alhamdulillah sekarang sudah jalan, tapi caranya saya sendiri tidak yakin :)
saya backup header CMIIW, directory /usr/include/openssl hasil dari source
openssl-0.9.6.tar.gz, kemudian delete semua yang ada dengan hubungannya
dengan hasil installan tesebut.

lalu install lagi openssl dari CD
# rpm -ivh openssl-0.9.7a-2.i386.rpm
# rpm -ivh openssl-devel-0.9.7a-2.i386.rpm

# cp -dpR /backup-ssl /usr/include/openssl
# chmod 644 /usr/include/openssl/*

install seperti semula & mulus, tapi ada sedikit ganjalan ketika access
https://www.soundrenaline.org  muncul pop-up "The server certificate failed
the authenticity test (www.soundrenaline.org)" kira-kira kenapa lagi ya?

berikut lognya :

access.log
-----------
192.168.0.1 - - [23/Sep/2005:10:48:29 +0700] "GET / HTTP/1.1" 200 1456 "-"
"Mozilla/5.0 (compatible; Konqueror/3.1; Linux)"
192.168.0.1 - - [23/Sep/2005:10:48:29 +0700] "GET / HTTP/1.1" 304 - "-"
"Mozilla/5.0 (compatible; Konqueror/3.1; Linux)"
192.168.0.1 - - [23/Sep/2005:10:49:44 +0700] "GET / HTTP/1.1" 200 1456 "-"
"Mozilla/5.0 (compatible; Konqueror/3.1; Linux)"
192.168.0.1 - - [23/Sep/2005:10:49:44 +0700] "GET / HTTP/1.1" 200 1456 "-"
"Mozilla/5.0 (compatible; Konqueror/3.1; Linux)"


error_log
----------
[Fri Sep 23 10:49:32 2005] [info] Connection to child 2 established (server
www.soundrenaline.org:443, client 192.168.0.1)
[Fri Sep 23 10:49:32 2005] [info] Seeding PRNG with 1024 bytes of entropy
[Fri Sep 23 10:49:44 2005] [info] Initial (No.1) HTTPS request received for
child 2 (server www.soundrenaline.org:443)
[Fri Sep 23 10:49:44 2005] [info] Connection to child 3 established (server
www.soundrenaline.org:443, client 192.168.0.1)
[Fri Sep 23 10:49:44 2005] [info] Seeding PRNG with 1024 bytes of entropy
[Fri Sep 23 10:49:44 2005] [info] Initial (No.1) HTTPS request received for
child 3 (server www.soundrenaline.org:443)
[Fri Sep 23 10:49:44 2005] [info] Connection to child 3 closed with standard
shutdown(server www.soundrenaline.org:443, client 192.168.0.1)
[Fri Sep 23 10:49:46 2005] [info] Connection to child 2 closed with standard
shutdown(server www.soundrenaline.org:443, client 192.168.0.1)


ssl_request_log
----------------
[23/Sep/2005:10:49:44 +0700] 192.168.0.1 SSLv3 RC4-MD5 "GET / HTTP/1.1" 1456
[23/Sep/2005:10:49:44 +0700] 192.168.0.1 SSLv3 RC4-MD5 "GET / HTTP/1.1" 1456


ssl.conf
--------
<IfDefine SSL>
Listen 443

AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl    .crl

SSLPassPhraseDialog  builtin

SSLSessionCache         dbm:/var/logs/ssl_scache
SSLSessionCacheTimeout  300

SSLMutex

SSLRandomSeed startup builtin
SSLRandomSeed connect builtin

<VirtualHost 192.168.0.1:443>

DocumentRoot "/home/httpd/htdocs"
ServerName www.soundrenaline.org:443
ServerAdmin [EMAIL PROTECTED]
ErrorLog /var/log/httpd/error_log
TransferLog /var/log/httpd/access_log

SSLEngine on

SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL

SSLCertificateFile /usr/share/ssl/certs/www.crt
SSLCertificateFile /usr/share/ssl/private/www.key

SSLCertificateKeyFile /etc/httpd/conf/ssl.key/server.key

<Files ~ "\.(cgi|shtml|phtml|php3?)$">
    SSLOptions +StdEnvVars
</Files>
<Directory "/home/httpd/cgi-bin">
    SSLOptions +StdEnvVars
</Directory>

SetEnvIf User-Agent ".*MSIE.*" \
         nokeepalive ssl-unclean-shutdown \
         downgrade-1.0 force-response-1.0

</VirtualHost>

</IfDefine>



Regards,
---
Anton


-- 
Unsubscribe: kirim email kosong ke [EMAIL PROTECTED]
Arsip, FAQ, dan info milis di http://linux.or.id/milis
Tidak bisa posting? Baca:
http://linux.or.id/problemmilis
http://linux.or.id/tatatertibmilis

Kirim email ke