Forum Moderators: phranque

Message Too Old, No Replies

SSL and Apache

Having trouble getting a certifcate installed

         

Bigfunkychief

12:58 am on Oct 8, 2005 (gmt 0)

10+ Year Member



I'm probably trying something simple, but I'm stumped! I'm trying to create an SSL protected site on my local Apache webserver. For the outside world, this server's internal IP will be NATed to an external IP....for now, I'm just trying to get it to work internally.

Running Fedora Core 4, I have Apache working and can access my localsite via http like this:

[mysite...]

My httpd.conf has the following :

<VirtualHost 192.168.1.90:80>
ServerName messages
DocumentRoot /var/www/messages

which works fine.

For the SSL config, I've installed a trial certificate, which I setup under the domain messages.mysite.com. I put the keys in the directories listed below. In my httpd.conf, I've created the entry (httpd starts fine) :

<VirtualHost 192.168.1.90:443>
ServerName messages.mysite.com
DocumentRoot /var/www/messages
SSLEngine On
SSLCertificateFile /etc/pki/tls/certs/messages.crt
SSLCertificateKeyFile /etc/pki/tls/private/messages.key

I created a hosts entry for messages.mysite.com to point to the above IP, but I can't access the SSL site.

Any pointers on what I could check? I'm sure it's something simple, but I've spent 2 days on this and it's time to ask the experts!

Thanks!
BFC

Bigfunkychief

12:59 am on Oct 8, 2005 (gmt 0)

10+ Year Member



I noticed a typo....I can access my http site via

[messages...]

Bigfunkychief

3:37 pm on Oct 11, 2005 (gmt 0)

10+ Year Member



Issue resolved. For future reference, I was not getting anything in my logs about errors (/var/log/httpd logs)....which led me to believe my request was not even hitting the server, which led me to the 'default' firewall configuration I had installed when I installed Fedora Core 4...which led me to turning off the firewall (by running iptables -F command)....and voila, everything works great.