Find the answer to your Linux question:
Results 1 to 2 of 2
Hello, im trying to set up my webserver with SSL and i have debian linux. I tried to follow this guide: http://www.debian-administration.org/articles/31 but something is going wrong. I created the ...
Enjoy an ad free experience by logging in. Not a member yet? Register.
  1. #1
    Just Joined!
    Join Date
    Oct 2005
    Posts
    2

    Apache SSL help


    Hello, im trying to set up my webserver with SSL and i have debian linux.

    I tried to follow this guide:
    http://www.debian-administration.org/articles/31

    but something is going wrong.

    I created the certificate and everything then I added this
    This is in the front of the file

    LoadModule ssl_module /usr/lib/apache/1.3/mod_ssl.so
    this is AT THE VERY END to my httpd.conf file (which im not sure if it matters the order of things in this file)


    <IfModule mod_ssl.c>

    ##
    ## SSL Global Context
    ##
    ## All SSL configuration in this context applies both to
    ## the main server and all SSL-enabled virtual hosts.
    ##


    Listen 443

    #
    # Some MIME-types for downloading Certificates and CRLs
    #
    AddType application/x-x509-ca-cert .crt
    AddType application/x-pkcs7-crl .crl

    # Pass Phrase Dialog:
    # Configure the pass phrase gathering process.
    # The filtering dialog program (`builtin' is a internal
    # terminal dialog) has to provide the pass phrase on stdout.
    SSLPassPhraseDialog builtin

    # Inter-Process Session Cache:
    # Configure the SSL Session Cache: First either `none'
    # or `dbm:/path/to/file' for the mechanism to use and
    # second the expiring timeout (in seconds).
    #SSLSessionCache none
    #SSLSessionCache shm:logs/ssl_scache(512000)
    SSLSessionCache dbm:/var/run/ssl_scache
    SSLSessionCacheTimeout 300

    # Semaphore:
    # Configure the path to the mutual explusion semaphore the
    # SSL engine uses internally for inter-process synchronization.
    SSLMutex file:/var/run/ssl_mutex

    # Pseudo Random Number Generator (PRNG):
    # Configure one or more sources to seed the PRNG of the
    # SSL library. The seed data should be of good random quality.
    # WARNING! On some platforms /dev/random blocks if not enough entropy
    # is available. This means you then cannot use the /dev/random device
    # because it would lead to very long connection times (as long as
    # it requires to make more entropy available). But usually those
    # platforms additionally provide a /dev/urandom device which doesn't
    # block. So, if available, use this one instead. Read the mod_ssl User
    # Manual for more details.
    SSLRandomSeed startup builtin
    SSLRandomSeed connect builtin
    #SSLRandomSeed startup file:/dev/random 512
    #SSLRandomSeed startup file:/dev/urandom 512
    #SSLRandomSeed connect file:/dev/random 512
    #SSLRandomSeed connect file:/dev/urandom 512

    # Logging:
    # The home of the dedicated SSL protocol logfile. Errors are
    # additionally duplicated in the general error log file. Put
    # this somewhere where it cannot be used for symlink attacks on
    # a real server (i.e. somewhere where only root can write).
    # Log levels are (ascending order: higher ones include lower ones):
    # none, error, warn, info, trace, debug.
    #SSLLog /var/log/apache/ssl_engine_log
    #SSLLogLevel info

    </IfModule>
    And after this is:

    <VirtualHost newvhost.domain.org:443>
    <IfModule mod_ssl.c>

    SSLEngine on
    SSLCertificateFile /etc/apache/ssl.crt/server.crt
    SSLCertificateKeyFile /etc/apache/ssl.key/server.key
    SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
    </IfModule>
    </VirtualHost>
    Then when i stop and start the server i get this:

    Starting web server: apache[Sat Oct 8 13:38:14 2005] [warn] module ssl_module is already loaded, skipping
    .
    and i cannot look at my site @ https://joshua.isa-geek.com

    any help plz?

  2. #2
    Super Moderator Roxoff's Avatar
    Join Date
    Aug 2005
    Location
    Nottingham, England
    Posts
    3,807
    Hmmm, very odd...

    I _can_ access that site from outside on the internet, but you cant? It's probably an IP addressing issue rather than one to do with the config of your apache server, i.e. your machine is doing resolving joshua.isa-geek.com as its internet IP address, then going out to the internet for that site, and that's not getting through your router properly.

    Try making a link to joshua.isa-geek.com to localhost (127.0.0.1) in your /etc/hosts file.

    Oh, and nice site, btw.
    Linux user #126863 - see http://linuxcounter.net/

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •