Hi folks -

I'm trying to set up dev machine with Apache and mod_ssl.
Using openssl s_client -connect 127.0.0.1:443 I can get to the 
machine, and establish a secure connection. However, when I issue the 
get / http/1.1 command, I get an error page - 501, method not 
implemented.

OpenSSL 0.9.5a is working - exactly as installed.
Server version: Apache/1.3.19 (Darwin)
I'm not sure what version of mod_ssl is there (how do I get that?)

It's frustrating. I've fooled around with practically every directive 
I can think of, I've RTFM, I've looked at every web site I can find.

Can anyone tell me what I might have done wrong?

Here's what I have for directives (it's a dev box, not open to the 
world, so there are no  security issues in sharing this)

I've commented out the "Port 80" directive, have put in the AddModule 
and LoadModule directives, and have added:

Listen 80
<IfModule mod_ssl.c>
        Listen 443
</IfModule>

And here's the IfModule block (watch for wrap - if you see anything 
that's wrapped, it's prolly just your client):

<IfModule mod_ssl.c>
# Some MIME-types for downloading Certificates and CRLs
        AddType application/x-x509-ca-cert .crt
        AddType application/x-pkcs7-crl .crl

# inintial Directives for SSL

        SSLProtocol all -SSLv3
        SSLPassPhraseDialog builtin
        SSLSessionCache dbm:/var/run/ssl_scache
        SSLSessionCacheTimeout 300
        SSLMutex file:/var/run/ssl_mutex
        SSLRandomSeed startup builtin
        SSLLog /var/log/httpd/ssl_engine_log
        SSLLogLevel info
##
## SSL Virtual Host Context
##
<VirtualHost 127.0.0.1:80>
        #Just to keep things sane...
                DocumentRoot "/Library/WebServer/Documents"
                ServerName 127.0.0.1
                ServerAdmin [EMAIL PROTECTED]
                SSLEngine off
</VirtualHost>
<VirtualHost 127.0.0.1:443>
        # General setup for the virtual host
                DocumentRoot "/Library/WebServer/Documents"
                ServerName 127.0.0.1
                ServerAdmin [EMAIL PROTECTED]
        ErrorLog /var/log/httpd/error_log
        TransferLog /var/log/httpd/access_log
                # SSL Engine Switch:
                # Enable/Disable SSL for this virtual host.
        SSLEngine on
        SSLProtocol all -SSLv3
        SSLCipherSuite 
        ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
        SSLCertificateFile /etc/httpd/ssl.key/server.crt
        SSLCertificateKeyFile /etc/httpd/ssl.key/server.key
#       SSLCACertificateFile /etc/httpd/ssl.key/ca.crt
        <Files ~ "\.(cgi|shtml|phtml|php3?)$">
                SSLOptions +StdEnvVars
        </Files>
        <Directory "/Library/WebServer/CGI-Executables">
                SSLOptions +StdEnvVars
        </Directory>
# correction for brain dead browsers
        SetEnvIf User-Agent ".*MSIE.*" \
        nokeepalive ssl-unclean-shutdown \
        downgrade-1.0 force-response-1.0
                # Per-Server Logging:
                # The home of a custom SSL log file. Use this when you want a
                # compact non-error SSL logfile on a virtual host basis.
        CustomLog /var/log/httpd/ssl_request_log \
        "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>
</IfModule>

Any ideas?

Thanks. (trying to learn this *nix stuff!)

bob


-- 
bob davis
[EMAIL PROTECTED]
http://www.bobdavis.org/
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to