Re: SSL by Domain Name Error
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 more likely www.mydomain.com is not in DNS, perhaps trying this works: https://mydomain.com If that works it is DNS issues. Thanks, Ron DuFresne On Tue, 19 Jun 2007, Omar W. Hannet wrote: I'll bet you're right when you say your provider may not be forwarding https requests properly. I'd run this one past them and see what they have to say about it. Rob Archer wrote: When accessing it by ip address using the debug option of openssl it returns what you would expect (i.e. the text of the key certificate). When accessing by domain name it says :- Loading 'screen' into random state - done Connect: bad file descriptor Connect:errno=10060 I assume this is the equivalent of the Internet Explorer cannot display the webpage error in IE !!! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Omar W. Hannet Sent: 19 June 2007 17:07 To: modssl-users@modssl.org Subject: Re: Ref : RE: Ref : RE: Ref : RE: SSL by Domain Name Error Rob Archer wrote: No entry for https and domain name in the access.log and a Internet Explorer cannot display the webpage in ie when trying to get to the server. Do you have access to the openssl command line program? It would tell you whether you are making a connection, and possibly shed some light on the problem. Like this: openssl s_client -connect www.mydomain.com:443 -debug GET / __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List modssl-users@modssl.org Automated List Manager[EMAIL PROTECTED] - -- ~~ admin senior security consultant: sysinfo.com http://sysinfo.com Key fingerprint = 9401 4B13 B918 164C 647A E838 B2DF AFCC 94B0 6629 ...We waste time looking for the perfect lover instead of creating the perfect love. -Tom Robbins Still Life With Woodpecker -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) iD8DBQFGer8Qst+vzJSwZikRAqLUAKDUuvO8OPDrUqBCSRcVBzIMqQqD3QCgkknb OfdmiAQeSnhLiCJFg4hsVlQ= =ItZS -END PGP SIGNATURE- __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List modssl-users@modssl.org Automated List Manager[EMAIL PROTECTED]
RE: SSL by Domain Name Error
Just to let you all know I spoke to the domain name hosting company and the DNS setting wasn't correct. Traffic is forwarded to our server but our A name record didn't point to the correct ip address of the web server and tech support was surprised it was working. Will update the A name record and hopefully all should work !!! Thanks for the replies !!! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rob Archer Sent: 19 June 2007 17:37 To: modssl-users@modssl.org Subject: RE: SSL by Domain Name Error I'll have a word with them tomorrow see what they say !!! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Omar W. Hannet Sent: 19 June 2007 17:28 To: modssl-users@modssl.org Subject: Re: SSL by Domain Name Error I'll bet you're right when you say your provider may not be forwarding https requests properly. I'd run this one past them and see what they have to say about it. Rob Archer wrote: When accessing it by ip address using the debug option of openssl it returns what you would expect (i.e. the text of the key certificate). When accessing by domain name it says :- Loading 'screen' into random state - done Connect: bad file descriptor Connect:errno=10060 I assume this is the equivalent of the Internet Explorer cannot display the webpage error in IE !!! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Omar W. Hannet Sent: 19 June 2007 17:07 To: modssl-users@modssl.org Subject: Re: Ref : RE: Ref : RE: Ref : RE: SSL by Domain Name Error Rob Archer wrote: No entry for https and domain name in the access.log and a Internet Explorer cannot display the webpage in ie when trying to get to the server. Do you have access to the openssl command line program? It would tell you whether you are making a connection, and possibly shed some light on the problem. Like this: openssl s_client -connect www.mydomain.com:443 -debug GET / __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List modssl-users@modssl.org Automated List Manager[EMAIL PROTECTED] Click https://www.mailcontrol.com/sr/wQw0zmjPoHdJTZGyOCrrhg== NoIrNOBa4kXlVepWQxhvS70n7wnaGifHgxpDYH9XzgnhdWNGqAEoj0QjdX2jmb6nMJ8gJruT 33EzOK5GVXfbNyKb+LzKW!I6Mmqa51c3EUWCLSmoTIRNb1cRcyi5C3p!RNtjA2lYb5YgUOqG mlb5L!FRO2AUfWDh4BWlXfwQkELAaC8nK3p6uY3 to report this email as spam. __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List modssl-users@modssl.org Automated List Manager[EMAIL PROTECTED] __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List modssl-users@modssl.org Automated List Manager[EMAIL PROTECTED]
RE: Ref : RE: SSL by Domain Name Error
I read this on other posts, so does that mean I'll never be able to configure my apache set up to be accessed like this :- https:\\www.mydomain.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: 19 June 2007 08:47 To: modssl-users@modssl.org Cc: modssl-users@modssl.org; [EMAIL PROTECTED] Subject: Ref : RE: SSL by Domain Name Error Virutal host name based doesn't work with ssl mod you must configure ssl with ip based virtual hosts Abel NIVAULT Inspecteur PSE- PSN-CT - CSI LYON [EMAIL PROTECTED] Rob Archer [EMAIL PROTECTED] Envoyé par : [EMAIL PROTECTED] 18/06/2007 18:30 Veuillez répondre à modssl-users Pour : modssl-users@modssl.org cc : Objet : RE: SSL by Domain Name Error Unfortunately exactly the same, I've even put the domain name as the virtual host and it behaves the same !!! (i.e VirtualHost www.mydomain.com:443) I was thinking that the way the web server is set up is by web forwarding, where the holders of our domain name forward requests onto the ip address of our web server. This works for http, could it be possible that something needs configuring at the company that holds our domain name (easily.co.uk) to forward on https requests, or is that a real long shot ? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Omar W. Hannet Sent: 18 June 2007 17:06 To: modssl-users@modssl.org Subject: Re: SSL by Domain Name Error What's the result when you set ServerName to your domain name within the virtual host?: VirtualHost 1.2.3.4:443 ServerName example.com SSLEngine On SSLCertificateFile conf/ssl/server.crt SSLCertificateKeyFile conf/ssl/server.key /VirtualHost Rob Archer wrote: Thanks for the response, I'm using the following in the httpd.conf file:- IfModule ssl_module SSLMutex default SSLRandomSeed startup builtin SSLRandomSeed connect builtin SSLSessionCache none ErrorLog logs/ssl.log LogLevel info /IfModule VirtualHost 1.2.3.4:443 SSLEngine On SSLCertificateFile conf/ssl/server.crt SSLCertificateKeyFile conf/ssl/server.key /VirtualHost -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Omar W. Hannet Sent: 18 June 2007 16:13 To: modssl-users@modssl.org Subject: Re: SSL by Domain Name Error Rob Archer wrote: Anybody have any suggestions ? Have created the key through open ssl and configured apache (using http://raibledesigns.com/wiki/Wiki.jsp?page=ApacheSSL instructions) and can access https via the IP address of the web server but not the domain name. When trying to get the to the webserver via the domain name through https it says internet explorer cannot display this web page. Using the normal http protocol I can get the It Works page through both IP address and domain name. Have tried to get around this by fiddling about with the virtual hosts settings but haven't found any solution. Can anyone help !!! You might try adding a NameVirtualHost directive: NameVirtualHost 1.2.3.4:443 (Your own IP address in place of '1.2.3.4'.) If that doesn't help, please show us the VirtualHost block for this domain in your current Apache configuration. __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List modssl-users@modssl.org Automated List Manager[EMAIL PROTECTED] Click https://www.mailcontrol.com/sr/wQw0zmjPoHdJTZGyOCrrhg== 1zjrSD8hWEe96repmpaOSdLMvmLORniQDfYJTSjBfD!nkU9R0u8dlLFoNT85Zo6jf9yegQzk pg9iGvxGJKsNeMk8vpdiUWF8qBDGGfaGgdaAcnXV!xUKnI0XzkSD3mUR0s5mD0+fIpcaD4yO 5vBMHXJE1FQ0bouh7TVke8vo28dsfWWo4QK!9LC to report this email as spam. __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List modssl-users@modssl.org Automated List Manager[EMAIL PROTECTED] __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List modssl-users@modssl.org Automated List Manager[EMAIL PROTECTED] __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List modssl-users@modssl.org Automated List Manager[EMAIL PROTECTED]
Ref : RE: Ref : RE: SSL by Domain Name Error
No, you speak here about the url to access your web server. What I ment is : when you configure your virtual host in httpd.conf, if you want it to run in https mod, you have to set up the virtual host directive with an IP an not with a host name: VirtualHost 1.2.3.4:443 ServerName example.com SSLEngine On SSLCertificateFile conf/ssl/server.crt SSLCertificateKeyFile conf/ssl/server.key /VirtualHost will work VirtualHost hostname:443 ServerName example.com SSLEngine On SSLCertificateFile conf/ssl/server.crt SSLCertificateKeyFile conf/ssl/server.key /VirtualHost will not Abel NIVAULT Inspecteur PSE- PSN-CT - CSI LYON [EMAIL PROTECTED] Rob Archer [EMAIL PROTECTED] Envoyé par : [EMAIL PROTECTED] 19/06/2007 10:08 Veuillez répondre à modssl-users Pour : modssl-users@modssl.org cc : Objet : RE: Ref : RE: SSL by Domain Name Error I read this on other posts, so does that mean I'll never be able to configure my apache set up to be accessed like this :- https:\\www.mydomain.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: 19 June 2007 08:47 To: modssl-users@modssl.org Cc: modssl-users@modssl.org; [EMAIL PROTECTED] Subject: Ref : RE: SSL by Domain Name Error Virutal host name based doesn't work with ssl mod you must configure ssl with ip based virtual hosts Abel NIVAULT Inspecteur PSE- PSN-CT - CSI LYON [EMAIL PROTECTED] Rob Archer [EMAIL PROTECTED] Envoyé par : [EMAIL PROTECTED] 18/06/2007 18:30 Veuillez répondre à modssl-users Pour : modssl-users@modssl.org cc : Objet : RE: SSL by Domain Name Error Unfortunately exactly the same, I've even put the domain name as the virtual host and it behaves the same !!! (i.e VirtualHost www.mydomain.com:443) I was thinking that the way the web server is set up is by web forwarding, where the holders of our domain name forward requests onto the ip address of our web server. This works for http, could it be possible that something needs configuring at the company that holds our domain name (easily.co.uk) to forward on https requests, or is that a real long shot ? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Omar W. Hannet Sent: 18 June 2007 17:06 To: modssl-users@modssl.org Subject: Re: SSL by Domain Name Error What's the result when you set ServerName to your domain name within the virtual host?: VirtualHost 1.2.3.4:443 ServerName example.com SSLEngine On SSLCertificateFile conf/ssl/server.crt SSLCertificateKeyFile conf/ssl/server.key /VirtualHost Rob Archer wrote: Thanks for the response, I'm using the following in the httpd.conf file:- IfModule ssl_module SSLMutex default SSLRandomSeed startup builtin SSLRandomSeed connect builtin SSLSessionCache none ErrorLog logs/ssl.log LogLevel info /IfModule VirtualHost 1.2.3.4:443 SSLEngine On SSLCertificateFile conf/ssl/server.crt SSLCertificateKeyFile conf/ssl/server.key /VirtualHost -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Omar W. Hannet Sent: 18 June 2007 16:13 To: modssl-users@modssl.org Subject: Re: SSL by Domain Name Error Rob Archer wrote: Anybody have any suggestions ? Have created the key through open ssl and configured apache (using http://raibledesigns.com/wiki/Wiki.jsp?page=ApacheSSL instructions) and can access https via the IP address of the web server but not the domain name. When trying to get the to the webserver via the domain name through https it says internet explorer cannot display this web page. Using the normal http protocol I can get the It Works page through both IP address and domain name. Have tried to get around this by fiddling about with the virtual hosts settings but haven't found any solution. Can anyone help !!! You might try adding a NameVirtualHost directive: NameVirtualHost 1.2.3.4:443 (Your own IP address in place of '1.2.3.4'.) If that doesn't help, please show us the VirtualHost block for this domain in your current Apache configuration. __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List modssl-users@modssl.org Automated List Manager[EMAIL PROTECTED] Click https://www.mailcontrol.com/sr/wQw0zmjPoHdJTZGyOCrrhg== 1zjrSD8hWEe96repmpaOSdLMvmLORniQDfYJTSjBfD!nkU9R0u8dlLFoNT85Zo6jf9yegQzk pg9iGvxGJKsNeMk8vpdiUWF8qBDGGfaGgdaAcnXV!xUKnI0XzkSD3mUR0s5mD0+fIpcaD4yO 5vBMHXJE1FQ0bouh7TVke8vo28dsfWWo4QK!9LC to report this email as spam. __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List modssl-users@modssl.org Automated List Manager
RE: Ref : RE: Ref : RE: SSL by Domain Name Error
VirtualHost 1.2.3.4:443 ServerName example.com SSLEngine On SSLCertificateFile conf/ssl/server.crt SSLCertificateKeyFile conf/ssl/server.key /VirtualHost This is exactly how I've got it set up and unfortunately I can't use SSL through my domain name (https://www.mydomain.com) but can access it via my ip address (https://1.2.3.4). -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: 19 June 2007 09:53 To: modssl-users@modssl.org Subject: Ref : RE: Ref : RE: SSL by Domain Name Error No, you speak here about the url to access your web server. What I ment is : when you configure your virtual host in httpd.conf, if you want it to run in https mod, you have to set up the virtual host directive with an IP an not with a host name: VirtualHost 1.2.3.4:443 ServerName example.com SSLEngine On SSLCertificateFile conf/ssl/server.crt SSLCertificateKeyFile conf/ssl/server.key /VirtualHost will work VirtualHost hostname:443 ServerName example.com SSLEngine On SSLCertificateFile conf/ssl/server.crt SSLCertificateKeyFile conf/ssl/server.key /VirtualHost will not Abel NIVAULT Inspecteur PSE- PSN-CT - CSI LYON [EMAIL PROTECTED] Rob Archer [EMAIL PROTECTED] Envoyé par : [EMAIL PROTECTED] 19/06/2007 10:08 Veuillez répondre à modssl-users Pour : modssl-users@modssl.org cc : Objet : RE: Ref : RE: SSL by Domain Name Error I read this on other posts, so does that mean I'll never be able to configure my apache set up to be accessed like this :- https:\\www.mydomain.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: 19 June 2007 08:47 To: modssl-users@modssl.org Cc: modssl-users@modssl.org; [EMAIL PROTECTED] Subject: Ref : RE: SSL by Domain Name Error Virutal host name based doesn't work with ssl mod you must configure ssl with ip based virtual hosts Abel NIVAULT Inspecteur PSE- PSN-CT - CSI LYON [EMAIL PROTECTED] Rob Archer [EMAIL PROTECTED] Envoyé par : [EMAIL PROTECTED] 18/06/2007 18:30 Veuillez répondre à modssl-users Pour : modssl-users@modssl.org cc : Objet : RE: SSL by Domain Name Error Unfortunately exactly the same, I've even put the domain name as the virtual host and it behaves the same !!! (i.e VirtualHost www.mydomain.com:443) I was thinking that the way the web server is set up is by web forwarding, where the holders of our domain name forward requests onto the ip address of our web server. This works for http, could it be possible that something needs configuring at the company that holds our domain name (easily.co.uk) to forward on https requests, or is that a real long shot ? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Omar W. Hannet Sent: 18 June 2007 17:06 To: modssl-users@modssl.org Subject: Re: SSL by Domain Name Error What's the result when you set ServerName to your domain name within the virtual host?: VirtualHost 1.2.3.4:443 ServerName example.com SSLEngine On SSLCertificateFile conf/ssl/server.crt SSLCertificateKeyFile conf/ssl/server.key /VirtualHost Rob Archer wrote: Thanks for the response, I'm using the following in the httpd.conf file:- IfModule ssl_module SSLMutex default SSLRandomSeed startup builtin SSLRandomSeed connect builtin SSLSessionCache none ErrorLog logs/ssl.log LogLevel info /IfModule VirtualHost 1.2.3.4:443 SSLEngine On SSLCertificateFile conf/ssl/server.crt SSLCertificateKeyFile conf/ssl/server.key /VirtualHost -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Omar W. Hannet Sent: 18 June 2007 16:13 To: modssl-users@modssl.org Subject: Re: SSL by Domain Name Error Rob Archer wrote: Anybody have any suggestions ? Have created the key through open ssl and configured apache (using http://raibledesigns.com/wiki/Wiki.jsp?page=ApacheSSL instructions) and can access https via the IP address of the web server but not the domain name. When trying to get the to the webserver via the domain name through https it says internet explorer cannot display this web page. Using the normal http protocol I can get the It Works page through both IP address and domain name. Have tried to get around this by fiddling about with the virtual hosts settings but haven't found any solution. Can anyone help !!! You might try adding a NameVirtualHost directive: NameVirtualHost 1.2.3.4:443 (Your own IP address in place of '1.2.3.4'.) If that doesn't help, please show us the VirtualHost block for this domain in your current Apache configuration. __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List modssl-users@modssl.org Automated List Manager
Ref : RE: Ref : RE: Ref : RE: SSL by Domain Name Error
What is the message in apache error log file ? Abel NIVAULT Inspecteur PSE- PSN-CT - CSI LYON [EMAIL PROTECTED] Rob Archer [EMAIL PROTECTED] Envoyé par : [EMAIL PROTECTED] 19/06/2007 11:05 Veuillez répondre à modssl-users Pour : modssl-users@modssl.org cc : Objet : RE: Ref : RE: Ref : RE: SSL by Domain Name Error VirtualHost 1.2.3.4:443 ServerName example.com SSLEngine On SSLCertificateFile conf/ssl/server.crt SSLCertificateKeyFile conf/ssl/server.key /VirtualHost This is exactly how I've got it set up and unfortunately I can't use SSL through my domain name (https://www.mydomain.com) but can access it via my ip address (https://1.2.3.4). -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: 19 June 2007 09:53 To: modssl-users@modssl.org Subject: Ref : RE: Ref : RE: SSL by Domain Name Error No, you speak here about the url to access your web server. What I ment is : when you configure your virtual host in httpd.conf, if you want it to run in https mod, you have to set up the virtual host directive with an IP an not with a host name: VirtualHost 1.2.3.4:443 ServerName example.com SSLEngine On SSLCertificateFile conf/ssl/server.crt SSLCertificateKeyFile conf/ssl/server.key /VirtualHost will work VirtualHost hostname:443 ServerName example.com SSLEngine On SSLCertificateFile conf/ssl/server.crt SSLCertificateKeyFile conf/ssl/server.key /VirtualHost will not Abel NIVAULT Inspecteur PSE- PSN-CT - CSI LYON [EMAIL PROTECTED] Rob Archer [EMAIL PROTECTED] Envoyé par : [EMAIL PROTECTED] 19/06/2007 10:08 Veuillez répondre à modssl-users Pour : modssl-users@modssl.org cc : Objet : RE: Ref : RE: SSL by Domain Name Error I read this on other posts, so does that mean I'll never be able to configure my apache set up to be accessed like this :- https:\\www.mydomain.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: 19 June 2007 08:47 To: modssl-users@modssl.org Cc: modssl-users@modssl.org; [EMAIL PROTECTED] Subject: Ref : RE: SSL by Domain Name Error Virutal host name based doesn't work with ssl mod you must configure ssl with ip based virtual hosts Abel NIVAULT Inspecteur PSE- PSN-CT - CSI LYON [EMAIL PROTECTED] Rob Archer [EMAIL PROTECTED] Envoyé par : [EMAIL PROTECTED] 18/06/2007 18:30 Veuillez répondre à modssl-users Pour : modssl-users@modssl.org cc : Objet : RE: SSL by Domain Name Error Unfortunately exactly the same, I've even put the domain name as the virtual host and it behaves the same !!! (i.e VirtualHost www.mydomain.com:443) I was thinking that the way the web server is set up is by web forwarding, where the holders of our domain name forward requests onto the ip address of our web server. This works for http, could it be possible that something needs configuring at the company that holds our domain name (easily.co.uk) to forward on https requests, or is that a real long shot ? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Omar W. Hannet Sent: 18 June 2007 17:06 To: modssl-users@modssl.org Subject: Re: SSL by Domain Name Error What's the result when you set ServerName to your domain name within the virtual host?: VirtualHost 1.2.3.4:443 ServerName example.com SSLEngine On SSLCertificateFile conf/ssl/server.crt SSLCertificateKeyFile conf/ssl/server.key /VirtualHost Rob Archer wrote: Thanks for the response, I'm using the following in the httpd.conf file:- IfModule ssl_module SSLMutex default SSLRandomSeed startup builtin SSLRandomSeed connect builtin SSLSessionCache none ErrorLog logs/ssl.log LogLevel info /IfModule VirtualHost 1.2.3.4:443 SSLEngine On SSLCertificateFile conf/ssl/server.crt SSLCertificateKeyFile conf/ssl/server.key /VirtualHost -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Omar W. Hannet Sent: 18 June 2007 16:13 To: modssl-users@modssl.org Subject: Re: SSL by Domain Name Error Rob Archer wrote: Anybody have any suggestions ? Have created the key through open ssl and configured apache (using http://raibledesigns.com/wiki/Wiki.jsp?page=ApacheSSL instructions) and can access https via the IP address of the web server but not the domain name. When trying to get the to the webserver via the domain name through https it says internet explorer cannot display this web page. Using the normal http protocol I can get the It Works page through both IP address and domain name. Have tried to get around this by fiddling about with the virtual hosts settings but haven't found any solution. Can anyone help !!! You might try adding a NameVirtualHost directive: NameVirtualHost 1.2.3.4:443 (Your own IP address in place of '1.2.3.4'.) If that doesn't
RE: Ref : RE: Ref : RE: Ref : RE: SSL by Domain Name Error
I can't find an error in the error.log, access.log or ssl.log files. In the access.log file it logs :- When accessing the web site via http and the ip address 0.0.0.0 - - [19/Jun/2007:10:27:04 +0100] GET / HTTP/1.1 304 - When accessing the web site via https and the ip address 0.0.0.0 - - [19/Jun/2007:10:28:12 +0100] GET / HTTP/1.1 200 44 0.0.0.0 - - [19/Jun/2007:10:28:12 +0100] GET /favicon.ico HTTP/1.1 404 209 When accessing the web site via http and the domain name 0.0.0.0 - - [19/Jun/2007:10:28:39 +0100] GET / HTTP/1.1 304 - No entry for https and domain name in the access.log and a Internet Explorer cannot display the webpage in ie when trying to get to the server. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: 19 June 2007 10:08 To: modssl-users@modssl.org Subject: Ref : RE: Ref : RE: Ref : RE: SSL by Domain Name Error What is the message in apache error log file ? Abel NIVAULT Inspecteur PSE- PSN-CT - CSI LYON [EMAIL PROTECTED] Rob Archer [EMAIL PROTECTED] Envoyé par : [EMAIL PROTECTED] 19/06/2007 11:05 Veuillez répondre à modssl-users Pour : modssl-users@modssl.org cc : Objet : RE: Ref : RE: Ref : RE: SSL by Domain Name Error VirtualHost 1.2.3.4:443 ServerName example.com SSLEngine On SSLCertificateFile conf/ssl/server.crt SSLCertificateKeyFile conf/ssl/server.key /VirtualHost This is exactly how I've got it set up and unfortunately I can't use SSL through my domain name (https://www.mydomain.com) but can access it via my ip address (https://1.2.3.4). -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: 19 June 2007 09:53 To: modssl-users@modssl.org Subject: Ref : RE: Ref : RE: SSL by Domain Name Error No, you speak here about the url to access your web server. What I ment is : when you configure your virtual host in httpd.conf, if you want it to run in https mod, you have to set up the virtual host directive with an IP an not with a host name: VirtualHost 1.2.3.4:443 ServerName example.com SSLEngine On SSLCertificateFile conf/ssl/server.crt SSLCertificateKeyFile conf/ssl/server.key /VirtualHost will work VirtualHost hostname:443 ServerName example.com SSLEngine On SSLCertificateFile conf/ssl/server.crt SSLCertificateKeyFile conf/ssl/server.key /VirtualHost will not Abel NIVAULT Inspecteur PSE- PSN-CT - CSI LYON [EMAIL PROTECTED] Rob Archer [EMAIL PROTECTED] Envoyé par : [EMAIL PROTECTED] 19/06/2007 10:08 Veuillez répondre à modssl-users Pour : modssl-users@modssl.org cc : Objet : RE: Ref : RE: SSL by Domain Name Error I read this on other posts, so does that mean I'll never be able to configure my apache set up to be accessed like this :- https:\\www.mydomain.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: 19 June 2007 08:47 To: modssl-users@modssl.org Cc: modssl-users@modssl.org; [EMAIL PROTECTED] Subject: Ref : RE: SSL by Domain Name Error Virutal host name based doesn't work with ssl mod you must configure ssl with ip based virtual hosts Abel NIVAULT Inspecteur PSE- PSN-CT - CSI LYON [EMAIL PROTECTED] Rob Archer [EMAIL PROTECTED] Envoyé par : [EMAIL PROTECTED] 18/06/2007 18:30 Veuillez répondre à modssl-users Pour : modssl-users@modssl.org cc : Objet : RE: SSL by Domain Name Error Unfortunately exactly the same, I've even put the domain name as the virtual host and it behaves the same !!! (i.e VirtualHost www.mydomain.com:443) I was thinking that the way the web server is set up is by web forwarding, where the holders of our domain name forward requests onto the ip address of our web server. This works for http, could it be possible that something needs configuring at the company that holds our domain name (easily.co.uk) to forward on https requests, or is that a real long shot ? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Omar W. Hannet Sent: 18 June 2007 17:06 To: modssl-users@modssl.org Subject: Re: SSL by Domain Name Error What's the result when you set ServerName to your domain name within the virtual host?: VirtualHost 1.2.3.4:443 ServerName example.com SSLEngine On SSLCertificateFile conf/ssl/server.crt SSLCertificateKeyFile conf/ssl/server.key /VirtualHost Rob Archer wrote: Thanks for the response, I'm using the following in the httpd.conf file:- IfModule ssl_module SSLMutex default SSLRandomSeed startup builtin SSLRandomSeed connect builtin SSLSessionCache none ErrorLog logs/ssl.log LogLevel info /IfModule VirtualHost 1.2.3.4:443 SSLEngine On SSLCertificateFile conf/ssl/server.crt SSLCertificateKeyFile conf/ssl/server.key /VirtualHost -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Omar W. Hannet Sent: 18 June
Re: Ref : RE: Ref : RE: Ref : RE: SSL by Domain Name Error
Rob Archer wrote: No entry for https and domain name in the access.log and a Internet Explorer cannot display the webpage in ie when trying to get to the server. Do you have access to the openssl command line program? It would tell you whether you are making a connection, and possibly shed some light on the problem. Like this: openssl s_client -connect www.mydomain.com:443 -debug GET / -- Omar W. Hannet http://www.allez-oop.net/ __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List modssl-users@modssl.org Automated List Manager[EMAIL PROTECTED]
RE: SSL by Domain Name Error
When accessing it by ip address using the debug option of openssl it returns what you would expect (i.e. the text of the key certificate). When accessing by domain name it says :- Loading 'screen' into random state - done Connect: bad file descriptor Connect:errno=10060 I assume this is the equivalent of the Internet Explorer cannot display the webpage error in IE !!! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Omar W. Hannet Sent: 19 June 2007 17:07 To: modssl-users@modssl.org Subject: Re: Ref : RE: Ref : RE: Ref : RE: SSL by Domain Name Error Rob Archer wrote: No entry for https and domain name in the access.log and a Internet Explorer cannot display the webpage in ie when trying to get to the server. Do you have access to the openssl command line program? It would tell you whether you are making a connection, and possibly shed some light on the problem. Like this: openssl s_client -connect www.mydomain.com:443 -debug GET / -- Omar W. Hannet http://www.allez-oop.net/ __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List modssl-users@modssl.org Automated List Manager[EMAIL PROTECTED] Click https://www.mailcontrol.com/sr/wQw0zmjPoHdJTZGyOCrrhg== fEC2jdu7IGByacx3ArIKIUT!lvVH!USL09885GdzcRHkJQbUg!t!lTlF8wvspJ8KRJ!C1T7b oyyYNM1LsOoq7xQn9PpPmf0RViWH8KrV2XgKm6g+xXis8qqUS8WsUnUSQI75M3p9YidETs!4 SYY9PML3cPraQ8WwaBWlXfwQkELAaC8nK3p6uY3 to report this email as spam. __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List modssl-users@modssl.org Automated List Manager[EMAIL PROTECTED]
Re: SSL by Domain Name Error
I'll bet you're right when you say your provider may not be forwarding https requests properly. I'd run this one past them and see what they have to say about it. Rob Archer wrote: When accessing it by ip address using the debug option of openssl it returns what you would expect (i.e. the text of the key certificate). When accessing by domain name it says :- Loading 'screen' into random state - done Connect: bad file descriptor Connect:errno=10060 I assume this is the equivalent of the Internet Explorer cannot display the webpage error in IE !!! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Omar W. Hannet Sent: 19 June 2007 17:07 To: modssl-users@modssl.org Subject: Re: Ref : RE: Ref : RE: Ref : RE: SSL by Domain Name Error Rob Archer wrote: No entry for https and domain name in the access.log and a Internet Explorer cannot display the webpage in ie when trying to get to the server. Do you have access to the openssl command line program? It would tell you whether you are making a connection, and possibly shed some light on the problem. Like this: openssl s_client -connect www.mydomain.com:443 -debug GET / __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List modssl-users@modssl.org Automated List Manager[EMAIL PROTECTED]
RE: SSL by Domain Name Error
I'll have a word with them tomorrow see what they say !!! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Omar W. Hannet Sent: 19 June 2007 17:28 To: modssl-users@modssl.org Subject: Re: SSL by Domain Name Error I'll bet you're right when you say your provider may not be forwarding https requests properly. I'd run this one past them and see what they have to say about it. Rob Archer wrote: When accessing it by ip address using the debug option of openssl it returns what you would expect (i.e. the text of the key certificate). When accessing by domain name it says :- Loading 'screen' into random state - done Connect: bad file descriptor Connect:errno=10060 I assume this is the equivalent of the Internet Explorer cannot display the webpage error in IE !!! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Omar W. Hannet Sent: 19 June 2007 17:07 To: modssl-users@modssl.org Subject: Re: Ref : RE: Ref : RE: Ref : RE: SSL by Domain Name Error Rob Archer wrote: No entry for https and domain name in the access.log and a Internet Explorer cannot display the webpage in ie when trying to get to the server. Do you have access to the openssl command line program? It would tell you whether you are making a connection, and possibly shed some light on the problem. Like this: openssl s_client -connect www.mydomain.com:443 -debug GET / __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List modssl-users@modssl.org Automated List Manager[EMAIL PROTECTED] Click https://www.mailcontrol.com/sr/wQw0zmjPoHdJTZGyOCrrhg== NoIrNOBa4kXlVepWQxhvS70n7wnaGifHgxpDYH9XzgnhdWNGqAEoj0QjdX2jmb6nMJ8gJruT 33EzOK5GVXfbNyKb+LzKW!I6Mmqa51c3EUWCLSmoTIRNb1cRcyi5C3p!RNtjA2lYb5YgUOqG mlb5L!FRO2AUfWDh4BWlXfwQkELAaC8nK3p6uY3 to report this email as spam. __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List modssl-users@modssl.org Automated List Manager[EMAIL PROTECTED]
RE: SSL by Domain Name Error
Anybody have any suggestions ? -Original Message- From: Rob Archer Sent: 14 June 2007 16:08 To: 'modssl-users@modssl.org' Subject: SSL by Domain Name Error Apache 2.2.4 Windows 2000 Server Have created the key through open ssl and configured apache (using http://raibledesigns.com/wiki/Wiki.jsp?page=ApacheSSL instructions) and can access https via the IP address of the web server but not the domain name. When trying to get the to the webserver via the domain name through https it says internet explorer cannot display this web page. Using the normal http protocol I can get the It Works page through both IP address and domain name. Have tried to get around this by fiddling about with the virtual hosts settings but haven't found any solution. Can anyone help !!! Any opinions expressed in this email are those of the individual and not necessarily the Company. This email and any files transmitted with it are confidential and solely for use by the intended recipient(s). It may contain material protected by Statutory or Regulatory Law. If you are not the intended recipient or the person responsible for delivering to the intended recipient, you have received this email in error and its use is strictly prohibited. If you have received it in error please notify our Network Administrator. Although this email and any attachments are believed to be free of any virus, or any other defect which might affect any computer or IT system into which they are received and opened, it is the responsibility of the recipient to ensure that they are virus free and no responsibility is accepted by Retainagroup Ltd for any loss or damage arising in any way from receipt or use thereof. Company Registered in England No. 3164074. Registered Address: Unit 5, St. John's Court, Foster Road, Ashford Business Park, Ashford, Kent. TN24 0SJ. (Tech Email: [EMAIL PROTECTED], Tech No.01233 333104, Main No. 01233 333000) This message has been scanned for viruses by BlackSpider MailControl
Re: SSL by Domain Name Error
Rob Archer wrote: Anybody have any suggestions ? Have created the key through open ssl and configured apache (using http://raibledesigns.com/wiki/Wiki.jsp?page=ApacheSSL instructions) and can access https via the IP address of the web server but not the domain name. When trying to get the to the webserver via the domain name through https it says internet explorer cannot display this web page. Using the normal http protocol I can get the It Works page through both IP address and domain name. Have tried to get around this by fiddling about with the virtual hosts settings but haven't found any solution. Can anyone help !!! You might try adding a NameVirtualHost directive: NameVirtualHost 1.2.3.4:443 (Your own IP address in place of '1.2.3.4'.) If that doesn't help, please show us the VirtualHost block for this domain in your current Apache configuration. -- Omar W. Hannet http://www.allez-oop.net/ __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List modssl-users@modssl.org Automated List Manager[EMAIL PROTECTED]
RE: SSL by Domain Name Error
Thanks for the response, I'm using the following in the httpd.conf file:- IfModule ssl_module SSLMutex default SSLRandomSeed startup builtin SSLRandomSeed connect builtin SSLSessionCache none ErrorLog logs/ssl.log LogLevel info /IfModule VirtualHost 1.2.3.4:443 SSLEngine On SSLCertificateFile conf/ssl/server.crt SSLCertificateKeyFile conf/ssl/server.key /VirtualHost -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Omar W. Hannet Sent: 18 June 2007 16:13 To: modssl-users@modssl.org Subject: Re: SSL by Domain Name Error Rob Archer wrote: Anybody have any suggestions ? Have created the key through open ssl and configured apache (using http://raibledesigns.com/wiki/Wiki.jsp?page=ApacheSSL instructions) and can access https via the IP address of the web server but not the domain name. When trying to get the to the webserver via the domain name through https it says internet explorer cannot display this web page. Using the normal http protocol I can get the It Works page through both IP address and domain name. Have tried to get around this by fiddling about with the virtual hosts settings but haven't found any solution. Can anyone help !!! You might try adding a NameVirtualHost directive: NameVirtualHost 1.2.3.4:443 (Your own IP address in place of '1.2.3.4'.) If that doesn't help, please show us the VirtualHost block for this domain in your current Apache configuration. -- Omar W. Hannet http://www.allez-oop.net/ __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List modssl-users@modssl.org Automated List Manager[EMAIL PROTECTED] Click https://www.mailcontrol.com/sr/wQw0zmjPoHdJTZGyOCrrhg== fMgBK8DIcc6MewdBLPY6HM3uCsIoIfWJQ!0Y2VdZHSsmugCwvzzwfe946vzFomHzKSVMo!xh LH2GhBuaixmbErtfYMN4HkbPTCJC6Pv3JUYJ7cQJe9p9qcDVg+Z43dzgaPp!JI8EBMOY08Pc LiPsL1wg48Tzt71za7Vke8vo28dsU9mY8+kaYom to report this email as spam. __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List modssl-users@modssl.org Automated List Manager[EMAIL PROTECTED]
Re: SSL by Domain Name Error
What's the result when you set ServerName to your domain name within the virtual host?: VirtualHost 1.2.3.4:443 ServerName example.com SSLEngine On SSLCertificateFile conf/ssl/server.crt SSLCertificateKeyFile conf/ssl/server.key /VirtualHost Rob Archer wrote: Thanks for the response, I'm using the following in the httpd.conf file:- IfModule ssl_module SSLMutex default SSLRandomSeed startup builtin SSLRandomSeed connect builtin SSLSessionCache none ErrorLog logs/ssl.log LogLevel info /IfModule VirtualHost 1.2.3.4:443 SSLEngine On SSLCertificateFile conf/ssl/server.crt SSLCertificateKeyFile conf/ssl/server.key /VirtualHost -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Omar W. Hannet Sent: 18 June 2007 16:13 To: modssl-users@modssl.org Subject: Re: SSL by Domain Name Error Rob Archer wrote: Anybody have any suggestions ? Have created the key through open ssl and configured apache (using http://raibledesigns.com/wiki/Wiki.jsp?page=ApacheSSL instructions) and can access https via the IP address of the web server but not the domain name. When trying to get the to the webserver via the domain name through https it says internet explorer cannot display this web page. Using the normal http protocol I can get the It Works page through both IP address and domain name. Have tried to get around this by fiddling about with the virtual hosts settings but haven't found any solution. Can anyone help !!! You might try adding a NameVirtualHost directive: NameVirtualHost 1.2.3.4:443 (Your own IP address in place of '1.2.3.4'.) If that doesn't help, please show us the VirtualHost block for this domain in your current Apache configuration. __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List modssl-users@modssl.org Automated List Manager[EMAIL PROTECTED]
SSL by Domain Name Error
Apache 2.2.4 Windows 2000 Server Have created the key through open ssl and configured apache (using http://raibledesigns.com/wiki/Wiki.jsp?page=ApacheSSL instructions) and can access https via the IP address of the web server but not the domain name. When trying to get the to the webserver via the domain name through https it says internet explorer cannot display this web page. Using the normal http protocol I can get the It Works page through both IP address and domain name. Have tried to get around this by fiddling about with the virtual hosts settings but haven't found any solution. Can anyone help !!! Any opinions expressed in this email are those of the individual and not necessarily the Company. This email and any files transmitted with it are confidential and solely for use by the intended recipient(s). It may contain material protected by Statutory or Regulatory Law. If you are not the intended recipient or the person responsible for delivering to the intended recipient, you have received this email in error and its use is strictly prohibited. If you have received it in error please notify our Network Administrator. Although this email and any attachments are believed to be free of any virus, or any other defect which might affect any computer or IT system into which they are received and opened, it is the responsibility of the recipient to ensure that they are virus free and no responsibility is accepted by Retainagroup Ltd for any loss or damage arising in any way from receipt or use thereof. Company Registered in England No. 3164074. Registered Address: Unit 5, St. John's Court, Foster Road, Ashford Business Park, Ashford, Kent. TN24 0SJ. (Tech Email: [EMAIL PROTECTED], Tech No.01233 333104, Main No. 01233 333000) This message has been scanned for viruses by BlackSpider MailControl
