[Apache] geen virtual host in config voor ssl certificaat?

[Gijs007]

Beste tweakers,

Ik probeer mijn ssl certificaat te installeren op mijn server, maar ik zit klem bij stap 2 van deze tutorial:
http://www.geocerts.com/install/apache_2

ik heb inmiddels virtual host aan de praat gekregen, maar zodra ik dit toevoeg:
SSLEngine on
SSLCertificateFile C:\Program Files (x86)\Apache Software Foundation\Apache2.2\bin\ssl\certificate.crt
SSLCertificateKeyFile C:\Program Files (x86)\Apache Software Foundation\Apache2.2\bin\www.1xgclan.com.key
SSLCACertificateFile C:\Program Files (x86)\Apache Software Foundation\Apache2.2\bin\intermediate.crt

wil mijn apache server niet meer starten met de foutmelding: the requested operation has failed!

ook als ik alleen SSLengine on doe krijg ik die foutmelding.

[ Voor 61% gewijzigd door Gijs007 op 26-07-2011 14:03 . Reden: virtual host werkt inmidels maar ssl nog niet. ]

[Razwer]

kijk eens in je apache logs

ik zou de paden eens tussen quotes zetten als ik jou was.

zoiets dus:
SSLEngine on
SSLCertificateFile "C:\Program Files (x86)\Apache Software Foundation\Apache2.2\bin\ssl\certificate.crt"
SSLCertificateKeyFile "C:\Program Files (x86)\Apache Software Foundation\Apache2.2\bin\www.1xgclan.com.key"
SSLCACertificateFile "C:\Program Files (x86)\Apache Software Foundation\Apache2.2\bin\intermediate.crt"

[ Voor 119% gewijzigd door Razwer op 26-07-2011 14:13 ]

[Gijs007]

Razwer schreef op dinsdag 26 juli 2011 @ 14:10:
kijk eens in je apache logs

ik zou de paden eens tussen quotes zetten als ik jou was.

zoiets dus:
SSLEngine on
SSLCertificateFile "C:\Program Files (x86)\Apache Software Foundation\Apache2.2\bin\ssl\certificate.crt"
SSLCertificateKeyFile "C:\Program Files (x86)\Apache Software Foundation\Apache2.2\bin\www.1xgclan.com.key"
SSLCACertificateFile "C:\Program Files (x86)\Apache Software Foundation\Apache2.2\bin\intermediate.crt"

nope, tussen quotes hielp niet...

ik kwam er net achter dat de ssl module niet was geactiveerd omdat er een # voor stond, dus die heb ik weg gehaald maar heb nog steeds het zelfde probleem.

hier is een deel van de log file:

[Tue Jul 26 14:05:21 2011] [notice] Apache/2.2.19 (Win32) PHP/5.3.6 configured -- resuming normal operations
[Tue Jul 26 14:05:21 2011] [notice] Server built: May 20 2011 17:39:35
[Tue Jul 26 14:05:21 2011] [notice] Parent: Created child process 5872
httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.1.102 for ServerName
httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.1.102 for ServerName
[Tue Jul 26 14:05:21 2011] [notice] Child 5872: Child process is running
[Tue Jul 26 14:05:21 2011] [notice] Child 5872: Acquired the start mutex.
[Tue Jul 26 14:05:21 2011] [notice] Child 5872: Starting 64 worker threads.
[Tue Jul 26 14:05:21 2011] [notice] Child 5872: Starting thread to listen on port 80.
[Tue Jul 26 14:08:03 2011] [notice] Parent: Received shutdown signal -- Shutting down the server.
[Tue Jul 26 14:08:03 2011] [notice] Child 5872: Exit event signaled. Child process is ending.
[Tue Jul 26 14:08:04 2011] [notice] Child 5872: Released the start mutex
[Tue Jul 26 14:08:05 2011] [notice] Child 5872: All worker threads have exited.
[Tue Jul 26 14:08:05 2011] [notice] Child 5872: Child process is exiting
[Tue Jul 26 14:08:05 2011] [notice] Parent: Child process exited successfully.
[Tue Jul 26 14:08:23 2011] [warn] Init: Session Cache is not configured [hint: SSLSessionCache]
httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.1.102 for ServerName
[Tue Jul 26 14:08:24 2011] [notice] Apache/2.2.19 (Win32) mod_ssl/2.2.19 OpenSSL/0.9.8r PHP/5.3.6 configured -- resuming normal operations
[Tue Jul 26 14:08:24 2011] [notice] Server built: May 20 2011 17:39:35
[Tue Jul 26 14:08:24 2011] [notice] Parent: Created child process 3180
httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.1.102 for ServerName
[Tue Jul 26 14:08:24 2011] [warn] Init: Session Cache is not configured [hint: SSLSessionCache]
httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.1.102 for ServerName
[Tue Jul 26 14:08:25 2011] [notice] Child 3180: Child process is running
[Tue Jul 26 14:08:25 2011] [notice] Child 3180: Acquired the start mutex.
[Tue Jul 26 14:08:25 2011] [notice] Child 3180: Starting 64 worker threads.
[Tue Jul 26 14:08:25 2011] [notice] Child 3180: Starting thread to listen on port 80.
[Tue Jul 26 14:08:33 2011] [notice] Parent: Received shutdown signal -- Shutting down the server.
[Tue Jul 26 14:08:33 2011] [notice] Child 3180: Exit event signaled. Child process is ending.
[Tue Jul 26 14:08:34 2011] [notice] Child 3180: Released the start mutex
[Tue Jul 26 14:08:35 2011] [notice] Child 3180: All worker threads have exited.
[Tue Jul 26 14:08:35 2011] [notice] Child 3180: Child process is exiting
[Tue Jul 26 14:08:35 2011] [notice] Parent: Child process exited successfully.
[Tue Jul 26 14:08:37 2011] [warn] Init: Session Cache is not configured [hint: SSLSessionCache]
httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.1.102 for ServerName
[Tue Jul 26 14:08:38 2011] [notice] Apache/2.2.19 (Win32) mod_ssl/2.2.19 OpenSSL/0.9.8r PHP/5.3.6 configured -- resuming normal operations
[Tue Jul 26 14:08:38 2011] [notice] Server built: May 20 2011 17:39:35
[Tue Jul 26 14:08:38 2011] [notice] Parent: Created child process 2384
httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.1.102 for ServerName
[Tue Jul 26 14:08:38 2011] [warn] Init: Session Cache is not configured [hint: SSLSessionCache]
httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.1.102 for ServerName
[Tue Jul 26 14:08:39 2011] [notice] Child 2384: Child process is running
[Tue Jul 26 14:08:39 2011] [notice] Child 2384: Acquired the start mutex.
[Tue Jul 26 14:08:39 2011] [notice] Child 2384: Starting 64 worker threads.
[Tue Jul 26 14:08:39 2011] [notice] Child 2384: Starting thread to listen on port 80.
[Tue Jul 26 14:08:46 2011] [notice] Parent: Received shutdown signal -- Shutting down the server.
[Tue Jul 26 14:08:46 2011] [notice] Child 2384: Exit event signaled. Child process is ending.
[Tue Jul 26 14:08:47 2011] [notice] Child 2384: Released the start mutex
[Tue Jul 26 14:08:48 2011] [notice] Child 2384: All worker threads have exited.
[Tue Jul 26 14:08:48 2011] [notice] Child 2384: Child process is exiting
[Tue Jul 26 14:08:48 2011] [notice] Parent: Child process exited successfully.
[Tue Jul 26 14:09:03 2011] [warn] Init: Session Cache is not configured [hint: SSLSessionCache]
httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.1.102 for ServerName
[Tue Jul 26 14:09:03 2011] [notice] Apache/2.2.19 (Win32) mod_ssl/2.2.19 OpenSSL/0.9.8r PHP/5.3.6 configured -- resuming normal operations
[Tue Jul 26 14:09:03 2011] [notice] Server built: May 20 2011 17:39:35
[Tue Jul 26 14:09:03 2011] [notice] Parent: Created child process 2368
httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.1.102 for ServerName
[Tue Jul 26 14:09:04 2011] [warn] Init: Session Cache is not configured [hint: SSLSessionCache]
httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.1.102 for ServerName
[Tue Jul 26 14:09:05 2011] [notice] Child 2368: Child process is running
[Tue Jul 26 14:09:05 2011] [notice] Child 2368: Acquired the start mutex.
[Tue Jul 26 14:09:05 2011] [notice] Child 2368: Starting 64 worker threads.
[Tue Jul 26 14:09:05 2011] [notice] Child 2368: Starting thread to listen on port 80.
[Tue Jul 26 14:09:42 2011] [notice] Parent: Received shutdown signal -- Shutting down the server.
[Tue Jul 26 14:09:42 2011] [notice] Child 2368: Exit event signaled. Child process is ending.
[Tue Jul 26 14:09:43 2011] [notice] Child 2368: Released the start mutex
[Tue Jul 26 14:09:44 2011] [notice] Child 2368: All worker threads have exited.
[Tue Jul 26 14:09:44 2011] [notice] Child 2368: Child process is exiting
[Tue Jul 26 14:09:44 2011] [notice] Parent: Child process exited successfully.
[Tue Jul 26 14:10:30 2011] [warn] Init: Session Cache is not configured [hint: SSLSessionCache]
httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.1.102 for ServerName
[Tue Jul 26 14:10:31 2011] [notice] Apache/2.2.19 (Win32) mod_ssl/2.2.19 OpenSSL/0.9.8r PHP/5.3.6 configured -- resuming normal operations
[Tue Jul 26 14:10:31 2011] [notice] Server built: May 20 2011 17:39:35
[Tue Jul 26 14:10:31 2011] [notice] Parent: Created child process 8896
httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.1.102 for ServerName
[Tue Jul 26 14:10:31 2011] [warn] Init: Session Cache is not configured [hint: SSLSessionCache]
httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.1.102 for ServerName
[Tue Jul 26 14:10:32 2011] [notice] Child 8896: Child process is running
[Tue Jul 26 14:10:32 2011] [notice] Child 8896: Acquired the start mutex.
[Tue Jul 26 14:10:32 2011] [notice] Child 8896: Starting 64 worker threads.
[Tue Jul 26 14:10:32 2011] [notice] Child 8896: Starting thread to listen on port 80.
[Tue Jul 26 14:14:09 2011] [notice] Parent: Received shutdown signal -- Shutting down the server.
[Tue Jul 26 14:14:09 2011] [notice] Child 8896: Exit event signaled. Child process is ending.
[Tue Jul 26 14:14:10 2011] [notice] Child 8896: Released the start mutex
[Tue Jul 26 14:14:11 2011] [notice] Child 8896: All worker threads have exited.
[Tue Jul 26 14:14:11 2011] [notice] Child 8896: Child process is exiting
[Tue Jul 26 14:14:11 2011] [notice] Parent: Child process exited successfully.
[Tue Jul 26 14:14:27 2011] [warn] Init: Session Cache is not configured [hint: SSLSessionCache]
httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.1.102 for ServerName
[Tue Jul 26 14:14:28 2011] [notice] Apache/2.2.19 (Win32) mod_ssl/2.2.19 OpenSSL/0.9.8r PHP/5.3.6 configured -- resuming normal operations
[Tue Jul 26 14:14:28 2011] [notice] Server built: May 20 2011 17:39:35
[Tue Jul 26 14:14:28 2011] [notice] Parent: Created child process 7048
httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.1.102 for ServerName
[Tue Jul 26 14:14:28 2011] [warn] Init: Session Cache is not configured [hint: SSLSessionCache]
httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.1.102 for ServerName
[Tue Jul 26 14:14:29 2011] [notice] Child 7048: Child process is running
[Tue Jul 26 14:14:29 2011] [notice] Child 7048: Acquired the start mutex.
[Tue Jul 26 14:14:29 2011] [notice] Child 7048: Starting 64 worker threads.
[Tue Jul 26 14:14:29 2011] [notice] Child 7048: Starting thread to listen on port 80.
[Tue Jul 26 14:15:55 2011] [notice] Parent: Received restart signal -- Restarting the server.
[Tue Jul 26 14:15:55 2011] [notice] Child 7048: Exit event signaled. Child process is ending.
httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.1.102 for ServerName
[Tue Jul 26 14:15:55 2011] [error] Server should be SSL-aware but has no certificate configured [Hint: SSLCertificateFile] ((null):0)
[Tue Jul 26 14:15:55 2011] [warn] (OS 995)De I/O-bewerking is afgebroken vanwege het afsluiten van een thread of vanwege een opdracht van een toepassing. : winnt_accept: Asynchronous AcceptEx failed.
[Tue Jul 26 14:15:56 2011] [notice] Child 7048: Released the start mutex
[Tue Jul 26 14:15:57 2011] [notice] Child 7048: All worker threads have exited.
[Tue Jul 26 14:15:57 2011] [notice] Child 7048: Child process is exiting
[Tue Jul 26 14:15:59 2011] [error] Server should be SSL-aware but has no certificate configured [Hint: SSLCertificateFile] ((null):0)
[Tue Jul 26 14:16:10 2011] [warn] Init: Session Cache is not configured [hint: SSLSessionCache]
httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.1.102 for ServerName
[Tue Jul 26 14:16:10 2011] [warn] pid file C:/Program Files (x86)/Apache Software Foundation/Apache2.2/logs/httpd.pid overwritten -- Unclean shutdown of previous Apache run?
[Tue Jul 26 14:16:11 2011] [notice] Apache/2.2.19 (Win32) mod_ssl/2.2.19 OpenSSL/0.9.8r PHP/5.3.6 configured -- resuming normal operations
[Tue Jul 26 14:16:11 2011] [notice] Server built: May 20 2011 17:39:35
[Tue Jul 26 14:16:11 2011] [notice] Parent: Created child process 2692
httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.1.102 for ServerName
[Tue Jul 26 14:16:11 2011] [warn] Init: Session Cache is not configured [hint: SSLSessionCache]
httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.1.102 for ServerName
[Tue Jul 26 14:16:12 2011] [notice] Child 2692: Child process is running
[Tue Jul 26 14:16:12 2011] [notice] Child 2692: Acquired the start mutex.
[Tue Jul 26 14:16:12 2011] [notice] Child 2692: Starting 64 worker threads.
[Tue Jul 26 14:16:12 2011] [notice] Child 2692: Starting thread to listen on port 80.
[Tue Jul 26 14:17:24 2011] [notice] Parent: Received shutdown signal -- Shutting down the server.
[Tue Jul 26 14:17:24 2011] [notice] Child 2692: Exit event signaled. Child process is ending.
[Tue Jul 26 14:17:25 2011] [notice] Child 2692: Released the start mutex
[Tue Jul 26 14:17:26 2011] [notice] Child 2692: All worker threads have exited.
[Tue Jul 26 14:17:26 2011] [notice] Child 2692: Child process is exiting
[Tue Jul 26 14:17:26 2011] [notice] Parent: Child process exited successfully.
[Tue Jul 26 14:17:46 2011] [warn] Init: Session Cache is not configured [hint: SSLSessionCache]
httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.1.102 for ServerName
[Tue Jul 26 14:17:47 2011] [notice] Apache/2.2.19 (Win32) mod_ssl/2.2.19 OpenSSL/0.9.8r PHP/5.3.6 configured -- resuming normal operations
[Tue Jul 26 14:17:47 2011] [notice] Server built: May 20 2011 17:39:35
[Tue Jul 26 14:17:47 2011] [notice] Parent: Created child process 8200
httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.1.102 for ServerName
[Tue Jul 26 14:17:47 2011] [warn] Init: Session Cache is not configured [hint: SSLSessionCache]
httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.1.102 for ServerName
[Tue Jul 26 14:17:48 2011] [notice] Child 8200: Child process is running
[Tue Jul 26 14:17:48 2011] [notice] Child 8200: Acquired the start mutex.
[Tue Jul 26 14:17:48 2011] [notice] Child 8200: Starting 64 worker threads.
[Tue Jul 26 14:17:48 2011] [notice] Child 8200: Starting thread to listen on port 80.

[CAPSLOCK2000]

Wat voor foutmelding? Ik zie alleen een niet-kritieke waarschuwing. Volgens deze logs draait Apache.

[mace]

CAPSLOCK2000 schreef op dinsdag 26 juli 2011 @ 18:42:
Wat voor foutmelding? Ik zie alleen een niet-kritieke waarschuwing. Volgens deze logs draait Apache.

Maar niks op 443 dus dan lijkt met niet dat het gaat werken.

[Bastien]

Luistert apache naast poort 80 ook naar poort 443? Ik zie alleen 'Starting thread to listen on port 80' in je log staan en denk dus van niet.

Wat is de output van 'apachectl configtest'? En hoe ziet je complete vhost eruit?

[ Voor 6% gewijzigd door Bastien op 26-07-2011 19:04 ]

[Gijs007]

capslock:
ik zij niks over een foutmelding, er werd alleen naar mijn log file gevraagd dus heb ik die gepost.

bastien: Wat is de output van 'apachectl configtest'? En hoe ziet je complete vhost eruit?
Ik draai apache op windows dus er zit geen apachectl bij?

mace en bastien:
als ik hem ook op 443 laat draaien doet ie nog niks...

in mijn httpd.config

Listen 80
Listen 443 (als ik hier een # voor zet dan start ie weer samen met de # tussen haakjes beneden)

httpd-vhosts:

NameVirtualHost *:443

#
# VirtualHost example:
# Almost any Apache directive may go into a VirtualHost container.
# The first VirtualHost section is used for all requests that do not
# match a ServerName or ServerAlias in any <VirtualHost> block.
#
<VirtualHost *:443>
ServerAdmin [e-mail]
DocumentRoot "C:\Program Files (x86)\Apache Software Foundation\Apache2.2\htdocs
ServerName 1xgclan.com
ServerAlias www.1xgclan.com
ErrorLog "logs/1xgclan.com-error.log"
CustomLog "logs/1xgclan.com-access.log" common
(#)SSLEngine on
(#) SSLCertificateFile "C:\Program Files (x86)\Apache Software Foundation\Apache2.2\bin\ssl\certificate.crt"
(#)SSLCertificateKeyFile "C:\Program Files (x86)\Apache Software Foundation\Apache2.2\bin\www.1xgclan.com.key"
(#) SSLCACertificateFile "C:\Program Files (x86)\Apache Software Foundation\Apache2.2\bin\intermediate.crt"
</VirtualHost>

[ Voor 5% gewijzigd door Gijs007 op 26-07-2011 21:40 ]

[Bastien]

Niet per ongeluk een firewall die eea buiten de server wenst te houden?

Zie trouwens dat het om windows gaat... als het goed is zit er ergens in je startmenu een Test Configuration van Apache (dacht ik... het is al heel veel jaren geleden dat ik Apache icm Windows had)? Krijg je daar nuttige output uit?

[Verwijderd]

Je hebt zeker ook nergens iets gelezen over forward slashes in plaats van backslashes?

[Gijs007]

Bastien schreef op dinsdag 26 juli 2011 @ 21:56:
Niet per ongeluk een firewall die eea buiten de server wenst te houden?

Zie trouwens dat het om windows gaat... als het goed is zit er ergens in je startmenu een Test Configuration van Apache (dacht ik... het is al heel veel jaren geleden dat ik Apache icm Windows had)? Krijg je daar nuttige output uit?

ah gevonden:

syntax error on line 35 of c:/program files (x86)/apache software foundation/apache2.2/conf/extra/httpd-vhost.conf:
SSLCertificateFile takes one argument, SSL Server Certificate file ('/path/to/file' -PEM or DER encoded


Cheatah: dat maakt geen verschil...

[mace]

Bastien schreef op dinsdag 26 juli 2011 @ 19:04:
Luistert apache naast poort 80 ook naar poort 443? Ik zie alleen 'Starting thread to listen on port 80' in je log staan en denk dus van niet.

Als je HTTPS wilt moet dat. Als je server niet op 443 luistert dan kan je ook geen HTTPS verbinding opbouwen.

[ Voor 14% gewijzigd door mace op 27-07-2011 10:03 ]

[Bastien]

mace schreef op woensdag 27 juli 2011 @ 10:02:
[...]

Als je HTTPS wilt moet dat. Als je server niet op 443 luistert dan kan je ook geen HTTPS verbinding opbouwen.

Ik denk dat je in de war bent door mijn iewat vage zinsbouw. Mijn reply was een constatering op zijn log dat het lijkt alsof Apache alleen poort 80 opent en niet ook poort 443. Of ik begrijp jou fout

Maar goed, TS heeft het gevonden blijkbaar al lijkt het nog niet te werken.

[Gijs007]

Bastien schreef op woensdag 27 juli 2011 @ 12:01:
[...]

Ik denk dat je in de war bent door mijn iewat vage zinsbouw. Mijn reply was een constatering op zijn log dat het lijkt alsof Apache alleen poort 80 opent en niet ook poort 443. Of ik begrijp jou fout

Maar goed, TS heeft het gevonden blijkbaar al lijkt het nog niet te werken.

idd, het werkt nog niet, als ik de config test goed begrijp dan moet ik alleen het pad naar de folder geven waar het bestand instaat en niet naar het bestand?

[Gijs007]

Update: Heb de test gedraaid en heb de problemen die hij aangaf opgelost. (moest \'s gebruiken en "" en ik had een verkeerd pad naar een van de bestanden)

Als ik nu apache start krijg ik echter nog steeds dezelfde foutmelding: the requested operation has failed...
Als ik de test weer draait sluit die gelijk af...

Update 2: als ik een hekje voor: SSLEngine on in het httpd-vhost
en #Listen 443 in httpd
Zet start ie nu wel... ik heb deze apache gedownload: Win32 Binary including OpenSSL 0.9.8r

Ik heb ook het hekje voor LoadModule ssl_module modules/mod_ssl.so in httpd.config weggehaald, dus daar kan het niet aanliggen.

update 3: heb het gevonden in de log file [Thu Jul 28 13:47:41 2011] [error] Init: SSLPassPhraseDialog builtin is not supported on Win32 (key file C:/Program Files (x86)/Apache Software Foundation/Apache2.2/bin/www.1xgclan.com.key)

en heb het inmiddels opgelost met dit: https://support.quovadisg...-sslpassphrasedialog.aspx

bedankt voor alle hulp

[ Voor 58% gewijzigd door Gijs007 op 28-07-2011 14:17 ]