|
|
ru.linux- RU.LINUX --------------------------------------------------------------------- From : "Igor 2:5020/400 25 Feb 2004 15:05:05 To : All Subject : ssl & apache --------------------------------------------------------------------------------
Здравствуйте
Установил mod_ssl для Apache прописал необходимое в
ssl.default-vhost.conf (файл прилагается).
Перегружаю Apache вроде бы все нормально в логах ничего страшного нет.
1 При попытке зати https://john.virtual.ru - после чего в логе (5 минут
крутился этот флаг XP )
10.98.54.17 - - [14/Nov/2004:05:40:26 +0300] "\x80L\x01\x03" 200 5
10.98.54.17 - - [14/Nov/2004:05:45:28 +0300] "-" 408 -
2 пробывал в mozilla - https://john.virtual.
10.98.54.17 - - [14/Nov/2004:05:28:30 +0300] "\x80g\x01\x03" 200 5
3 пробывал в mozilla - http://john.virtual.ru:433
10.98.54.17 - - [14/Nov/2004:05:29:34 +0300] "\x80g\x01\x03" 200 5
4 пробывал telnet 10.98.54.112 443 ввожу qwerty возврощается hello и
сеанс закрывается
10.98.54.17 - - [14/Nov/2004:05:39:59 +0300] "qwerty" 200 5
Что не так?
error.log
[Sun Nov 14 05:27:18 2004] [notice] caught SIGTERM, shutting down
[Sun Nov 14 05:27:27 2004] [warn] module mod_php4.c is already added,
skipping
[Sun Nov 14 05:27:27 2004] [warn] module mod_ssl.c is already added,
skipping
[Sun Nov 14 05:27:27 2004] [notice] Apache/1.3.27 (ALT Linux/alt13)
mod_ssl/2.8.12 OpenSSL/0.9.6g PHP/4.3.1-dev/ALT rus/PL30.16 configured
-- resuming normal operations
[Sun Nov 14 05:27:27 2004] [notice] suEXEC mechanism enabled (wrapper:
/usr/sbin/suexec)
[Sun Nov 14 05:27:27 2004] [notice] Accept mutex: sysvsem (Default: sysvsem)
ssl.default-vhost.conf
NameVirtualHost virtual.ru
<VirtualHost john.virtual.ru>
DocumentRoot /home/john/site
ServerName john.virtual.ru
ErrorLog logs/ssl-errorJOHN_log
TransferLog logs/ssl-accessJOHN_log
SSLEngine on
SSLCertificateFile conf/ssl/server.crt
SSLCertificateKeyFile conf/ssl/server.key
SSLCACertificatePath conf/ssl
SSLCACertificateFile conf/ssl/ca.crt
SSLVerifyClient require
SSLVerifyDepth 10
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
CustomLog logs/ssl_request_log \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>
ssl_engine_log
[14/Nov/2004 05:27:22 02120] [info] Server: Apache/1.3.27, Interface:
mod_ssl/2.8.12, Library: OpenSSL/0.9.6g
[14/Nov/2004 05:27:22 02120] [info] Init: 1st startup round (still not
detached)
[14/Nov/2004 05:27:22 02120] [info] Init: Initializing OpenSSL library
[14/Nov/2004 05:27:22 02120] [info] Init: Loading certificate & private
key of SSL-aware server john.virtual.ru:443
[14/Nov/2004 05:27:22 02120] [info] Init: Requesting pass phrase via
builtin terminal dialog
[14/Nov/2004 05:27:25 02120] [trace] Init: (john.virtual.ru:443)
encrypted RSA private key - pass phrase requested
[14/Nov/2004 05:27:25 02120] [info] Init: Wiped out the queried pass
phrases from memory
[14/Nov/2004 05:27:25 02120] [info] Init: Seeding PRNG with 136 bytes
of entropy
[14/Nov/2004 05:27:25 02120] [info] Init: Generating temporary RSA
private keys (512/1024 bits)
[14/Nov/2004 05:27:26 02120] [info] Init: Configuring temporary DH
parameters (512/1024 bits)
[14/Nov/2004 05:27:27 02123] [info] Init: 2nd startup round (already
detached)
[14/Nov/2004 05:27:27 02123] [info] Init: Reinitializing OpenSSL library
[14/Nov/2004 05:27:27 02123] [info] Init: Created hash-table (250
buckets) in shared memory (512000 bytes) for SSL session cache
[14/Nov/2004 05:27:27 02123] [info] Init: Seeding PRNG with 136 bytes
of entropy
[14/Nov/2004 05:27:27 02123] [info] Init: Configuring temporary RSA
private keys (512/1024 bits)
[14/Nov/2004 05:27:27 02123] [info] Init: Configuring temporary DH
parameters (512/1024 bits)
[14/Nov/2004 05:27:27 02123] [info] Init: Initializing (virtual)
servers for SSL
[14/Nov/2004 05:27:27 02123] [info] Init: Configuring server
john.virtual.ru:443 for SSL protocol
[14/Nov/2004 05:27:27 02123] [trace] Init: (john.virtual.ru:443)
Creating new SSL context (protocols: SSLv2, SSLv3, TLSv1)
[14/Nov/2004 05:27:27 02123] [trace] Init: (john.virtual.ru:443)
Configuring client authentication
[14/Nov/2004 05:27:27 02123] [trace] CA certificate:
/C=ru/ST=rosobl/L=rostov/O=cru/OU=cru/CN=john.virtual.ru/Email=igo@virtual.ru
[14/Nov/2004 05:27:27 02123] [trace] CA certificate:
/C=ru/ST=rosobl/L=rostov/O=cru/OU=cru/CN=john.virtual.ru/Email=igo@virtual.ru
[14/Nov/2004 05:27:27 02123] [trace] CA certificate:
/C=ru/L=rostov/O=cru/OU=cru/CN=john.virtual.ru/Email=igo@virtual.ru
[14/Nov/2004 05:27:27 02123] [trace] Init: (john.virtual.ru:443)
Configuring RSA server certificate
[14/Nov/2004 05:27:27 02123] [info] Init: (john.virtual.ru:443) RSA
server certificate enables Server Gated Cryptography (SGC)
[14/Nov/2004 05:27:27 02123] [trace] Init: (john.virtual.ru:443)
Configuring RSA server private key
--- ifmail v.2.15dev5.3
* Origin: Demos online service (2:5020/400)
Вернуться к списку тем, сортированных по: возрастание даты уменьшение даты тема автор
Архивное /ru.linux/6577a244df0b.html, оценка из 5, голосов 10
|