del.icio.us Reddit Digg Facebook Technorati Google StumbleUpon Yahoo Diigo Wink

I went through a major process to set up an SSL certificate in a web server going through a number of error messages including:

Data Transfer Interrupted

The connection to has terminated unexpectedly.
Some data may have been transferred.

and


(98)Address already in use: make_sock: could not bind to address 0.0.0.0:80

I am using a certificate from GoDaddy and running Apache2 on Ubuntu 8.04.

Not sure what series of corrections fixed the problem but the following configuration is now working:

/etc/apache2/sites-enabled/000-default


NameVirtualHost :443
NameVirtualHost :80


Options Indexes FollowSymLinks
AllowOverride All
Order allow,deny
Allow from all

:80>
RewriteEngine On
RewriteOptions Inherit
DocumentRoot
ServerAdmin
ServerName :80

:443>
SSLEngine on
SSLOptions +StrictRequire

SSLVerifyClient none
SSLProxyEngine off

SSLProtocol -all +TLSv1 +SSLv3
SSLCipherSuite HIGH:MEDIUM:!aNULL:+SHA1:+MD5:+HIGH:+MEDIUM


AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl .crl

RewriteEngine On
RewriteOptions Inherit
ServerAdmin
DocumentRoot /var/app/public
ServerName :443


And, the ssl.conf directory (/etc/apache2/mods-enabled/ssl.conf)


SSLRandomSeed startup builtin
SSLRandomSeed startup file:/dev/urandom 512
SSLRandomSeed connect builtin
SSLRandomSeed connect file:/dev/urandom 512

##
## SSL Global Context
##
## All SSL configuration in this context applies both to
## the main server and all SSL-enabled virtual hosts.
##

#
# Some MIME-types for downloading Certificates and CRLs
#
AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl .crl

# Pass Phrase Dialog:
# Configure the pass phrase gathering process.
# The filtering dialog program (`builtin’ is a internal
# terminal dialog) has to provide the pass phrase on stdout.
SSLPassPhraseDialog builtin

# Inter-Process Session Cache:
# Configure the SSL Session Cache: First the mechanism
# to use and second the expiring timeout (in seconds).
SSLSessionCache shmcb:/var/run/apache2/ssl_scache(512000)
SSLSessionCacheTimeout 300

# Semaphore:
# Configure the path to the mutual exclusion semaphore the
# SSL engine uses internally for inter-process synchronization.
SSLMutex file:/var/run/apache2/ssl_mutex

#SSLEngine on
SSLCertificateFile SSLCertificateKeyFile SSLCertificateChainFile

SSLRandomSeed startup file:/dev/urandom 1024
SSLRandomSeed connect file:/dev/urandom 1024

SSLSessionCache shm:/usr/local/apache2/logs/ssl_cache_shm
SSLSessionCacheTimeout 600

Hope this helps some other soul having the same tribulations.

del.icio.us Reddit Digg Facebook Technorati Google StumbleUpon Yahoo Diigo Wink