RE: configured Apache SSL, SSL module loads - but nobody's listening on the SSL port (so https: access doesn't work)

Ok, I fixed my own problem.

When I figured out how to start it manually, I found my problem:

C:\Program Files\Apache Group\Apache2\bin>Apache
Syntax error on line 62 of C:/Program Files/Apache Group/Apache2/conf/ssl.conf:
Invalid SSLMutex argument file:logs/ssl_mutex (Valid SSLMutex mechanisms are: `n
one', `default' )

For some reason, configuration file errors aren't reported in the error log.

This change *definitely* needs to be added to the cookbook:

C:\Program Files\Apache Group\Apache2\conf>fc ssl.default.conf ssl.conf

Comparing files ssl.default.conf and SSL.CONF

***** ssl.default.conf
# SSL engine uses internally for inter-process synchronization.
SSLMutex file:logs/ssl_mutex

***** SSL.CONF
# SSL engine uses internally for inter-process synchronization.
#SSLMutex file:logs/ssl_mutex
SSLMutex default

When I changed SSLMutex to default, everything started working fine.

For the record, the cookbook should be modified slightly.

In step 8, it says "Also you have to enter the URL of you server".
The question it asks when filling out the certificate is for the domain name,
not the site server name (so I filled it out incorrectly the first time).

It also says to type this:

bin\openssl rsa –in privkey.pem –out my–server.key

but when I do I get this error:

C:\Program Files\Apache Group\Apache2>bin\openssl rsa -in privkey.pem -out my-server.key
unknown option ûin
rsa [options] <infile >outfile

When I start openssl and then use the rsa subcommand from within openssl, it works fine.
I did the other commands like that.

Last but not least it would be nice if the cookbook pointed out that
signing your own certificate will work but that every browser will have
to explicitly accept your certificate unless you pay to have it signed
by a recognized CA (Certifying Authority).

Chuck

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Sat Dec 13 03:19:35 2003