Re: how to enable SSL for a handler

2022-07-06 Thread Ruben Safir
On Sun, Jul 03, 2022 at 08:52:51PM +0900, Jacques Deguest wrote: > Re, > You're probably going to need a DocRoot directive somewhere though. > You might want to check the sanity of your configuration with Apache > command line -t flag > ✓✓✓ > On 2022/07/03 19:32, Jacques Deguest wrote: >

Re: how to enable SSL for a handler

2022-07-06 Thread Ruben Safir
I might add that certbot is insecure from the ground up because it requires you to leave priveledged areas of your system exposed. It is a good idea that is poorly thought out and poorly executed On Sat, Jul 02, 2022 at 09:18:47PM -0700, Mithun Bhattacharya wrote: > You don't enable SSL for a

Re: how to enable SSL for a handler

2022-07-03 Thread Jacques Deguest
I see, but you need to make one up, just for certbot, because it will store there some temporary file under the ".well-known" directory to ensure you are who you pretend to be. On 2022/07/04 11:29, Yong Walt wrote: Thank you Jack. The problem I have is that I don't have a DocRoot IMO. I will

Re: how to enable SSL for a handler

2022-07-03 Thread Yong Walt
Thank you Jack. The problem I have is that I don't have a DocRoot IMO. I will check this configuration. Regards. On Sun, Jul 3, 2022 at 7:53 PM Jacques Deguest wrote: > Re, > You're probably going to need a DocRoot directive somewhere though. > You might want to check the sanity of your

Re: how to enable SSL for a handler

2022-07-03 Thread Jacques Deguest
Re, You're probably going to need a DocRoot directive somewhere though. You might want to check the sanity of your configuration with Apache command line -t flag On 2022/07/03 19:32, Jacques Deguest wrote: Sure, comment out all the perl stuff that are not required for certbot to work, run

Re: how to enable SSL for a handler

2022-07-03 Thread Jacques Deguest
Sure, comment out all the perl stuff that are not required for certbot to work, run something like: certbot certonly --rsa-key-size 4096 --agree-tos --email yongw...@gmail.com -d luck.cloudcache.net Get the cert, and then after uncomment what you previously commented out. It should work.

Re: how to enable SSL for a handler

2022-07-03 Thread Yong Walt
This is my httpd.conf. ServerAdmin webmaster@localhost ServerName luck.cloudcache.net PerlPostConfigRequire /etc/apache2/modperl/startup.pl SetHandler modperl PerlResponseHandler LuckyNum ErrorLog

Re: how to enable SSL for a handler

2022-07-03 Thread Jacques Deguest
You do not even need to have a virtualhost with ssl enabled for certbot to work. You can have a simple VirtualHost responding to regular 80 port, then get the ssl certificate, then add the VirtualHost for SSL and all your modperl specifications to it. Something like the following, and once you

Re: how to enable SSL for a handler

2022-07-03 Thread Yong Walt
but that vhost has a modperl handler as the endpoint only. On Sun, Jul 3, 2022 at 12:19 PM Mithun Bhattacharya wrote: > You don't enable SSL for a endpoint you do it for a host/port combination. > All endpoints under that virtual host is SSL enabled. > > On Sat, Jul 2, 2022, 9:01 PM Yong Walt

Re: how to enable SSL for a handler

2022-07-02 Thread Mithun Bhattacharya
You don't enable SSL for a endpoint you do it for a host/port combination. All endpoints under that virtual host is SSL enabled. On Sat, Jul 2, 2022, 9:01 PM Yong Walt wrote: > Hello > > When I run certbot --apache for modperl handler service, it doesn't work. > So how can I setup letsencrypt

how to enable SSL for a handler

2022-07-02 Thread Yong Walt
Hello When I run certbot --apache for modperl handler service, it doesn't work. So how can I setup letsencrypt SSL for a pure handler web API? Thanks