Bug#267477: apache2: let's sum it up. Quick steps to set it up.

2005-01-23 Thread Olaf van der Spek
> SSLProtocol all
> SSLCipherSuite HIGH:MEDIUM
Those two lines aren't necessary.
The first is the default and the second is in ssl.conf already.
> I think this info should appear in /usr/share/doc/apache2
I think /etc/apache2/sites-available/ssl should be provided, eliminating 
step 4 and 5.

> 7) exec "/etc/init.d/apache2 restart"
Isn't invoke-rc.d apache2 restart the recommended way?
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


Bug#267477: apache2: let's sum it up. Quick steps to set it up.

2005-01-22 Thread txemi

Sorry,  in previous message I forgot a detail in point 5. I rewrite the
complete list:

0) have apache working without SSL (easy: apt-get install apache2)
1) exec "a2enmod ssl"
2) add "Listen 443" to /etc/apache2/ports.conf
3) exec "apache2-ssl-certificate"
4) exec
"cp /etc/apache2/sites-available/default /etc/apache2/sites-available/myow
n-ssl"
5) edit /etc/apache2/sites-available/myown-ssl
change NameVirtualHost * to NameVirtualHost *:443
change  to 
   add this just before 
SSLEngine on
SSLCertificateFile /etc/apache2/ssl/apache.pem
SSLProtocol all
SSLCipherSuite HIGH:MEDIUM
6) exec "a2ensite myown-ssl"
7) exec "/etc/init.d/apache2 restart"

-- 
 __
< hola, soy una firma horrible >
 --
\   ^__^
 \  (oo)\___
(__)\   )\/\
||w |
|| ||

email: [EMAIL PROTECTED]
web: http://txemi.webhop.org



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#267477: apache2: let's sum it up. Quick steps to set it up.

2005-01-22 Thread txemi
Package: apache2
Version: 2.0.52-3
Followup-For: Bug #267477


Well, with all the above information and my own sperience I will put
here the minimum number of steps to get it to work.

0) have apache working without SSL (easy: apt-get install apache2)
1) exec "a2enmod ssl"
2) add "Listen 443" to /etc/apache2/ports.conf
3) exec "apache2-ssl-certificate"
4) exec "cp /etc/apache2/sites-available/default 
/etc/apache2/sites-available/myown-ssl"
5) edit /etc/apache2/sites-available/myown-ssl
change  to 
   add this just before  
SSLEngine on
SSLCertificateFile /etc/apache2/ssl/apache.pem
SSLProtocol all
SSLCipherSuite HIGH:MEDIUM
6) exec "a2ensite myown-ssl"
7) exec "/etc/init.d/apache2 restart"

There are other ways, but I think this is de minimal set of steps if you
want to get it quickly to work. Then you should tune it for yourself. 

I think this info should appear in /usr/share/doc/apache2

txemi.

 __
< hola, soy una firma horrible >
 --
\   ^__^
 \  (oo)\___
(__)\   )\/\
||w |
|| ||

txemi <[EMAIL PROTECTED]>
web: http://txemi.webhop.org

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.10-1-686
Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15)

Versions of packages apache2 depends on:
ii  apache2-mpm-prefork   2.0.52-3   Traditional model for Apache2

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]