Dotaz: Apache2 a ssl

[exim]

Zdravím, snažím se rozeběhnout https na apache ale nějk se mi nedaří.

Zkoušel sem to podle http://library.linode.com/web-servers/apache/ssl-guides/ubuntu-10.04-lucid, vše mám i virtual host
<code>
<VirtualHost *:80>
ServerName www.najvtipy.eu
ServerAlias najvtipy.eu *.najvtipy.eu

DocumentRoot /var/www/www/najvtipy-eu

<Directory />
Options FollowSymLinks
AllowOverride None
</Directory>

<Directory /var/www/www/najvtipy-eu>
Options FollowSymLinks MultiViews
AllowOverride All
Order allow,deny
allow from all
</Directory>

ErrorLog /var/www/log/najvtipy-eu.error.log

LogLevel warn

CustomLog /var/www/log/najvtipy-eu.access.log combined

RewriteEngine on
RewriteCond %{HTTP_HOST} ^([^\.]+)\.najvtipy\.eu
RewriteCond /var/www/www/najvtipy-eu/%1 -d
RewriteRule ^(.*) /%1/$1 [L]

RewriteCond %{HTTP_HOST}        !^www\.najvtipy\.eu [NC]
RewriteCond %{HTTP_HOST}        !^$
RewriteRule ^/(.*)              http://www.najvtipy.eu/$1 [L,R]


</VirtualHost>




<IfModule mod_ssl.c>
<VirtualHost *:443>
ServerName fb.najvtipy.eu
DocumentRoot /var/www/www/najvtipy-eu/fb/

<Directory />
Options FollowSymLinks
AllowOverride None
</Directory>
<Directory /var/www/www/najvtipy-eu/fb/>
Options Indexes FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
allow from all
</Directory>

ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
<Directory "/usr/lib/cgi-bin">
AllowOverride None
Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
Order allow,deny
Allow from all
</Directory>

ErrorLog /var/log/apache2/error.log

# Possible values include: debug, info, notice, warn, error, crit,
# alert, emerg.
LogLevel warn

CustomLog /var/log/apache2/ssl_access.log combined

Alias /doc/ "/usr/share/doc/"
<Directory "/usr/share/doc/">
Options Indexes MultiViews FollowSymLinks
AllowOverride None
Order deny,allow
Deny from all
Allow from 127.0.0.0/255.0.0.0 ::1/128
</Directory>

#   SSL Engine Switch:
#   Enable/Disable SSL for this virtual host.
SSLEngine on
#   A self-signed (snakeoil) certificate can be created by installing
#   the ssl-cert package. See
#   /usr/share/doc/apache2.2-common/README.Debian.gz for more info.
#   If both key and certificate are stored in the same file, only the
#   SSLCertificateFile directive is needed.
SSLCertificateFile /etc/apache2/ssl/apache.pem
SSLCertificateKeyFile /etc/apache2/ssl/apache.key

<FilesMatch "\.(cgi|shtml|phtml|php)$">
SSLOptions +StdEnvVars
</FilesMatch>
<Directory /usr/lib/cgi-bin>
SSLOptions +StdEnvVars
</Directory>


BrowserMatch "MSIE [2-6]" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
# MSIE 7 and newer should be able to use keepalive
BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown

</VirtualHost>
</IfModule>
</code>

ale kdyz zadam https://adresa tak mi to napise ze stranku nelze zobrazit... Co s tím? :(

Odpovědi

[jirkamailto]

Co Ti to konkretne vypise? Vyhodi to SSL error nebo proste 404 not found. Podivej se do logu co se deje. Zkontroluj cesty k aplikaci, 80 funguje?

[jirkamailto]

Jeste me napadlo, podivej se na ports.conf v konfiguraci apache, jestli tam mas nastavene, aby apache poslouchal na portu 443, a nakonec take zkontroluj firewall, jestli nemas 443 port zablokovany.

[MMMMMMMMM]

http://fb.najvtipy.eu:443/ ... OK, reaguje
https://fb.najvtipy.eu/ ... Nejde a v Google Chrome píše chybu SSL protokolu

[exim]

to znamena?

[Petr Šobáň]

A kde máš vygenerované certifikáty a klíče atd...

A co to vypíše za chyby? (konkrétní z logu apache)

Bez konkrétní chyby nelze nic říct.

Většinou po instalaci balíčku ssh pro apache vše chodí na první zapnutí.

[exim]

Tak chyby to píše jen tyto: 93.89.xx.xx - - [22/Nov/2012:18:45:30 +0100] "GET / HTTP/1.1" 200 651 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/17.0 Firefox/17.0"

tato se opakuje u všeho nic jiného... Klíče a cert mám v /etc/apache2/ssl/apache.pem a apache.key

Bohužel stále nic

[ET]

vypis vyse vypada jako access_log - koukni do error logu...

koukni se jestli apache vubec posloucha "netstat -anp| grep :443" popr zkoukni firewall a zkus telnetem

[exim]

listen tam vubec nemam... :/ ani na 80 :O

[JMP]

sudo a2enmod ssl