setup question

Sun, 30 Apr 2006 23:24:20 -0700

I'm having a little trouble with setting up a secure server on windows with openssl and Apache2 + Mod_SSL. This is my first go at setting up secure service, so probably the problem is in my ssl.conf (config file). Though it may be with my openssl and cert setup.
 
I have a working Apache 2 http: setup for my main webpages on port 80
The domain name is www.psychtest.com
 
I wanted to set up secure browsing and place my web-store in a secure directory so that the store can take credit cards.
I set the router to forward port 443 to the server machine.
 
I got Mod SSL installed, got a cert from godaddy.com and installed it.
 
When I browse to http://www.psychtest.com I get my site no problem
 
When I try to browse to https://www.psychtest.com I get a message {{ page cannot be displayed ... file or DNS error }}
 
The config I am attempting to use for the secure directory is as below.
listen 443
...
<VirtualHost *:443>
ServerName www.psychtest.com
DocumentRoot "C:/Homepage/secure"
<Directory "C:/Homepage/secure">
    Options Indexes FollowSymLinks
    AllowOverride None
    Order allow,deny
    Allow from all
</Directory>
 
#   SSL Engine Switch:
#   Enable/Disable SSL for this virtual host.
SSLEngine on
 
#   SSL Cipher Suite:
#   List the ciphers that the client is permitted to negotiate.
#   See the mod_ssl documentation for a complete list.
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
 
#   Server Certificate:
#   Point SSLCertificateFile at a PEM encoded certificate.  If
#   the certificate is encrypted, then you will be prompted for a
#   pass phrase.  Note that a kill -HUP will prompt again.  Keep
#   in mind that if you have both an RSA and a DSA certificate you
#   can configure both in parallel (to also allow the use of DSA
#   ciphers, etc.)
SSLCertificateFile C:/homepage/Certs/www.psychtest.com.crt
#SSLCertificateFile conf/ssl.crt/server-dsa.crt
 
#   Server Private Key:
#   If the key is not combined with the certificate, use this
#   directive to point at the key file.  Keep in mind that if
#   you've both a RSA and a DSA private key you can configure
#   both in parallel (to also allow the use of DSA ciphers, etc.)
SSLCertificateKeyFile C:/homepage/Certs/MyCertifcate.key
#SSLCertificateKeyFile conf/ssl.key/server-dsa.key
 
#   Server Certificate Chain:
#   Point SSLCertificateChainFile at a file containing the
#   concatenation of PEM encoded CA certificates which form the
#   certificate chain for the server certificate. Alternatively
#   the referenced file can be the same as SSLCertificateFile
#   when the CA certificates are directly appended to the server
#   certificate for convinience.
SSLCertificateChainFile C:/homepage/Certs/sf_issuing.crt

 
The setup for my main site (in the httpd.conf file) is as follows.
<VirtualHost *:80>
ServerName www.psychtest.com
DocumentRoot "C:/Homepage/psychtest"
serveralias psychtest.com www.psychtest.com
<Directory "C:/Homepage/psychtest">
    Options Indexes FollowSymLinks
    AllowOverride None
    Order allow,deny
    Allow from all
</Directory>
.
THANK YOU in advance for any light you might shed on this.

Reply via email to