SSL apache

[^NeXsUs^]

Raga ho alcuni prob a configurare apache con ssl

Allora ho installato

Apache 1.3.33
Php 5.X
Mysql 4.X


Poi ho installato

Openssl
SSLeay


Ed in seguito ho scaricato apache+Ssl solo che non riesco a patcharlo ...


Your version of patch is OK.
Searching for a usable OpenSSL installation or source directory
Looks like you are using OpenSSL, adjusting app name
OpenSSL installation found in: /usr
Using the installed version of OpenSSL found in /usr
If this is not what you want stop now and specify the path to OpenSSL
explicitly.

Do you want me to apply the fixed-up Apache-SSL patch for you? [n] Y



Do you want me to apply the fixed-up Apache-SSL patch for you? [n] y
can't find file to patch at input line 4
Perhaps you used the wrong -p or --strip option?
The text leading up to this was:
--------------------------
|diff -u -r ../apache_1.3.29/Makefile.tmpl ./Makefile.tmpl
|--- ../apache_1.3.29/Makefile.tmpl Mon Apr 28 13:32:12 2003
|+++ ./Makefile.tmpl Thu Jan 15 12:50:49 2004
--------------------------
File to patch:

( io ho un 1.3.33 va bene = ) ??

qualcuno sa dirmi qualche cosa ?

bye

[l.golinelli]

Sei sicuro che non fosse già compilato apache per ssl prima di patharlo te?
Che distro usi?

[^NeXsUs^]

urge altro problema -.-

-> Non era installato SSL

cmq sono riuscito a installarlo con MOD_SSL

solo che adesso ho un altro problema

quando avvio il server ecco cosa mi risponde

$ /usr/local/apache/bin/httpd startssl

Apache/1.3.33 mod_ssl/2.8.22 (Pass Phrase Dialog)
Some of your private key files are encrypted for security reasons.
In order to read them you have to provide us with the pass phrases.

Server pc02.localdomain:443 (RSA)
Enter pass phrase:

Ok: Pass Phrase Dialog successful.

Solo che non mi apre nessuna porta

pc02 <--- mio pc

localdomain <--- bho che è ?? come faccio a definirli


Io in httpd.conf ho messo 127.0.0.1

Puoi spiegarmi come funge ? al momento solo alquanto confuso bye e grazie

[l.golinelli]

Guarda i logs...

[^NeXsUs^]

cioè ??

come faccio a definire sto localdomain ?

[^NeXsUs^]

Questi qua sono i log di SSL_ENGINE_LOG ma non so come mi possano aiutare

[01/Nov/2004 15:30:52 07206] [info] Server: Apache/1.3.33, Interface: mod_ssl/2
.8.22, Library: OpenSSL/0.9.7e
[01/Nov/2004 15:30:52 07206] [info] Init: 1st startup round (still not detached
)
[01/Nov/2004 15:30:52 07206] [info] Init: Initializing OpenSSL library
[01/Nov/2004 15:30:52 07206] [info] Init: Loading certificate & private key of
SSL-aware server pc02.localdomain:443
[01/Nov/2004 15:30:52 07206] [info] Init: Requesting pass phrase via builtin te
rminal dialog
[01/Nov/2004 15:31:02 07206] [info] Init: Wiped out the queried pass phrases fr
om memory
[01/Nov/2004 15:31:02 07206] [info] Init: Seeding PRNG with 136 bytes of entrop
y
[01/Nov/2004 15:31:02 07206] [info] Init: Generating temporary RSA private keys
(512/1024 bits)
[01/Nov/2004 15:31:02 07206] [info] Init: Configuring temporary DH parameters (
512/1024 bits)
[01/Nov/2004 15:33:06 07213] [info] Server: Apache/1.3.33, Interface: mod_ssl/2
.8.22, Library: OpenSSL/0.9.7e
[01/Nov/2004 15:33:06 07213] [info] Init: 1st startup round (still not detached
)
[01/Nov/2004 15:33:06 07213] [info] Init: Initializing OpenSSL library
[01/Nov/2004 15:33:06 07213] [info] Init: Loading certificate & private key of
SSL-aware server pc02.localdomain:443
[01/Nov/2004 15:33:06 07213] [info] Init: Requesting pass phrase via builtin te
rminal dialog
[01/Nov/2004 15:33:11 07213] [info] Init: Wiped out the queried pass phrases fr
om memory
[01/Nov/2004 15:33:11 07213] [info] Init: Seeding PRNG with 136 bytes of entrop
y
[01/Nov/2004 15:33:11 07213] [info] Init: Generating temporary RSA private keys
(512/1024 bits)
[01/Nov/2004 15:33:11 07213] [info] Init: Configuring temporary DH parameters (
512/1024 bits)
[01/Nov/2004 16:48:31 04138] [info] Server: Apache/1.3.33, Interface: mod_ssl/2
.8.22, Library: OpenSSL/0.9.7e
[01/Nov/2004 16:48:31 04138] [info] Init: 1st startup round (still not detached
)
[01/Nov/2004 16:48:31 04138] [info] Init: Initializing OpenSSL library
[01/Nov/2004 16:48:31 04138] [info] Init: Loading certificate & private key of
SSL-aware server pc02.localdomain:443
[01/Nov/2004 16:48:31 04138] [info] Init: Requesting pass phrase via builtin te
rminal dialog
[01/Nov/2004 16:48:38 04138] [info] Init: Wiped out the queried pass phrases fr
om memory
[01/Nov/2004 16:48:38 04138] [info] Init: Seeding PRNG with 136 bytes of entrop
y
[01/Nov/2004 16:48:38 04138] [info] Init: Generating temporary RSA private keys
(512/1024 bits)
[01/Nov/2004 16:48:38 04138] [info] Init: Configuring temporary DH parameters (
512/1024 bits)
[01/Nov/2004 16:48:38 04139] [info] Init: 2nd startup round (already detached)
[01/Nov/2004 16:48:38 04139] [info] Init: Reinitializing OpenSSL library
[01/Nov/2004 16:48:38 04139] [info] Init: Seeding PRNG with 136 bytes of entrop
y
[01/Nov/2004 16:48:38 04139] [info] Init: Configuring temporary RSA private key
s (512/1024 bits)
[01/Nov/2004 16:48:38 04139] [info] Init: Configuring temporary DH parameters (
512/1024 bits)
[01/Nov/2004 16:48:38 04139] [info] Init: Initializing (virtual) servers for SS
L
[01/Nov/2004 16:48:38 04139] [info] Init: Configuring server pc02.localdomain:4
43 for SSL protocol
[01/Nov/2004 16:48:38 04139] [warn] Init: (pc02.localdomain:443) RSA server cer
tificate CommonName (CN) `192.168.1.34' does NOT match server name!?

[l.golinelli]

01/Nov/2004 16:48:38 04139] [warn] Init: (pc02.localdomain:443) RSA server cer
tificate CommonName (CN) `192.168.1.34' does NOT match server name!?

[^NeXsUs^]

ok -.- cosa devo fare
in pratica mi dice che il server name non corrisponde a 192.168.1.34

[^NeXsUs^]

a ho capito forse -.- ho definito nel certificato come pc02 mentre in httpd ho messo 192.168.1.34

Ma se nella creazione del certificato metto 192.168.1.34 va bene ?

[^NeXsUs^]

Ok ho sistemato ma ora mi sorge spontanea un altra domanda -.-

ma le configurazioni che avevo prima che fine hanno fatto ??

praticamente il nuovo apache ha soppiantato anche quello vecchio che avevo prima ??