apache/ssl help

[Rick Stevens]

Keyser Soze wrote:
> ----- Original Message -----
> From: Alexander Dalloz <alexander.dalloz at uni-bielefeld.de>
> Date: Mon, 29 Dec 2003 23:27:11 +0100
> To: fedora-list at redhat.com
> Subject: Re: apache/ssl help
> 
> 
>>Am Mo, den 29.12.2003 schrieb Keyser Soze um 23:04:
>>
>>>----- Original Message -----
>>>From: Rick Stevens <rstevens at vitalstream.com>
>>>Date: Mon, 29 Dec 2003 13:53:40 -0800
>>>
>>>
>>>>Keyser Soze wrote:
>>>>
>>>>>no, I do use ssh/sshd and putty to access the machine remotly, but that is not what I am asking for.
>>>>>
>>>>>imp is the webmail program I use.  I can access my mail on that machine via http:\\mymachine.com and the logging in, but I want to use https:\\mymachine.com and that is where my query originates.
>>>>
>>>>You have to set Apache up to use SSL.  Apache must be built with SSL
>>>>enabled, set up a certificate and put the appropriate directives in the
>>>>apache config file.  Details can be found on the Apache site:
>>>>
>>>>	http://httpd.apache.org/docs-2.0/ssl/ssl_faq.html
>>>>
>>>>BTW, we prefer bottom posting here.
>>>>
>>>>
>>>>>>Keyser Soze wrote:
>>>>>>
>>>>>>
>>>>>>>I have fedora core 1 installed and have apache and horde and imp all running and it seems to work great. Now I want to change the login to be able to use ssl. I have mode_ssl and openssl installed from fedora but have no idea how to enable ssl. Can someone point me in the right direction?
>>>>>>
>>>>>>What do you mean by "want the login to use ssl"?  The normal login
>>>>>>process doesn't use security.  I suspect you want to remote access it
>>>>>>via ssh, right?  In that case, simply run redhat-config-services
>>>>>>and enable sshd.  You need an ssh client to access it.  For Windows,
>>>>>>SecureCRT (commercial) or PuTTY (open source) are available.
>>>>>>----------------------------------------------------------------------
>>>>>>- Rick Stevens, Senior Systems Engineer     rstevens at vitalstream.com -
>>>
>>>
>>>ok bottom it is -
>>>
>>>I now have apache running with the new certs and it is watching both secure and normal ports.
>>>
>>>on the normal port (80) I see the imp login page and on the 443 page, I see the Fedora Core test page.
>>
>>So there is no valid content in the DocumentRoot of the SSL host.
>>
>>
>>>I'd like to not see imp on port 80, and instead I will put a page that I have yet to create.  I want imp to be on https (443).  
>>
>>You force HTTPS in the horde/imp configuration. Did you read that
>>documentation and config files? You can use mod_rewrite to do an
>>automatic redirect to the HTTPS site.
>>
>>
>>>How can I do this?  
>>>
>>>Or maybe a more basic question: If I am serving both secure and nonsecure pages, will there be two distinct sets of files (trees) under /var/www?  If so, what are the two tree roots?
>>
>>You can configure that how you like it. From what you are telling you
>>should really first read the apache documentation on how setting up
>>apache, especially using SSL and setting up vhosts.
>>
>>
>>>Thanks
>>
>>Alexander
> 
> 
> Maybe I missed it but I am having no luck in finding ssl documentation for apache.  Can you point me to a site?
> 
> (at least the version that comes with Fedora)

http://www.apache.org

----------------------------------------------------------------------
- Rick Stevens, Senior Systems Engineer     rstevens at vitalstream.com -
- VitalStream, Inc.                       http://www.vitalstream.com -
-                                                                    -
-     Make it idiot proof and someone will make a better idiot.      -
----------------------------------------------------------------------