Subject: Re: apache and mod_ssl
To: Kevin P. Neal <kpneal@pobox.com>
From: Erik Huizing <huizing@cpsc.ucalgary.ca>
List: netbsd-users
Date: 02/09/2001 10:01:40
My httpd.conf file has this junk in it (pretty much at the end), which is
probably the source of my woes. 

<IfDefine SSL>
Listen 8080
Listen 8443
</IfDefine>

...

<IfDefine SSL>

##
# SSL Virtual Host Context
##

<VirtualHost _default_:8443>

#  General setup for the virtual host
DocumentRoot "/usr/pkg/share/httpd/htdocs"
ServerName colwyn.zhadum.de
ServerAdmin tron@colwyn.zhadum.de
ErrorLog /var/log/httpd/error_log
TransferLog /var/log/httpd/access_log

#   SSL Engine Switch:
#   Enable/Disable SSL for this virtual host.
SSLEngine on
...<snip>
</VirtualHost>

</IfDefine>

I port scanned my machine and these came up when I'm running ssl:
8080/tcp   open        http-proxy
8443/tcp   open        unknown

If I just change the 8080 and 8443 to their 'proper' values in the
<IfDefine> above, should eveything be hunky dory?

The first rule of Fight Club is You Do Not Talk About Fight Club.

// Erik Huizing   huizing@cpsc.ucalgary.ca
// www.cpsc.ucalgary.ca/~huizing

On Fri, 9 Feb 2001, Kevin P. Neal wrote:

> On Thu, Feb 08, 2001 at 09:11:17PM +0000, Justin Heath wrote:
> > On Wed, Feb 07, 2001 at 08:22:14PM -0700, Erik Huizing wrote:
> > > Thanks for the help. I just need to tweak apache a bit so that it doesn't
> > > use a really wierd port. Do I need to have a virtual host running for SSL
> > > to work properly? Ideally, I'd like to have the server to serve out pages
> > > normally on port 80 and use SSL for https (443, right?). Will uncommenting
> > > the <IfDefine SSL> </Ifdefine> around the default virtual host do the
> > > trick?
> 
> You mean it doesn't work like that anyway? IE, http://your.server/ goes
> to port 80 and https://your.server/ goes to port 443 (the SSL port)?
> 
> Doesn't it take some work to get Apache to not behave the standard way?
> What do your Listen and Bind (Bind?) directives look like?
> 
> As for virtual hosts, you can use them with SSL but do not have to. The
> <IfDefine SSL> goop simply allows you to use the same config files with
> a non-SSL Apache and an SSL Apache.
> -- 
> Kevin P. Neal                                http://www.pobox.com/~kpn/
>            On the community of supercomputer fans:
> "But what we lack in size we make up for in eccentricity." 
>   from Steve Gombosi, comp.sys.super, 31 Jul 2000 11:22:43 -0600
>