Re: [EMAIL PROTECTED] SSL in Apache 2.2.0

2006-02-07 Thread Kövesdán Gábor
Joe Orton wrote: On Tue, Feb 07, 2006 at 03:43:18PM +0100, Kövesdán Gábor wrote: Joe Orton wrote: I can't reproduce any problems here using your config. For the configuration with "SSLEngine On" in global context, where the server silently fails to start up, can you do: strace -o /

Re: [EMAIL PROTECTED] SSL in Apache 2.2.0

2006-02-07 Thread Joe Orton
On Tue, Feb 07, 2006 at 03:43:18PM +0100, Kövesdán Gábor wrote: > Joe Orton wrote: > >I can't reproduce any problems here using your config. For the > >configuration with "SSLEngine On" in global context, where the server > >silently fails to start up, can you do: > > > >strace -o /tmp/httpd.tra

Re: [EMAIL PROTECTED] SSL in Apache 2.2.0

2006-02-07 Thread Kövesdán Gábor
Joe Orton wrote: On Tue, Feb 07, 2006 at 03:07:07PM +0100, Kövesdán Gábor wrote: Joe Orton wrote: You need "SSLEngine on" somewhere. What error was produced from apachectl? How did it fail to start? There aren't any errors in the error_log you posted. Exactly what I wrot

Re: [EMAIL PROTECTED] SSL in Apache 2.2.0

2006-02-07 Thread Joe Orton
On Tue, Feb 07, 2006 at 03:07:07PM +0100, Kövesdán Gábor wrote: > Joe Orton wrote: > > > >You need "SSLEngine on" somewhere. What error was produced from > >apachectl? How did it fail to start? There aren't any errors in the > >error_log you posted. > > > > > > > Exactly what I wrote. I know

Re: [EMAIL PROTECTED] SSL in Apache 2.2.0

2006-02-07 Thread Kövesdán Gábor
Joe Orton wrote: On Thu, Feb 02, 2006 at 05:54:18PM +0100, Kövesdán Gábor wrote: CustomLog /var/log/apache/httpd-ssl_request.log \ "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b" If I set here (globally) SSLEngine optional or on, Apache didn't even start, and I get this in the er

Re: [EMAIL PROTECTED] SSL in Apache 2.2.0

2006-02-07 Thread Joe Orton
On Thu, Feb 02, 2006 at 05:54:18PM +0100, Kövesdán Gábor wrote: > CustomLog /var/log/apache/httpd-ssl_request.log \ > "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b" > > If I set here (globally) SSLEngine optional or on, Apache didn't even > start, and I get this in the error log: You

[EMAIL PROTECTED] SSL in Apache 2.2.0

2006-02-02 Thread Kövesdán Gábor
Hello, I've upgraded to Apache 2.2.0 from 2.0.x. It didn't accept the old signatures I used with 2.0.x for https. I was told that this cert can't be a cacert anymore, thus I've generated a separate cert and a cacert to sign with. Now, I have these lines in the configuration for SSL: #SSLRand