SSL and apache 2.2.15 installed from source. How to?

Audrey Lee <audrey.lee.is.me@xxxxxxxxx> · Tue, 22 Jun 2010 23:55:15 -0700

I want to serve files via https on my apache server.

I did this already using a lighttpd web server and it was easy.

I just had to follow this document:

http://redmine.lighttpd.net/wiki/lighttpd/Docs:SSL

Now I am ambitious.

I want to do the same thing but on Apache.

I'm using Apache 2.2.15

I created a very simple httpd.conf file which basically has this in it:

ServerRoot "/pt/apache"
Listen localhost:8000

<Directory "/pt/apache/htdocs">
    Options Indexes FollowSymLinks
    AllowOverride None
    Order allow,deny
    Allow from all
</Directory>

<IfModule ssl_module>
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
</IfModule>

I started apache with this command line:

apachectl graceful

And I found that apache works fine.

Next  I looked around in conf/

I found this interesting file:

conf/extra/httpd-ssl.conf

I made these changes to it:

Listen localhost:8443

<VirtualHost _default_:8443>

#   General setup for the virtual host
DocumentRoot "/pt/apache/htdocs"
ServerName localhost:8443
ServerAdmin you@localhost
SSLCertificateFile "/pt/apache/conf/server.pem"

My pem file looks like this:

Then...

I added this line to conf/httpd.conf:

Include conf/extra/httpd-ssl.conf

Which, I assume, "pulls" httpd-ssl.conf into httpd.conf

Next, I tried this:

$ apachectl graceful

I saw:

Syntax error on line 62 of /pt/apache/conf/extra/httpd-ssl.conf:
Invalid command 'SSLSessionCache', perhaps misspelled or defined by a
module not included in the server configuration
httpd not running, trying to start

So it looks like I need to: "define a module" in the server configuration.

I'm not sure how to do that.

I see this syntax in my httpd.conf

<IfModule ssl_module>
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
</IfModule>

What's it do?
Is it supposed to "define a module"

I looked at this URL suggested by a friend:

http://www.tc.umn.edu/~brams006/selfsign_ubuntu.html

The above URL suggests I do this:

run the /usr/sbin/a2enmod script

But, my version of apache does not have an a2enmod script (or an sbin
directory).

BTW, here is my version:
2.2.15

And here is where I got it:
  - http://httpd.apache.org/download.cgi#apache22
  - http://download.nextag.com/apache/httpd/httpd-2.2.15.tar.gz

I installed it with these 3 commands:

./configure --prefix=/pt/apache
make
make install

Here is what my server root looks like:

  /pt/apache:

  total used in directory 0 available 39446244
  drwxr-xr-x   14 maco  staff   476 Jun 19 12:41 .
  drwxr-xr-x   90 maco  staff  3060 Jun 19 17:15 ..
  drwxr-xr-x   17 maco  staff   578 Jun 19 13:01 bin
  drwxr-xr-x   11 maco  staff   374 Jun 19 12:41 build
  drwxr-xr-x    4 maco  staff   136 Jun 19 12:41 cgi-bin
  drwxr-xr-x    8 maco  staff   272 Jun 21 22:24 conf
  drwxr-xr-x   22 maco  staff   748 Jun 19 12:41 error
  drwxr-xr-x    3 maco  staff   102 Mar  1 21:33 htdocs
  drwxr-xr-x  160 maco  staff  5440 Jun 19 12:41 icons
  drwxr-xr-x   48 maco  staff  1632 Jun 19 12:41 include
  drwxr-xr-x    4 maco  staff   136 Jun 21 21:21 logs
  drwxr-xr-x    4 maco  staff   136 Jun 19 12:41 man
  drwxr-xr-x  180 maco  staff  6120 Mar  1 21:34 manual
  drwxr-xr-x    3 maco  staff   102 Jun 19 12:41 modules

If you have a minute or 3,
Please send me clues or a URL to a how-to for Apache 2.2.15 and SSL.

In the mean time I'll see if I can get SSL to work on nginx.

Thanks!

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx