At 11:53 AM -0500 9/13/01, you wrote:
> On Wednesday, September 12, 2001, at 04:18 PM, Bob Davis wrote:
>
>>OpenSSL 0.9.5a is working - exactly as installed.
>>Server version: Apache/1.3.19 (Darwin)
>>I'm not sure what version of mod_ssl is there (how do I get that?)
>>
>if you uncommented LoadModule and AddModule you should see version
>info in the /var/log/httpd/error_log file when the server starts.
>Release 5G15 says:
>[Thu Sep 13 10:19:15 2001] [notice] Apache/1.3.20 (Darwin)
>mod_ssl/2.8.4 OpenSSL/0.9.6b configured -- resuming normal operations
Yup. That's what I see.
>>It's frustrating. I've fooled around with practically every
>>directive I can think of, I've RTFM, I've looked at every web site
>>I can find.
>>
>>Can anyone tell me what I might have done wrong?
>> SSLCertificateFile /etc/httpd/ssl.key/server.crt
>> SSLCertificateKeyFile /etc/httpd/ssl.key/server.key
>
>are you sure you have the cert and key? Unlike linux versions I
>don't think OSX puts certs/keys here (or anywhere apparently).
Yeah. I generated a new key and cert - self signed and all.
(just checking something....Eureka!)
Ok, here's the problem.
1) I was trying to get to localhost, when I had entered 127.0.0.1
into the httpd.conf and the certs. That won't work, and would explain
the data decryption errors.
2) I wasn't specifically stating that I wanted port 443 (and Mozilla
gave me an error that I was trying to use a secure connection over an
insecure port!) so I needed to append :443 to the request.
3) I think using httpd -D SSL to start might have made a difference,
but I need to check.
>I hope 10.1 is more complete.
I believe it will be.
Thanks for your help!
One more question - If I put Listen 80 in the IfModule mod_ssl.c
clause, will it enable https through port 80?
Thanks.
bob
--
bob davis
[EMAIL PROTECTED]
http://www.bobdavis.org/
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
