Re: [users@httpd] How to enable 443 on apache2 using provided key files

2017-02-05 Thread rich . greder
It turns out the approach I described did in fact work. The password was requested from the administrator and the site behaved well. The only deviation I had to make was that the SSLCACertificateFile parameter interpreted a space in the filename as delimiting a second invalid parameter. The f

Re: [users@httpd] client denied by server configuration: /var/www/html/roundcubemail/

2017-02-03 Thread rich . greder
Mr. Toscano forgot to add the error message. I messaged him about it and have been assisting off-list I suggested him to enter private browsing/incognito mode and try to reproduce the errors. Also suggested him to inspect the permissions/ownership of the RoundCube files and see if they are ow

Re: [users@httpd] How to enable 443 on apache2 using provided key files

2017-02-02 Thread rich . greder
On 2/2/2017 at 1:27 PM, "Erik Dobák" wrote: > >well i am still unsure abut the full encryption. i don't like >that. if >there is a problem the overheads grow to analyze the situation. >what about >just signing the messages? i mean if you have messages for all why >do you >want to hide them? >

[users@httpd] How to enable 443 on apache2 using provided key files

2017-02-02 Thread rich . greder
Hello, There is a freshly installed (from Ubuntu 16.04 package) apache server running in a large institution that needs to have port 443 traffic enabled. I am helping a friend of mine configure this server and, at the same time, writing a document for reproducing the installation procedure tha

Re: [users@httpd] LetsEncrypt.org with Virtual Hosting

2016-06-15 Thread rich . greder
On 6/14/2016 at 9:42 PM, "Mathijs Schmittmann" wrote: > >Hi Filipe, >> >> > Notice that SSLCertificateFile and SSLCertificateKeyFile are >the >> > same for both of the domains, because they use the same key of >> > example.com . The website, example.com >> >

Re: [users@httpd] LetsEncrypt.org with Virtual Hosting

2016-06-15 Thread rich . greder
On 6/14/2016 at 9:39 PM, "Christopher Schultz" wrote: > >Filipe, > >On 6/14/16 3:15 PM, Filipe Cifali wrote: >> Your are probably hitting the wrong cert file, check with: >> >> |openssl s_client -connect example.info:443 >> | >> >> You can also try to disable the firs

Re: [users@httpd] LetsEncrypt.org with Virtual Hosting

2016-06-15 Thread rich . greder
Thanks for the tip. I never knew about this feature (openssl, encryption in general is new to me). At the bottom of this reply is the first, and most interesting part of the standard out. Yes, it does return the cert for example.com, but I thought that example.info was included with that in i

[users@httpd] LetsEncrypt.org with Virtual Hosting

2016-06-14 Thread rich . greder
For some time, I have been hosting about 10 sites unencrypted. But since people other than just myself will be using my squirrelmail, I decided to encrypt my server. I had delayed it simply because keys are too expensive to buy, but now I learned about LetsEncrypt.org and have been working in