[us...@httpd] Trusting another server's certificate

2010-05-11 Thread Bruno Melloni
I successfully setup Apache Web Server, mod_ssl and mod_jk so that Apache acts 
as the load balancer for a cluster of Tomcat(based) servers - using self-signed 
certificates.  This means that I created Apache's certificates with openssl and 
Tomcat's with Java's keytool.

Two of my applications communicate with each other via HTTPS, and the servers 
must trust each other.  For the Tomcat server to trust the Apache server all I 
need to do is import the Apache certificate into the keystore (and/or cacerts). 
 

How do I make Apache trust the Tomcat server so that app-to-app HTTPS calls 
work?  Or do I even need to?

Thanks

-
The official User-To-User support forum of the Apache HTTP Server Project.
See URL:http://httpd.apache.org/userslist.html for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



[us...@httpd] Installation: Enabling HTTPS on 2.2.15 win32 with SSL - throws error.

2010-05-10 Thread Bruno Melloni
I am completely new to the Apache Web Server.  I had no problems installing and 
running HTTP.  The problems started when enabling HTTPS.

I could not find instructions in the documentation but I noticed that 
httpd.conf has two commented sections:

LoadModule ssl_module modules/mod_ssl.so
Include conf/extra/httpd-ssl.conf

Where the second one points to a file generated by the install process using my 
installation's values, and that contains the instructions that I found in a 
(clearly old) google posting.

It seemed obvious that uncommenting these two lines would enable HTTPS.  
Unfortunately all the reference to httpd-ssl.conf causes Apache Web Server to 
fail to start but puts no information about the cause in the logs.  My guess is 
that I missed doing something.

Can someone point me in the right direction, or if the steps to enable HTTPS on 
2.2.15 are documented somewhere, please point me to that documentation?

Thanks.