| iptables and https
|
dunnma
msg:4102513 | 6:59 pm on Mar 22, 2010 (gmt 0) |
So I am pretty sure that I have the https port open, yet whenever I go to one of my domains with https://domain.com I get a connection refused. I am not having any problems with anything else.
Did I miss a step in setting up DNS, or Apache, or do I have a problem with iptables?
Note, I do not actually own an SSL certificate...just working on getting to that point.
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere
REJECT all -- anywhere 127.0.0.0/8 reject-with icmp-port-unreachable
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp dpt:http
ACCEPT tcp -- anywhere anywhere tcp dpt:https
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:100
ACCEPT tcp -- anywhere anywhere tcp dpt:smtp
ACCEPT tcp -- anywhere anywhere tcp dpt:imaps
ACCEPT icmp -- anywhere anywhere icmp echo-request
REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
ACCEPT tcp -- anywhere anywhere tcp dpt:ftp
Chain FORWARD (policy ACCEPT)
target prot opt source destination
REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere
Chain RH-Firewall-1-INPUT (0 references)
target prot opt source destination
|
phranque
msg:4102544 | 7:31 pm on Mar 22, 2010 (gmt 0) |
have you checked your firewall settings to insure that port is open?
|
lammert
msg:4102545 | 7:32 pm on Mar 22, 2010 (gmt 0) |
Hi dunnma,
One of the things might be that the firewall is accepting your request, but that Apache is not yet setup to handle the traffic to port 443. You may try to setup a temporary certificate and test with that one. Once the communication works, you can install a real certificate.
|
dunnma
msg:4102565 | 7:47 pm on Mar 22, 2010 (gmt 0) |
Thanks guys. I went back and redid my settings. I then checked another server that had the exact same setup and it worked fine.
This then led me to find out that I did not have mod_ssl installed on this server. I installed it, restarted apache and I am in business.
Thanks!
|
|
|
