Instaling SSL Certificate in Apache2
I went through a major process to set up an SSL certificate in a web server going through a number of error messages including:
Data Transfer Interrupted
The connection to
Some data may have been transferred.
and
(98)Address already in use: make_sock: could not bind to address 0.0.0.0:80
I am using a certificate from GoDaddy and running Apache2 on Ubuntu 8.04.
Not sure what series of corrections fixed the problem but the following configuration is now working:
/etc/apache2/sites-enabled/000-default
NameVirtualHost
NameVirtualHost
Options Indexes FollowSymLinks
AllowOverride All
Order allow,deny
Allow from all
RewriteEngine On
RewriteOptions Inherit
DocumentRoot
ServerAdmin
ServerName
SSLEngine on
SSLOptions +StrictRequire
SSLVerifyClient none
SSLProxyEngine off
SSLProtocol -all +TLSv1 +SSLv3
SSLCipherSuite HIGH:MEDIUM:!aNULL:+SHA1:+MD5:+HIGH:+MEDIUM
AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl .crl
RewriteEngine On
RewriteOptions Inherit
ServerAdmin
DocumentRoot /var/app/public
ServerName
And, the ssl.conf directory (/etc/apache2/mods-enabled/ssl.conf)
SSLRandomSeed startup builtin
SSLRandomSeed startup file:/dev/urandom 512
SSLRandomSeed connect builtin
SSLRandomSeed connect file:/dev/urandom 512
##
## SSL Global Context
##
## All SSL configuration in this context applies both to
## the main server and all SSL-enabled virtual hosts.
##
#
# Some MIME-types for downloading Certificates and CRLs
#
AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl .crl
# Pass Phrase Dialog:
# Configure the pass phrase gathering process.
# The filtering dialog program (`builtin’ is a internal
# terminal dialog) has to provide the pass phrase on stdout.
SSLPassPhraseDialog builtin
# Inter-Process Session Cache:
# Configure the SSL Session Cache: First the mechanism
# to use and second the expiring timeout (in seconds).
SSLSessionCache shmcb:/var/run/apache2/ssl_scache(512000)
SSLSessionCacheTimeout 300
# Semaphore:
# Configure the path to the mutual exclusion semaphore the
# SSL engine uses internally for inter-process synchronization.
SSLMutex file:/var/run/apache2/ssl_mutex
#SSLEngine on SSLRandomSeed startup file:/dev/urandom 1024 SSLSessionCache shm:/usr/local/apache2/logs/ssl_cache_shm Hope this helps some other soul having the same tribulations.
SSLCertificateFile
SSLRandomSeed connect file:/dev/urandom 1024
SSLSessionCacheTimeout 600
Comments are closed.