That is correct. On Tue, Aug 4, 2015 at 1:29 PM, Matias Visbeek <matias.visbeek@xxxxxxxxxx> wrote: > Just to be sure, is your example.crt file just the public key of your > ceritficate in PEM Base64 format? > > > 2015-08-04 15:23 GMT-03:00 <eigenbrais1@xxxxxxxxx>: >> >> Apologies, the leading slash was not supposed to be there, just copied >> a fake file location and forgot to remove it, the full path is defined >> for the certs: >> SSLCertificateFile "/opt/blah/web/apache2/cert/example.crt" >> SSLCertificateKeyFile "/opt/blah/web/apache2/cert/example.key" >> SSLCertificateChainFile >> "/opt/blah/web/apache2/cert/example-intermediate.crt" >> >> Matias, not sure what you mean by "are you sure conditions for >> IfDefine are met?" If you mean are those levels defined properly etc. >> then yes, I use those IfDefines several times in the rest of the >> configuration. >> >> On Tue, Aug 4, 2015 at 1:17 PM, Matias Visbeek >> <matias.visbeek@xxxxxxxxxx> wrote: >> > Hi, >> > >> > I have 2 different theories about what is happening with your code. >> > >> > First, this line looks wrong >> > SSLCertificateFile "/example.crt" >> > >> > Do you have your certificate file in the root directory? >> > Try changing it for this >> > >> > SSLCertificateFile "example.crt" >> > >> > or providing the full path to the file, for example >> > "/home/user/cert/example.crt" for Linux/UNIX or "C:/cert/ecample.crt" >> > for >> > Windows. >> > >> > Second, you define your certificate inside IfDefine tags, are you sure >> > conditions for IfDefine are met? >> > >> > Regards, >> > >> > Matías >> > >> > 2015-08-04 15:02 GMT-03:00 <eigenbrais1@xxxxxxxxx>: >> >> >> >> RHEL: 5 >> >> Apache: 2.2.29 >> >> >> >> Trying to set up a VirtualHost in my 443 configuration >> >> >> >> >> >> ---------------------------------------------------------------------------- >> >> Listen 443 (also tried Listen 443 http) >> >> >> >> DocumentRoot "/www/secure" >> >> >> >> NameVirtualHost *:443 >> >> >> >> <VirtualHost *:443> >> >> >> >> <IfDefine leveltest> >> >> ServerName test.something.com >> >> RewriteEngine On >> >> SSLEngine On >> >> SSLProxyEngine on >> >> ProxyRequests Off >> >> SSLCertificateFile "/example.crt" >> >> SSLCertificateKeyFile "example.key" >> >> SSLCertificateChainFile "example-intermediate.crt" >> >> </IfDefine> >> >> <IfDefine levelprod> >> >> RewriteEngine On >> >> SSLEngine On >> >> SSLProxyEngine on >> >> ProxyRequests Off >> >> RewriteEngine On >> >> SSLEngine On >> >> SSLProxyEngine on >> >> ProxyRequests Off >> >> SSLCertificateFile "/example.crt" >> >> SSLCertificateKeyFile "example.key" >> >> SSLCertificateChainFile "example-intermediate.crt" >> >> </IfDefine> >> >> >> >> SSLOptions +StdEnvVars +ExportCertData >> >> SSLProtocol ALL -SSLv2 -SSLv3 >> >> >> >> >> >> >> >> ------------------------------------------------------------------------------------- >> >> >> >> The above results in the following error when trying to start: >> >> [Tue Aug 04 11:20:09 2015] [error] Server should be SSL-aware but has >> >> no certificate configured [Hint: SSLCertificateFile] ((null):0) >> >> >> >> We know that certificate listed works as we are currently using it, >> >> only difference is we tried including it in a VirtualHost now. >> >> >> >> --------------------------------------------------------------------- >> >> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx >> >> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx >> >> >> > >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx >> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx >> > --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|