I believe the default behavior of Apache is to load anything in the /etc/httpd/conf.d/ directory that has a .conf extension. You might try moving the ssl.conf file somewhere else.
Curt On Fri, Feb 26, 2010 at 9:28 AM, Bruce W. Martin <marti...@gmail.com> wrote: > On Feb 26, 2010, at 9:20 AM, Curt Lundgren wrote: > > > What distro are you running? On Red Hat et al, the SSL configuration is > > usually found in /etc/httpd/conf.d/ typically as ssl.conf. > > > > Curt > > RHEL 4. Yes, there is a /etc/httpd/conf.d/ssl.conf file but I don't think > it is being used as I changed the name of the file and restarted the daemon > and there was no error about the file being missing and there is nothing > concerning either the working or non working sites in the file. > > Bruce > > > > > On Fri, Feb 26, 2010 at 9:17 AM, Bruce W. Martin <marti...@gmail.com> > wrote: > > > >> I have a server with two NICs on different IP addresses hosting two > Virtual > >> hosts on Apache using SSL certificates from GeoTrust. > >> > >> One of the sites (pacs) has had a certificate for the last few years and > >> has been renewed a couple of times and works just fine. > >> The other site (svn) had a certificate that had expired. I put in a self > >> signed certificate that had been created a few years ago but it was > decided > >> that we needed to get a proper certificate for the site. On Monday > (2/22) I > >> went through the process of creating a new certificate and get it > installed. > >> I had a couple of issues with SElinux because I originally created the > key > >> outside the /etc/httpd/conf directory and moved it to the proper > directory > >> and SElinux balked at allowing the server to start until I told SElinux > that > >> the file was OK. Finally restarted the http daemon and went to the site > to > >> make sure everything was working fine. The site gives the dreaded "This > site > >> is not trusted page" with a self signed certificate with the proper > common > >> name and a Validity date of 2/18/10, four days before I started this > >> process. I have had the certificate reissued twice and confirmed that > the > >> httpd.conf file that I am editing was the one used to start the daemon. > I > >> cannot find a certificate that matches what is being served up by the > page. > >> I have confirmed IP addresses and hostname point to the right machine. I > >> have been in contact with GeoTrust about this and run several google > >> searches and combed through Apache and SSL docs and FAQs but nothing has > >> shed a light on solving this problem. > >> > >> Has anyone ever seen this kind of thing or has suggestions on something > >> else to look for or try? > >> > >> Thanks, > >> > >> Bruce > >> > >> > >> -- > >> Bruce W. Martin, KQ4TV > >> Mt. Juliet, TN > >> EM66sf > >> > >> -- > >> You received this message because you are subscribed to the Google > Groups > >> "NLUG" group. > >> To post to this group, send email to nlug-talk@googlegroups.com > >> To unsubscribe from this group, send email to > >> nlug-talk+unsubscr...@googlegroups.com<nlug-talk%2bunsubscr...@googlegroups.com> > <nlug-talk%2bunsubscr...@googlegroups.com<nlug-talk%252bunsubscr...@googlegroups.com> > > > >> For more options, visit this group at > >> http://groups.google.com/group/nlug-talk?hl=en > >> > > > > -- > > You received this message because you are subscribed to the Google Groups > "NLUG" group. > > To post to this group, send email to nlug-talk@googlegroups.com > > To unsubscribe from this group, send email to > nlug-talk+unsubscr...@googlegroups.com<nlug-talk%2bunsubscr...@googlegroups.com> > > For more options, visit this group at > http://groups.google.com/group/nlug-talk?hl=en > > -- > You received this message because you are subscribed to the Google Groups > "NLUG" group. > To post to this group, send email to nlug-talk@googlegroups.com > To unsubscribe from this group, send email to > nlug-talk+unsubscr...@googlegroups.com<nlug-talk%2bunsubscr...@googlegroups.com> > For more options, visit this group at > http://groups.google.com/group/nlug-talk?hl=en > -- You received this message because you are subscribed to the Google Groups "NLUG" group. To post to this group, send email to nlug-talk@googlegroups.com To unsubscribe from this group, send email to nlug-talk+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/nlug-talk?hl=en
