Hi!
RedHat Linux 7.1
Apache 1.3.19
Perl 5.005
mod_perl 1.24
embperl
mod_ssl and openssl (precompiled from RedHat Linux 7.1)
I'm trying to establish an SSL link between browser and apache web server.
Before, I had a web page located in two different directories (bla/bla/htdocs/Intro
and /bla/bla/htdocs/CIP). The idea is that the first directory should use the
non-secure server and the second should use the secure server. I only want to use ONE
ip-adress. I tried setting up the following environment in my httpd.conf file:
Listen 443
<VirtualHost ip-adress:443>
DocumentRoot "/bla/bla/htdocs/CIP"
ServerName localhost
SSLEngine on
SSLCertificateFile /etc/httpd/conf/ssl.crt/server.crt
SSLCertificateKeyFile /etc/httpd/conf/ssl.key/server.key
Files ~ "\.(cgi|shtml)$">
SSLOptions +StdEnvVars
</Files>
<Directory "/usr/local/www/data/site.toddle/htdocs/Intro/cgi-bin">
SSLOptions +StdEnvVars
</Directory>
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
Error_log /var/log/httpd/ssl_error_log
CustomLog /var/log/httpd/ssl_request_log \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>
I'm also using AuthCookie to provide authentication procedure in order to enter the
protected directory (..../CIP). I specify the login handling procedures for ../CIP in
the .htaccess file.
I want to be able to access the unprotected documents(http://...) and from them, the
protected documents(https://) without having to write https explicitly.
But with the above configuration, none of the documents require SSL.
When I add the following to my conf file before the virtual host, I get an error
message saying "SSL connection required" in my error_log and I can't enter the
protected directory.
<Directory /CIP>
SSLrequireSSL
</Directory>
Is this something I can specify in the browser I'm using? I'm using a self-signed
certificate along with the generated key.
Does anyone understand my dilemma? the ssl_error_log shows nothing and I can't enter
https://localhost.
I'd be grateful for any help on this matter. I've tried the RedHat secure web server
tutorial but I still don't understand how to configure the webserver for the two
different directories.
Thanks,
Emma
