Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Message-ID: <3F585A2E.98787FC9@dessent.net>
Date: Fri, 05 Sep 2003 02:41:02 -0700
From: Brian Dessent <brian@dessent.net>
Organization: My own little world...
MIME-Version: 1.0
To: users@httpd.apache.org
References: <Law15-F685NKGfVNMnf0002e3a0@hotmail.com>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Subject: Re: [users@httpd] Help!: Error 400 when setting up Virtual Host

yc lim wrote:
> 
> Hi Brian,
> 
>    thanks for the tip. Yes, I believe my apache is misbehaving due to SSL.
> This is what I did:
> 
>    Step 1: I commented out the 'Include conf.d/*.conf" line and restated
> httpd. True enough the virtual host started working. But I realised that by
> commenting out the .conf files, I also disabled alot of features (php
> included). My webpages run extensively on php.
> 
>   Step 2: Instead of commenting out all the .conf files, I renamed the
> ssl.conf file to a .txt file. Restarted the service, and now my virtual
> domains are working, so is my php.
> 
>   Right now I don't require any SSL but I would like to know what went wrong
> with my ssl.conf. I might require SSL in future.  (my original ssl.conf is
> attached). Kindly advise.

In order to use SSL, you need a certificate, which you probably haven't
created.  Doing this either involves becoming your own Certificate
Authority (CA) and self-certifying your new cert, or paying some fee to
some company like Verisigh or Thawte to sign your cert.

That aside, since you're using name-based virtual hosting you may need
to change the SSL vhost to "*:443" instead of "_default_:443", I'm not
sure if that makes a difference or not.  You'd also have to set the
"ServerName" correctly inside that vhost section, etc.

If you want to do this, I am positive there is a nice HOWTO that walks
one through creating a self-signed certificate and setting up a server
for SSL.  The caveat with going self-signed is that every browser will
pop up a warning box when connecting because a self-signed certificate
really isn't very trustworthy at all: "Trust me, I'm who I say I am."  I
think that's why the Apache docs refer to this as the "snake oil"
method.

Brian

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org