<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta content="text/html;charset=Big5" http-equiv="Content-Type"> <title></title> </head> <body bgcolor="#ffffff" text="#000000"> James Kosin wrote: <blockquote cite="mid46F3FB19.5020102@beta.intcomgrp.com" type="cite"> <pre wrap="">-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 <a class="moz-txt-link-abbreviated" href="mailto:edwardspl@ita.org.mo">edwardspl@ita.org.mo</a> wrote: </pre> <blockquote type="cite"> <pre wrap="">James Kosin wrote: </pre> <blockquote type="cite"> <pre wrap="">-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 <a class="moz-txt-link-abbreviated" href="mailto:edwardspl@ita.org.mo">edwardspl@ita.org.mo</a> wrote: </pre> <blockquote type="cite"> <pre wrap="">Dear All, I can't to enable the https as the following : <VirtualHost webmail.ita.org.mo> Redirect / <a class="moz-txt-link-freetext" href="https://webmail.ita.org.mo:443">https://webmail.ita.org.mo:443</a> </VirtualHost> <VirtualHost webmail.ita.org.mo> DocumentRoot ... ServerName webmail.ita.org.mo ErrorLog ... TransferLog ... SSLEngine on SSLCertificateFile server.crt SSLCertificateKeyFile server.key <Files ~ "\.(cgi|shtml|phtml|php3?)$"> SSLOptions +StdEnvVars </Files> <Directory "/var/www/cgi-bin"> SSLOptions +StdEnvVars </Directory> SetEnvIf User-Agent ".*MSIE.*" \ nokeepalive ssl-unclean-shutdown \ downgrade-1.0 force-response-1.0 CustomLog /var/log/itawm-ssl_request_log \ "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b" </VirtualHost> error log of web server : [Fri Sep 21 22:42:44 2007] [warn] RSA server certificate CommonName (CN) `localhost' does NOT match server name!? [Fri Sep 21 22:42:44 2007] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?) [Fri Sep 21 22:42:44 2007] [warn] RSA server certificate CommonName (CN) `localhost' does NOT match server name!? [Fri Sep 21 22:43:29 2007] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?) [Fri Sep 21 22:43:29 2007] [warn] RSA server certificate CommonName (CN) `localhost' does NOT match server name!? [Fri Sep 21 22:43:29 2007] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?) [Fri Sep 21 22:43:29 2007] [warn] RSA server certificate CommonName (CN) `localhost' does NOT match server name!? ssl error log : [Fri Sep 21 22:43:29 2007] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?) [Fri Sep 21 22:43:29 2007] [warn] RSA server certificate CommonName (CN) `localhost.localdomain' does NOT match server name!? [Fri Sep 21 22:43:29 2007] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?) [Fri Sep 21 22:43:29 2007] [warn] RSA server certificate CommonName (CN) `localhost.localdomain' does NOT match server name!? So, what mistake about the config ? Remark : The ssl is self-signed SSL Certificate, and the Web Server come with FC6 System. Thanks ! Edward. </pre> </blockquote> <pre wrap="">Edward, You didn't do anything wrong. You will have to create a certificate for webmail.ita.org.mo for this to work without the warnings. The default cert does not handle external connections... I believe the cets will be in the /etc/httpd/conf directory. </pre> </blockquote> <pre wrap="">Hello Jame, After the config and restart the web server... I found that we can't to connect to <a class="moz-txt-link-freetext" href="http://webmail.ita.org.mo">http://webmail.ita.org.mo</a> ( include redirect problem : https ) ! So, would you mind to give me more help ? Thanks ! Edward. </pre> </blockquote> <pre wrap="">Do you have SELinux enabled? You will have to setup the web-permissions for the webserver to work properly. It looks like the redirection is working. Do you have a firewall setup? If so, you may have to allow or redirect port 443. Does the pages work without the redirection to https? Are the HTML pages there in the /var/www/html (root) directory? If you are using squirelmail as the web interface, the redirection should be <a class="moz-txt-link-freetext" href="https://webmail.ita.org.mo/webmail">https://webmail.ita.org.mo/webmail</a> Let me know if I have hit anything. - -James </pre> </blockquote> Hello James, 1, SELinux is disable. 2, Firewall enable 443 port. 3, how about the permission for the ssl files ? 4, Before the https enabled, the http is good for work ! Thanks ! Edward. </body> </html>