Apache SSL not working -
- apache 2.2 on debian-based linux
# a2enmod ssl && service apache2 restart
- port 443 closed according sheildsup! scan, not in stealth mode
- apache listening on ports 80 , 443 according
netstat -nutlp
- hosting same website on port 80 , port 443
- http://website.com works, https://website.com not
my virtual host setup follows:
<virtualhost *:443> sslengine on sslcertificatekeyfile ssl_dir/ssl.key sslcertificatefile ssl_dir/ssl.crt </virtualhost> <virtualhost *:80 *:443> serveradmin webmaster@localhost serveralias website.com *.website.com servername www.website.com # few connection resets don't waste bandwidth on "hackers" secruleengine on secrule &request_headers:user-agent "@eq 0" drop,phase:1 secrule request_headers:user-agent "^$" drop,phase:1 secrule request_line "://" drop,phase:1 secrule request_uri "^/admin" drop,phase:1 secrule request_uri "^/mail" drop,phase:1 secrule request_uri "^/webmail" drop,phase:1 documentroot /path/public_html <directory /path/public_html/> options followsymlinks multiviews order allow,deny allow </directory> </virtualhost>
i got 2 .pem
files when registered ssl certificate, , can't find them.
my question is, why ssl not working? related .pem
files?
first of all, have enable ssl
sudo a2enmod ssl
and have include pem file (mini example)
<virtualhost *:443> sslengine on sslcertificatekeyfile ssl_dir/ssl.key sslcertificatefile ssl_dir/ssl.crt serveradmin webmaster@localhost serveralias website.com *.website.com servername www.website.com # few connection resets don't waste bandwidth on "hackers" secruleengine on secrule &request_headers:user-agent "@eq 0" drop,phase:1 secrule request_headers:user-agent "^$" drop,phase:1 secrule request_line "://" drop,phase:1 secrule request_uri "^/admin" drop,phase:1 secrule request_uri "^/mail" drop,phase:1 secrule request_uri "^/webmail" drop,phase:1 documentroot /path/public_html <directory /path/public_html/> options followsymlinks multiviews order allow,deny allow </directory> </virtualhost> <virtualhost *:80> serveradmin webmaster@localhost serveralias website.com *.website.com servername www.website.com # few connection resets don't waste bandwidth on "hackers" secruleengine on secrule &request_headers:user-agent "@eq 0" drop,phase:1 secrule request_headers:user-agent "^$" drop,phase:1 secrule request_line "://" drop,phase:1 secrule request_uri "^/admin" drop,phase:1 secrule request_uri "^/mail" drop,phase:1 secrule request_uri "^/webmail" drop,phase:1 documentroot /path/public_html <directory /path/public_html/> options followsymlinks multiviews order allow,deny allow </directory> </virtualhost>
Comments
Post a Comment