Re: Re: [EMAIL PROTECTED] apache and ssl

2006-06-29 Thread Joshua Slive
On 6/29/06, Dave Henderson <[EMAIL PROTECTED]> wrote: I found out that I had to add multiple NameVirtualHost definitions like the following: NameVirtualHost 192.168.0.12:80 NameVirtualHost 192.168.0.12:443 and I also changed the virtual host section to use 192.168.0.12 instead of the 192.16

Fwd: Re: [EMAIL PROTECTED] apache and ssl

2006-06-29 Thread Dave Henderson
gt;To: users@httpd.apache.orgSubject: Re: [EMAIL PROTECTED] apache and ssl Ok, if I try to separate them, I will have to modify my NameVirtualHost definition file to something like:NameVirtualHost: 192.168.0.12:* or NameVirtualHost: 192.168.0.12but if I do that, I get error messages when I try

Re: [EMAIL PROTECTED] apache and ssl

2006-06-29 Thread Dave Henderson
(Sorry for direct response, I didn't know you were being sent an email as well)Pid <[EMAIL PROTECTED]> wrote: Date: Thu, 29 Jun 2006 15:06:29 +0100From: Pid <[EMAIL PROTECTED]>To: Dave Henderson <[EMAIL PROTECTED]>Subject: Re: [EMAIL PROTECTED] apache and ssl I don't thi

Re: [EMAIL PROTECTED] apache and ssl

2006-06-29 Thread Dave Henderson
I do have two NameVirtualHost definitions:NameVirtualHost 192.168.0.12:80 NameVirtualHost 192.168.0.13:443On my firewall, I have port 80 traffic going to 192.168.0.12 and 443 traffic going to 192.168.0.13.  Both ip's are used on the same server by way of assigning multiple ip addresses t

Re: [EMAIL PROTECTED] apache and ssl

2006-06-29 Thread Pid
Does anyone else think that this is wrong? SSLCertificateFile /etc/apache2/ssl/certs/sitename.com.crt SSLCertificateKeyFile /etc/apache2/ssl/keys/sitename.com.key >> SSLCACertificateFile /etc/apache2/ssl/root/sitename.com.crt It looks like you're telling it that the Certifica

RE: [EMAIL PROTECTED] apache and ssl

2006-06-29 Thread Dave Henderson
I am wondering if the virtual host definitions are wrong.  Can I do the following (even though the ServerName options have the same value)?  Can I use the IP addresses like I have done below?    ServerAdmin [EMAIL PROTECTED]     ServerName demo.sitename.com     DocumentRoot

RE: [EMAIL PROTECTED] apache and ssl

2006-06-29 Thread Dave Henderson
Oliver,    Thanks for the info.  I will start to work on the certificate/key situation once I get the some of these other issues worked out.  Are you overly familiar with key creation, etc?Thanks, Dave [EMAIL PROTECTED] wrote: >Joshua,>Here is what is listed in the logs, but this i

Re: [EMAIL PROTECTED] apache and ssl

2006-06-29 Thread Dave Henderson
Joshua,    I looked through the server to see if it were possible to have multiple versions of apache.  Upon looking, I noticed that the apache_common and libapache_mod_php4 packages were installed (for version 1.x of apache), everything else that was installed was for apache 2.x.  I have r

RE: [EMAIL PROTECTED] apache and ssl

2006-06-29 Thread Oliver.Schaudt
>Joshua, >Here is what is listed in the logs, but this is from this morning. I don't >know why this information hasn't been updated: > [Wed Jun 28 11:27:03 2006] [error] Init: Unable to read pass phrase [Hint: > key introduced or changed before restart?] If you don't want to enter the passp

Re: [EMAIL PROTECTED] apache and ssl

2006-06-28 Thread Joshua Slive
On 6/28/06, Dave Henderson <[EMAIL PROTECTED]> wrote: I am still getting the default certificate that comes with the Debian distro (to which I can't even find on the drive). Even though I specifically specify to use the certificates that I created, it still doesn't. Could there be a problem w

RE: [EMAIL PROTECTED] apache and ssl

2006-06-28 Thread Dave Henderson
ROTECTED] >Sent: Wednesday, June 28, 2006 3:24 PM>To: users@httpd.apache.org>Subject: RE: [EMAIL PROTECTED] apache and ssl>>I commented out those two lines, restarted apache, but failed to make any >progress.  I can get to the page without using ssl just fine.  Is there a >way to make

RE: [EMAIL PROTECTED] apache and ssl

2006-06-28 Thread Ellison , John P
>From: Dave Henderson [mailto:[EMAIL PROTECTED] >Sent: Wednesday, June 28, 2006 3:24 PM >To: users@httpd.apache.org >Subject: RE: [EMAIL PROTECTED] apache and ssl > >I commented out those two lines, restarted apache, but failed to make a

Re: [EMAIL PROTECTED] apache and ssl

2006-06-28 Thread Dave Henderson
Joshua,    Here is what is listed in the logs, but this is from this morning.  I don't know why this information hasn't been updated: [Wed Jun 28 11:27:03 2006] [error] Init: Unable to read pass phrase [Hint: key introduced or changed before restart?] [Wed Jun 28 11:27:03 2006] [error]

Re: [EMAIL PROTECTED] apache and ssl

2006-06-28 Thread Joshua Slive
On 6/28/06, Dave Henderson <[EMAIL PROTECTED]> wrote: Joshua, Thanks for the response. I actually did add that syntax to the config right after I posted the message. Now I get prompted for a password when starting apache (which I knew was going to happen). So that tells me that I have ma

RE: [EMAIL PROTECTED] apache and ssl

2006-06-28 Thread Dave Henderson
I commented out those two lines, restarted apache, but failed to make any progress.  I can get to the page without using ssl just fine.  Is there a way to make it so that it can only load that page with ssl?  Any suggestions on everything else?Thanks,Dave"Ellison , John P" <[EMAIL PR

Re: [EMAIL PROTECTED] apache and ssl

2006-06-28 Thread Dave Henderson
Joshua,    Thanks for the response.  I actually did add that syntax to the config right after I posted the message.  Now I get prompted for a password when starting apache (which I knew was going to happen).  So that tells me that I have made some progress.  I am still getting a 501 error w

RE: [EMAIL PROTECTED] apache and ssl

2006-06-28 Thread Ellison , John P
... >    SSLVerifyClient require >    SSLVerifyDepth 1 ... I noticed this in your config. Remove these two parameters. They are requiring a client side certificate exchange which it doesn't sound like you want at this point. Meaning, client identity verification. JP

Re: [EMAIL PROTECTED] apache and ssl

2006-06-28 Thread Joshua Slive
On 6/28/06, Dave Henderson <[EMAIL PROTECTED]> wrote: Gang, I have been working on this issue over the past few days. I am trying to get SSL working with Apache 2.0 (Debian 3.0). I have read through documentation on how to create Root CA's, ssl certificates and keys, etc. I made a r