I try not to post here unless I've spent at least a day trying to
troubleshoot on my own.  Sorry for the long-winded post, but I figure
the more details the better...

Some of you may remember that I've attempted this setup before and
"supposedly" came up with a working configuration, but I don't think I
was doing things correctly, and I'm now running into hang-ups trying
again.  I can't just duplicate my old configuration; details upon
request.

I am running CentOS Linux 5.7 and Apache 2.2.3.  I used the OpenBD
Installer from http://wiki.openbluedragon.org/wiki/index.php/OpenBD_Installer.
My goal is to have two virtual hosts to two different OpenBD
directories, one for regular traffic and one for SSL (currently using
a self-signed cert).  I've read tons of different tutorials on how to
set this up, but I can't seem to get mine running.  My directory
structure is as follows...

/opt/openbd
 - tomcat
 - - webapps
 - - - siteA
 - - - siteSSL

in /etc/hosts, I have openbd.local and openbd.secure both defined as
127.0.0.1.  The following is in my httpd.conf file...

--------------------------------

<VirtualHost *:80>
    ServerName openbd.local
    ProxyPass / http://openbd.local:8888/
    ProxyPassreverse / http://openbd.local:8888/
    HostnameLookups Off
</VirtualHost>

<VirtualHost *:443>
    ServerName openbd.secure
    ProxyPass / http://openbd.secure:8888/
    ProxyPassReverse / http://openbd.secure:8888/
    HostNameLookups off
    SSLEngine on
    SSLCertificateFile /install/selfCert.crt
    SSLCertificateKeyFile /install/selfCert.pem
    # the following line was added while troubleshooting
    DocumentRoot /opt/openbd/tomcat/webapps/siteSSL
</VirtualHost>

<IfModule !mod_jk.c>
    LoadModule jk_module /usr/lib/httpd/modules/mod_jk.so
</IfModule>

<IfModule mod_jk.c>
    JkMount /*.cfm ajp13
    JkMount /*.cfc ajp13
    JkMount /*.do ajp13
    JkMount /*.jsp ajp13
    JkMount /*.cfchart ajp13
    JkMount /*.cfres ajp13
    JkMount /*.cfm/* ajp13
    JkMount /*.cfml/* ajp13
    JkMountCopy all
    JkLogFile /var/log/httpd/mod_jk.log
</IfModule>

--------------------------------

My tomcat server.xml file has the following...

--------------------------------

<Host name="openbd.local" appBase="webapps"
             unpackWARs="true" autoDeploy="true"
             xmlValidation="false" xmlNamespaceAware="false">
             <Context path="" docBase="/opt/openbd/tomcat/webapps/
siteA" />
</Host>
<Host name="openbd.secure" appBase="webapps"
             unpackWARs="true" autoDeploy="true"
             xmlValidation="false" xmlNamespaceAware="false">
             <Context path="" docBase="/opt/openbd/tomcat/webapps/
siteSSL" />
</Host>

--------------------------------

With this config, siteA works perfectly (http://myIP/).  Thank you
Nitai for that excellent tutorial video.  But if I go to https://myIP/,
I just see the Apache default page.  Now what's odd is can go to
https://myIP/siteSSL/index.cfm and see my SSL site, which makes no
sense to me since my Tomcat's openbd.secure Host is suppose to point
INTO the siteSSL directory.  At first I suspected the appBase
attribute needed to point to my actual directory, but then that
doesn't explain why siteA works flawlessly.  I tried changing appBase
anyway to "webapps/siteSSL" and restarted Apache and OpenBD/Tomcat
with no change in behavior.  I also added that DocumentRoot line to my
*.443 VirtualHost with no luck.

I can use my server's HTTP portal to navigate to http://openbd.secure:8888/
and it pulls up my siteSSL perfectly, so I'm convinced Tomcat's Host
is config'd correctly, and either something is wrong with my Apache
host or the way Apache and Tomcat are talking.  In my *.443
VirtualHost, I tried replacing http://openbd.secure:8888/ with
ajp://openbd.secure:8009/ and made sure the 8009 connector was
uncommented in server.xml (as demonstrated on some online tutorial),
with no luck.

One other note, on Apache, neither the default 443 virtual host nor
the default server (intended to catch all unhandled requests) are set
to point to the directory that https://myIP/ seems to take me to.

Sorry again for the long-winded post, and for once again bringing up
this same issue as before.

 - Matt C

-- 
official tag/function reference: http://openbd.org/manual/
 mailing list - http://groups.google.com/group/openbd?hl=en

Reply via email to