httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Tan, Liao " <liao....@citi.com>
Subject RE: [users@httpd] Question about mod_ssl & mod_jk
Date Wed, 18 Jun 2008 18:40:55 GMT
All,

 I´m told that having the directives in httpd.conf

<IfModule ssl_module>
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
</IfModule>

means that my apache is configured with mod_ssl (and they´re uncommented).

Now the question risen up is how do I do to have my https working? As I mentioned below, already
have all certificates and their directives configured.

Thanks for your attention.

Ingrid 



-----Original Message-----
From: Tan, Liao [CMB-IT] 
Sent: Wednesday, June 18, 2008 12:07 PM
To: users@httpd.apache.org
Subject: RE: [users@httpd] Question about mod_ssl & mod_jk


Hah, unfortunately, my background about Apache, Tomcat stuffs is not enough to let me figure
the joke out.

I searched over all logs I could find, and didnt found any mod_ssl:(. So I guess I need to
do something to enable, install it. 

Saw in the 1st link that I need to download the source in modssl.org, and other installation
procedures as well. But the in my case is that I already have Apache installed, and need only
to add/enable/install the mod_ssl module. Ok, now another question to be pointed out:
"Make sure any module for your Apache server is compiled with the     
        compiler-flag -DEAPI, or your Webserver might crash or can not be    
        started.                                                             
Almost all modules I know adds the -DEAPI flag by themself except mod_jserv
and mod_jk"

But my apache installed is mod_jk (my configuration >> Apache/2.0.46 (Unix) mod_jk/1.2.4).
Should I supppose from this that in my case I dont have the DEAPI??? Not sure on what to do
now. How will I check if it has DEAPI? 

I keep doing searches over the net, but in case any of you has some hint and speed up a little
bit on my side, it´ll be helpful.

Im kind of disorientated with all this thing of https. This´s the 1st time i get into it.
So, ask for your detailed support.

Thank you.
Ingrid 



-----Original Message-----
From: André Warnier [mailto:aw@ice-sa.com]
Sent: Wednesday, June 18, 2008 11:14 AM
To: users@httpd.apache.org
Subject: Re: [users@httpd] Question about mod_ssl & mod_jk


Hi again.

Sorry Ingrid,
my first response was a little joke.  I saw your earlier post to the 
Tomcat list, and could not resists asking you again.
We have to keep up our guru image, you know.
;-)

Anyway, I cannot help you a lot, but maybe some :
To find out whether your Apache server has SSL loaded, the easiest would 
be to find it's main logfile, and in it find the line it prints when it 
starts up. This should be a line similar to the following :

Apache/2.2.3 (Debian) DAV/2 mod_jk/1.2.18 PHP/4.4.4-8+etch4 
mod_ssl/2.2.3 OpenSSL/0.9.8c mod_perl/2.0.2 Perl/v5.8.8 configured -- 
resuming normal operations

If you notice, mod_ssl is mentioned therem and also OpenSSL.  If your 
Apache does not load mod_ssl, that part will not be there.

Having the mod_ssl module loaded is a start, but just a start.
There may be many additional steps to perform.

If you search Google for "apache ssl howto", you will find already a 
full page of "how to's".  Which one is most useful to you depends on the 
operating system, Apache version etc..
I see you are under HPUX (version unknown), and not with the very latest 
versions of Apache, mod_jk etc.. to say the least.
There may exist a more recent package from HP (software depot), which 
already includes SSL.  That would be a good start.

Under your HPUX, the Apache is probably installed under /opt/hpws/apache 
or /opt/hpws_apache.  The logfiles may be under there too somewhere.

André


Tan, Liao wrote:
> Actually, the module directives I extracted from another apache which has already https
working, and as I´m not familiar with version particularities, I didn´t know if I can put
them to mine, which is in fact 2.0
> 
> So, at this point, I think my version will probably have different configuration to enable
SSL, in order to have my current http to https. But pls give me some directions on how to
start, at least to check if I have the mod_ssl enabled and if not, how to do it.
> 
> thank you.
> 
> Ingrid Liao
> Citi Markets & Banking | CMB Technology
> Brazil Technology Solutions Center | Business Intelligence, Database & Support Services
> Tel. +55-11-3741-6274 
> Fax. +55-11-3741-6285
> Email: liao.tan@citi.com
> 
> 
> 
> -----Original Message-----
> From: André Warnier [mailto:aw@ice-sa.com]
> Sent: Wednesday, June 18, 2008 10:39 AM
> To: users@httpd.apache.org
> Subject: Re: [users@httpd] Question about mod_ssl & mod_jk
> 
> 
> Hi.
> 
> Your configuration snippets below look like Apache 1.x, but you mention 
> that you are using 2.x.  How come ?
> 
> André
> 
> 
> Tan, Liao wrote:
>>  Hello, experts:
>>   My apache installed is has only the mod_jk.sl in the "libexec/" directory.
>>  I want to know what I need to do in order to to configure my current http to https?
I know this is a very general question, but to start, I guess I need to include the directives
in httpd.conf:
>>
>> 1)<IfDefine SSL> 
>>   LoadModule ssl_module libexec/mod_ssl.so
>>   </IfDefine>
>>  
>> 2)<IfDefine SSL>
>>   AddModule mod_ssl.c
>>   </IfDefine>
>>
>> Is this enough in order to enable the mod_ssl?
>>
>> Already have all certificates configured in the paths. But still unsure on if simply
adding those 2 directives will be enough, and will put the file (mod_ssl.so) there in the
path, or if I have to get this file from somewhere (if so, how?)
>>
>> Here are the environment configuration:
>> Web server: Apache/2.0.46 (Unix) mod_jk/1.2.4
>> Server: -HP-UX  
>> Tomcat: 4.0
>>  
>> Thanks
>>
>> Ingrid 
>>
>>
>>
>>  
>>
>>
> 
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
> 
> 
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
> 
> 

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message