Hi all,
 
I have problems with ssl on my apache server (rh 6.1)
The certicicate has been created with make certificate
On launch with apachectl startssl i enter the passphrase and everything seems to be correct, the server starts-up giving as output :
 
Server my.server.name:443 (RSA)
Enter pass phrase:
Ok: Pass Phrase Dialog successful.
./apachectl startssl: httpd started
 
But when i try to connect to it using https:// i receive no answer. I also tried to scan the ports and it seems that port 443 is not open.
This is the ssl related section of my httpd.conf file:
<IfDefine SSL>
Listen 80
Listen 443
AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl    .crl
</IfDefine>
 
SSLPassPhraseDialog  builtin
SSLSessionCache         dbm:/usr/local/apache/logs/ssl_scache
SSLSessionCacheTimeout  300
SSLMutex  file:/usr/local/apache/logs/ssl_mutex
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
 
SSLLog /usr/local/apache/logs/ssl_engine_log
SSLLogLevel info
 
<IfDefine SSL>
<VirtualHost 192.168.0.225:443>
DocumentRoot /www/htdocs/
ErrorLog /usr/local/apache/logs/error_log
TransferLog /usr/local/apache/logs/access_log
SSLEngine on
SSLVerifyClient require
SSLCertificateFile /usr/local/apache/conf/ssl.crt/server.crt
SSLCertificateKeyFile /usr/local/apache/conf/ssl.key/server.key
SSLLogFile /usr/local/apache/logs/ssl_misc_log
 
<Files ~ "\.(cgi|shtml)$">
    SSLOptions +StdEnvVars
</Files>
<Directory "/usr/local/apache/cgi-bin">
    SSLOptions +StdEnvVars
</Directory>
 
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
 
</VirtualHost>
</IfDefine>
 
This is the log in ssl_engine_log :
 
[11/Apr/2000 08:11:30 01141] [info]  Server: Apache/1.3.12, Interface: mod_ssl/2.6.2, Library: OpenSSL/0.9.5a
[11/Apr/2000 08:11:30 01141] [info]  Init: 1st startup round (still not detached)
[11/Apr/2000 08:11:30 01141] [info]  Init: Initializing OpenSSL library
[11/Apr/2000 08:11:33 01141] [info]  Init: Wiped out the queried pass phrases from memory
[11/Apr/2000 08:11:33 01141] [info]  Init: Seeding PRNG with 136 bytes of entropy
[11/Apr/2000 08:11:33 01141] [info]  Init: Generating temporary RSA private keys (512/1024 bits)
[11/Apr/2000 08:11:34 01141] [info]  Init: Configuring temporary DH parameters (512/1024 bits)
 
 
When i manually test ssl with the command : # ./openssl s_client -connect localhost:443 -state -debug
i receive the answer :
connect: Connection refused
connect:errno=111
 
Anyone could give me some help?
 
Thanks in advance
 
Vagel Argyrakis
 

Reply via email to