httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Andrew M <and...@jibeya.com>
Subject Re: [users@httpd] mod_jk2 https
Date Wed, 01 Dec 2004 21:35:11 GMT
Hi,
I have port 80, in http.conf, like so:

Listen 127.0.0.1:80

and port 443, in ssl.conf, like so:

Listen 127.0.0.1:443

Now I get:

could not bind to address 127.0.0.1:443
no listening sockets available, shutting down
Unable to open logs

Any ideas?

thanks

Andrew
On 1 Dec 2004, at 21:27, Andrew M wrote:

> ralph,
> I have recreated a key with no encryption but now get the following  
> message in the terminal window:
>
> ./apachectl start
> (13)Permission denied: make_sock: could not bind to address 0.0.0.0:443
> no listening sockets available, shutting down
> Unable to open logs
>
> or
>
> ./apachectl startssl
> (13)Permission denied: make_sock: could not bind to address 0.0.0.0:443
> no listening sockets available, shutting down
> Unable to open logs
>
> I have attached my new key
>
> regards
>
>
> Andrew
>
> <server.key>
>
> On 1 Dec 2004, at 20:59, Ralf Glauberman wrote:
>
>> like i sayed, your key-file is encrypted, try to use a unencrypted  
>> one.
>>
>> ----- Original Message ----- From: "Andrew M" <andrew@jibeya.com>
>> To: <users@httpd.apache.org>
>> Sent: Wednesday, December 01, 2004 9:45 PM
>> Subject: Re: [users@httpd] mod_jk2 https
>>
>>
>>> Ralph,
>>> my test key and certificate look fine to me, take a look.
>>>
>>>
>>> regards
>>>
>>> Andrew
>>>
>>>
>>
>>
>> ---------------------------------------------------------------------- 
>> ----------
>>
>>
>>>
>>> On 1 Dec 2004, at 20:35, Ralf Glauberman wrote:
>>>
>>>> make sure your key-file and crt-file exist, belong together, are  
>>>> valid
>>>> and readable for apache.
>>>> try a non-encripted certificate/key.
>>>> the key-file should look like this:
>>>> -----BEGIN RSA PRIVATE KEY-----
>>>> ...
>>>> -----END RSA PRIVATE KEY-----
>>>> the cert should look like this:
>>>> Certificate:
>>>>    Data:
>>>>        Version: 1 (0x0)
>>>>        Serial Number: 4 (0x4)
>>>>        Signature Algorithm: md5WithRSAEncryption
>>>>        Issuer: ...
>>>>        Validity
>>>>            Not Before: Jun 21 12:51:40 2004 GMT
>>>>            Not After : Dec 18 12:51:40 2004 GMT
>>>>        Subject: ...
>>>>        Subject Public Key Info:
>>>>            Public Key Algorithm: rsaEncryption
>>>>            RSA Public Key: (1024 bit)
>>>>                Modulus (1024 bit):
>>>>              ... other stuff
>>>> -----BEGIN CERTIFICATE-----
>>>> ...
>>>> ----END CERTIFICATE-----
>>>>
>>>>
>>>> ----- Original Message ----- From: Andrew M
>>>> To: users@httpd.apache.org
>>>> Sent: Wednesday, December 01, 2004 9:23 PM
>>>> Subject: Re: [users@httpd] mod_jk2 https
>>>>
>>>>
>>>> Ralph,
>>>> I removed all the IfDefine tags from both the http.conf and ssl.conf
>>>> files and then shut down. The server will now not boot up when I ask
>>>> it to, and when I check the error logs I get the following:
>>>>
>>>> [Wed Dec 01 20:19:23 2004] [error] Init: Unable to read pass phrase
>>>> [Hint: key introduced or changed before restart?]
>>>> [Wed Dec 01 20:19:23 2004] [error] SSL Library Error: 218710120
>>>> error:0D094068:asn1 encoding routines:d2i_ASN1_SET:bad tag
>>>> [Wed Dec 01 20:19:23 2004] [error] SSL Library Error: 218529960
>>>> error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
>>>> [Wed Dec 01 20:19:23 2004] [error] SSL Library Error: 218595386
>>>> error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1
>>>> error
>>>> [Wed Dec 01 20:19:23 2004] [error] SSL Library Error: 218734605
>>>> error:0D09A00D:asn1 encoding routines:d2i_PrivateKey:ASN1 lib
>>>>
>>>> regards
>>>>
>>>> Andrew
>>>>
>>>>
>>>> On 1 Dec 2004, at 20:11, Ralf Glauberman wrote:
>>>>
>>>>
>>>> make sure you have removed every ifdefined in both configs, stop the
>>>> server, look at ps -aux to see if all childs have exited, if not  
>>>> kill
>>>> them. then start apache again. look at the error_log to see if there
>>>> are any problems.
>>>>
>>>> ----- Original Message ----- From: Andrew M
>>>> To: users@httpd.apache.org
>>>> Sent: Wednesday, December 01, 2004 8:58 PM
>>>> Subject: Re: [users@httpd] mod_jk2 https
>>>>
>>>>
>>>> Ralph,
>>>> already done. See message below. i attach version2 serv-info details
>>>> again.
>>>> Once I remove the tags, if I try to reboot the server it will not
>>>> shutdown, and I also cannot access the server at all!
>>>>
>>>> regards
>>>>
>>>> Andrew
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> On 1 Dec 2004, at 19:44, Andrew M wrote:
>>>>
>>>>
>>>> Ralph,
>>>> looking at the server-info myself, I was unable to see the ssl  
>>>> module
>>>> being pulled in. I did the following:
>>>>
>>>> #<IfDefine SSL>
>>>> LoadModule ssl_module modules/mod_ssl.so
>>>> #</IfDefine>
>>>>
>>>> and now I can see the ssl_mod component being pulled in to the
>>>> server-info. Is there an issue with these tags? Anyway, I enclose
>>>> version 2 of the server-info
>>>>
>>>> regards
>>>>
>>>> Andrew
>>>> <Server_Information2.html>
>>>>
>>>> On 1 Dec 2004, at 19:38, Andrew M wrote:
>>>>
>>>>
>>>> Ralph,
>>>> as requested, i have attached the server information.. ;-)
>>>>
>>>> regards
>>>>
>>>> Andrew
>>>> <Server_Information.html>
>>>> On 1 Dec 2004, at 19:31, Ralf Glauberman wrote:
>>>>
>>>>
>>>> i'm really sorry, but i did a mistake: it has to be server-info, not
>>>> server-status. could you please try this?
>>>>
>>>> ----- Original Message ----- From: Andrew M
>>>> To: users@httpd.apache.org
>>>> Sent: Wednesday, December 01, 2004 7:13 PM
>>>> Subject: Re: [users@httpd] mod_jk2 https
>>>>
>>>>
>>>> Ralf,
>>>> I have attached the information you requested as a html file.
>>>>
>>>> regards
>>>>
>>>> Andrew
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> On 1 Dec 2004, at 17:52, Ralf Glauberman wrote:
>>>>
>>>>
>>>> <Location /server-status>
>>>> SetHandler server-status
>>>> Order deny,allow
>>>> Deny from all
>>>> Allow from 127.0.0.1
>>>> </Location>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> -------------------------------------------------------------------- 
>>>> -
>>>> The official User-To-User support forum of the Apache HTTP Server
>>>> Project.
>>>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>>>> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>>>> " from the digest: users-digest-unsubscribe@httpd.apache.org
>>>> For additional commands, e-mail: users-help@httpd.apache.org
>>>>
>>>> -------------------------------------------------------------------- 
>>>> -
>>>> The official User-To-User support forum of the Apache HTTP Server
>>>> Project.
>>>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>>>> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>>>> " from the digest: users-digest-unsubscribe@httpd.apache.org
>>>> For additional commands, e-mail: users-help@httpd.apache.org
>>>>
>>>>
>>>>
>>>> <beya-email.gif>
>>>> +The home of urban music
>>>> + http://www.beyarecords.com
>>>>
>>>> -------------------------------------------------------------------- 
>>>> -
>>>> The official User-To-User support forum of the Apache HTTP Server
>>>> Project.
>>>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>>>> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>>>> " from the digest: users-digest-unsubscribe@httpd.apache.org
>>>> For additional commands, e-mail: users-help@httpd.apache.org
>>>>
>>>> <beya-email.gif>
>>>> +The home of urban music
>>>> + http://www.beyarecords.com
>>>>
>>>> -------------------------------------------------------------------- 
>>>> -
>>>> The official User-To-User support forum of the Apache HTTP Server
>>>> Project.
>>>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>>>> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>>>> " from the digest: users-digest-unsubscribe@httpd.apache.org
>>>> For additional commands, e-mail: users-help@httpd.apache.org
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> -------------------------------------------------------------------- 
>>>> -
>>>> The official User-To-User support forum of the Apache HTTP Server
>>>> Project.
>>>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>>>> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>>>> " from the digest: users-digest-unsubscribe@httpd.apache.org
>>>> For additional commands, e-mail: users-help@httpd.apache.org
>>>>
>>>> -------------------------------------------------------------------- 
>>>> -
>>>> The official User-To-User support forum of the Apache HTTP Server
>>>> Project.
>>>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>>>> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>>>> " from the digest: users-digest-unsubscribe@httpd.apache.org
>>>> For additional commands, e-mail: users-help@httpd.apache.org
>>>>
>>>> -------------------------------------------------------------------- 
>>>> -
>>>> The official User-To-User support forum of the Apache HTTP Server
>>>> Project.
>>>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>>>> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>>>>   "   from the digest: users-digest-unsubscribe@httpd.apache.org
>>>> For additional commands, e-mail: users-help@httpd.apache.org
>>>>
>>>>
>>>
>>>
>>>
>>
>>
>> ---------------------------------------------------------------------- 
>> ----------
>>
>>
>>> ---------------------------------------------------------------------
>>> The official User-To-User support forum of the Apache HTTP Server  
>>> Project.
>>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>>> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>>>   "   from the digest: users-digest-unsubscribe@httpd.apache.org
>>> For additional commands, e-mail: users-help@httpd.apache.org
>>
>>
>> ---------------------------------------------------------------------
>> The official User-To-User support forum of the Apache HTTP Server  
>> Project.
>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>>   "   from the digest: users-digest-unsubscribe@httpd.apache.org
>> For additional commands, e-mail: users-help@httpd.apache.org
>>
>>
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server  
> Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org

Mime
View raw message