SEO

Hi.
I installed Apache 2.0.55 and Open SSL 0.9.7a. What mod_ssl can I use
for this combination?
Alan

On 2006-01-26, aklikic@yahoo.com <aklikic@yahoo.com> wrote:
> I installed Apache 2.0.55 and Open SSL 0.9.7a. What mod_ssl can I use
> for this combination?

Apache 2 has mod_ssl built-in, you only need to enable it.
Davide

--
Microsoft is to Software as McDonalds is to Cuisine.

How can i do that? I did everything that was instructed in
documentation. I created ssl.conf file:
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
<IfDefine SSL>
Listen 443
AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl .crl
SSLSessionCache dbm:/u2/apache-2.2/logs/ssl_scache
SSLSessionCacheTimeout 300
SSLMutex file:/u2/apache-2.2/logs/ssl_mutex
NameVirtualHost *:443
<VirtualHost *:443>
DocumentRoot "/u2/vhost/htdocs-ssl"
ServerName demo.logos.hr:443
ServerAdmin helpdesk@logos.hr
ErrorLog /u2/vhost/logs/vhost_error_ssl.log
TransferLog /u2/vhost/logs/transfer.log
SSLEngine on
SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSL v2:+EXP:+eNULL
SSLCertificateFile /u2/vhost/ssl/demo.logos.hr.crt
SSLCertificateKeyFile /u2/apache-2.2/conf/ssl.key/server.key
CustomLog /u2/vhost/logs/ssl_request_log \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>
</IfDefine>

and i included it in httpd.conf:
Include conf/ssl.conf

I have already configured non-ssl virtual host (port 80) and it works
properly.

When i start apache (./apachectl startssl) i get this error:
Syntax error on line 28 of /u2/apache-2.2/conf/ssl.conf:
Invalid command 'SSLRandomSeed', perhaps mis-spelled or defined by a
module not included in the server configuration

Alan

<aklikic@yahoo.com> wrote in message
news:1138281660.461701.218940@f14g2000cwb.googlegr oups.com...
> How can i do that? I did everything that was instructed in
> documentation. I created ssl.conf file:
> SSLRandomSeed startup builtin
> SSLRandomSeed connect builtin
> <IfDefine SSL>
> Listen 443
> AddType application/x-x509-ca-cert .crt
> AddType application/x-pkcs7-crl .crl
> SSLSessionCache dbm:/u2/apache-2.2/logs/ssl_scache
> SSLSessionCacheTimeout 300
> SSLMutex file:/u2/apache-2.2/logs/ssl_mutex
> NameVirtualHost *:443
> <VirtualHost *:443>
> DocumentRoot "/u2/vhost/htdocs-ssl"
> ServerName demo.logos.hr:443
> ServerAdmin helpdesk@logos.hr
> ErrorLog /u2/vhost/logs/vhost_error_ssl.log
> TransferLog /u2/vhost/logs/transfer.log
> SSLEngine on
> SSLCipherSuite
> ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSL v2:+EXP:+eNULL
> SSLCertificateFile /u2/vhost/ssl/demo.logos.hr.crt
> SSLCertificateKeyFile /u2/apache-2.2/conf/ssl.key/server.key
> CustomLog /u2/vhost/logs/ssl_request_log \
> "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
> </VirtualHost>
> </IfDefine>
>
> and i included it in httpd.conf:
> Include conf/ssl.conf
>
> I have already configured non-ssl virtual host (port 80) and it works
> properly.
>
> When i start apache (./apachectl startssl) i get this error:
> Syntax error on line 28 of /u2/apache-2.2/conf/ssl.conf:
> Invalid command 'SSLRandomSeed', perhaps mis-spelled or defined by a
> module not included in the server configuration
>
> Alan

Well, that error message is kind of a hint, isn't it? You seem to have two
SSLRandomSeed lines:

> SSLRandomSeed startup builtin
> SSLRandomSeed connect builtin

Perhaps you could look up the syntax for that linje?

Sintax is correct. Configuration is predefined, i didnt change
anything.
Alan

On 2006-01-26, aklikic@yahoo.com <aklikic@yahoo.com> wrote:
> How can i do that? I did everything that was instructed in
> documentation. I created ssl.conf file:
> SSLRandomSeed startup builtin
> SSLRandomSeed connect builtin
><IfDefine SSL>

Usually, all the stuff in ssl.conf is included if _and only if_ you
start the system with the SSL part (startssl), so the <IfDEfine> bit
is not really usefull. More over, if he includes the file regardless,
the SSLRandom bit outside the <IfDefine will result in an error.

So put the SSL bits all inside the <IfDefine block.

> and i included it in httpd.conf:
> Include conf/ssl.conf

> When i start apache (./apachectl startssl) i get this error:
> Syntax error on line 28 of /u2/apache-2.2/conf/ssl.conf:
> Invalid command 'SSLRandomSeed', perhaps mis-spelled or defined by a

Which one of the two SSLRandomSeed is the line 28?

BTW, my 'SSLRandomSeed startup' is in the form
SSLRandomSeed startup file:/dev/urandom 256

Davide

--
Linux: The OS people choose without $200,000,000 of persuasion

aklikic@yahoo.com wrote:
>
> Sintax is correct. Configuration is predefined, i didnt change
> anything.

What sin are you proposing to tax? What configuration? Aren't you
getting somewhat smelly by now?

--
"If you want to post a followup via groups.google.com, don't use
the broken "Reply" link at the bottom of the article. Click on
"show options" at the top of the article, then click on the
"Reply" at the bottom of the article headers." - Keith Thompson
More details at: <http://cfaj.freeshell.org/google/>

SSLRandomSeed startup builtin is in line 28.
I moved all of SSL bits inside IfDefine block.I changed SSLRandomSeed
startup in SSLRandomSeed startup file:/dev/urandom 256. Now when i
start with ./apachectl startssl, i get the same error.
Error indicates that SSLRandom is mis-spelled or defined by a model not
included.
I think that model is not included. Can that be the case?
Thanks,
Alan

SSLRandomSeed is first SSL bit that occures in ssl.config. If I comment
it, i get same error but on the next SSL bit. I think that module is
not inluded. Am i on the right track?
Alan

On 2006-01-27, aklikic@yahoo.com <aklikic@yahoo.com> wrote:
> SSLRandomSeed is first SSL bit that occures in ssl.config. If I comment
> it, i get same error but on the next SSL bit. I think that module is
> not inluded. Am i on the right track?

It looks so. Kind of strange since (AFAIU) you have an <IfDefine block
before the whole ssl stuff. So if the module wasn't in you shouldn't
even read the SSL block.

Check if the ssl module is loaded (you should have a LoadModule directive)
or is compiled built-in (httpd -l will tell). If is not compiled built-in
maybe you need to add or check your LoadModule directive.

Davide

--
Remember, you're dealing with developers. If they knew what they were
doing, they wouldn't be doing it.
-- Mike A