 
Eric Covener
covener@gmail.com

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: [users@httpd] Ubuntu + Apache + Virtual host + Subversion + SSL tutorial: error about SSL.

Posted by tirengarfio <ti...@hotmail.com>.
Hi Eric,

deltah@gnewsense:/srv/svn/repos$ apache2ctl -S
apache2: Could not reliably determine the server's fully qualified domain
name, using 127.0.1.1 for ServerName
VirtualHost configuration:
wildcard NameVirtualHosts and _default_ servers:
*:*                    is a NameVirtualHost
         default server 127.0.1.1 (/etc/apache2/sites-enabled/000-default:2)
         port * namevhost 127.0.1.1
(/etc/apache2/sites-enabled/000-default:2)
Syntax OK

I want you to see also what is showed each time i restart apache:

deltah@gnewsense:/srv/svn/repos$ sudo /etc/init.d/apache2 restart
 * Restarting web server apache2                                               
apache2: Could not reliably determine the server's fully qualified domain
name, using 127.0.1.1 for ServerName
apache2: Could not reliably determine the server's fully qualified domain
name, using 127.0.1.1 for ServerName

And this is the beginning of the "/etc/hosts":

127.0.0.1 localhost
127.0.1.1 gnewsense
127.0.0.1 svn.domain.com

Javi




Eric Covener wrote:
> 
> On Mon, May 18, 2009 at 7:18 PM, Eric Covener <co...@gmail.com> wrote:
>> On Mon, May 18, 2009 at 5:54 PM, tirengarfio <ti...@hotmail.com>
>> wrote:
>>>
>>> Thanks, I followed the steps more carefully again, but the error is the
>>> same.., any idea?
>>
>> I offered advice in this thread, did you take any action on it?
>>
>> Can you include the output of apache2ctl if the advice before didn't
>> help?
>>
> 
> Doh -- apache2ctl -S
> 
> 
> 
> -- 
> Eric Covener
> covener@gmail.com
> 
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
> 
> 
> 

-- 
View this message in context: http://www.nabble.com/Ubuntu-%2B-Apache-%2B-Virtual-host-%2B-Subversion-%2B-SSL-tutorial%3A-error-about-SSL.-tp23502072p23613761.html
Sent from the Apache HTTP Server - Users mailing list archive at Nabble.com.


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: [users@httpd] Ubuntu + Apache + Virtual host + Subversion + SSL tutorial: error about SSL.

Posted by Eric Covener <co...@gmail.com>.
On Mon, May 18, 2009 at 7:18 PM, Eric Covener <co...@gmail.com> wrote:
> On Mon, May 18, 2009 at 5:54 PM, tirengarfio <ti...@hotmail.com> wrote:
>>
>> Thanks, I followed the steps more carefully again, but the error is the
>> same.., any idea?
>
> I offered advice in this thread, did you take any action on it?
>
> Can you include the output of apache2ctl if the advice before didn't help?
>

Doh -- apache2ctl -S



-- 
Eric Covener
covener@gmail.com

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: [users@httpd] Ubuntu + Apache + Virtual host + Subversion + SSL tutorial: error about SSL.

Posted by Eric Covener <co...@gmail.com>.
On Mon, May 18, 2009 at 5:54 PM, tirengarfio <ti...@hotmail.com> wrote:
>
> Thanks, I followed the steps more carefully again, but the error is the
> same.., any idea?

I offered advice in this thread, did you take any action on it?

Can you include the output of apache2ctl if the advice before didn't help?

-- 
Eric Covener
covener@gmail.com

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: [users@httpd] Ubuntu + Apache + Virtual host + Subversion + SSL tutorial: error about SSL.

Posted by tirengarfio <ti...@hotmail.com>.
Thanks, I followed the steps more carefully again, but the error is the
same.., any idea?


-- 
View this message in context: http://www.nabble.com/Ubuntu-%2B-Apache-%2B-Virtual-host-%2B-Subversion-%2B-SSL-tutorial%3A-error-about-SSL.-tp23502072p23606046.html
Sent from the Apache HTTP Server - Users mailing list archive at Nabble.com.


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: [users@httpd] Ubuntu + Apache + Virtual host + Subversion + SSL tutorial: error about SSL.

Posted by Eric Covener <co...@gmail.com>.
> SSL received a record that exceeded the maximum permissible length.
>
> (Error code: ssl_error_rx_record_too_long)
>
> The page you are trying to view can not be shown because the authenticity of
> the received data could not be verified.

Make sure your virtual hosts and NameVirtualHosts all specify a port
in the argument, and the ones that are supposed to be SSL need to have
SSL configured.

(your probably taking SSL to a non-SSL port)

-- 
Eric Covener
covener@gmail.com

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

[users@httpd] Re: Ubuntu + Apache + Virtual host + Subversion + SSL tutorial: error about SSL.

Posted by tirengarfio <ti...@hotmail.com>.
Thanks, I followed the steps more carefully again, but the error is the
same.., any idea?

-- 
View this message in context: http://www.nabble.com/Ubuntu-%2B-Apache-%2B-Virtual-host-%2B-Subversion-%2B-SSL-tutorial%3A-error-about-SSL.-tp23502072p23606030.html
Sent from the Apache HTTP Server - Users mailing list archive at Nabble.com.


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org