Re: Probably small problem with SSL config

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I would agree that you should start by turning on logging. 
Do you get a slightly different error if you use a different browser? Firefox usually gives more detail than Internet Explorer.

Better not to use <IfModule > in configuration you write yourself unless you need it for a specific reason. If you use it, then you won't know that the reason your system doesn't work is that the module is not loaded. If you don't include <IfModule> and the module is not loaded, HTTPD will give you an error when it starts up and you will know you need to fix it.
This is particularly bad when an access control directive is in <IfModule > because it often results in all content becoming accessible to anyone if a module is missing.

- Y

Sent from a device with a very small keyboard and hyperactive autocorrect.

On Feb 5, 2018 8:02 PM, "mlrx" <mlrx@xxxxxxxxxxxxxxxxxx> wrote:
Hello,


Le 06/02/2018 à 01:02, Jeff Cauhape a écrit :
I’m setting up an Apache server 2.4.25 in our DMZ for the first time,

and having an issue with getting SSL configured correctly.

I am using links text based browser to connect from a second machine
[…]

</VirtualHost>
Is the directive "LogLevel" used with "debug" or more ?
https://httpd.apache.org/docs/2.4/en/mod/core.html#loglevel

The virtualhost can be included in "IfModule ssl_module" :
<IfModule ssl_module>
  <VirtualHost *:443>
  </VirtualHost>
</IfModule>

Does it work without SSL ?



I’m loading modules ssl_module, authn_dbm_module among others.

The ssl directory is  755, root/root and the crt and key files are daemon/root 644.
chown -Rfv apache_user:apache_group /srv/www/html/your_site/ (?)


 […]


Ideas? Suggestions where to look?
httpd -S ?
Reload httpd daemon evry time you change somethings ?
Firewall ?


Thanks,

Jeff Cauhape


Regards,
--
benoist

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx



[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux