SSL again

Hi everybody!

I'm trying to get one website based on OsCommerce working with SSL, but no luck.
Everything was set up by the book. It's working fine on port 80, but nothing on 443.

Code:

telnet localhost 80

I get:

Code:

Connected to 127.0.0.1.
Escape character is '^]'.

Code:

telnet localhost 443

I get:

Code:

Trying 127.0.0.1...
telnet: connect to address 127.0.0.1: Connection refused
Trying ::1...
telnet: connect to address ::1: Connection refused

Output from

Code:

netstat -tapn

:

Code:

Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
tcp        0      0 0.0.0.0:3306            0.0.0.0:*               LISTEN      1823/mysqld
tcp        0      0 0.0.0.0:111             0.0.0.0:*               LISTEN      2165/portmap
tcp        0      0 0.0.0.0:10000           0.0.0.0:*               LISTEN      2377/perl
tcp        0      0 127.0.0.1:2544          0.0.0.0:*               LISTEN      2137/zmd
tcp        0      0 0.0.0.0:81              0.0.0.0:*               LISTEN      7840/ispconfig_http
tcp        0      0 0.0.0.0:21              0.0.0.0:*               LISTEN      8197/proftpd: (acce
tcp        0      0 10.0.10.1:53            0.0.0.0:*               LISTEN      8180/named
tcp        0      0 127.0.0.1:53            0.0.0.0:*               LISTEN      8180/named
tcp        0      0 127.0.0.1:696           0.0.0.0:*               LISTEN      3064/famd
tcp        0      0 127.0.0.1:953           0.0.0.0:*               LISTEN      8180/named
tcp        0      0 0.0.0.0:25              0.0.0.0:*               LISTEN      8091/master
tcp        0      0 :::993                  :::*                    LISTEN      2221/couriertcpd
tcp        0      0 :::995                  :::*                    LISTEN      2275/couriertcpd
tcp        0      0 :::110                  :::*                    LISTEN      2241/couriertcpd
tcp        0      0 :::143                  :::*                    LISTEN      2203/couriertcpd
tcp        0      0 :::80                   :::*                    LISTEN      8275/httpd2-prefork
tcp        0      0 :::22                   :::*                    LISTEN      2744/sshd
tcp        0      0 ::1:953                 :::*                    LISTEN      8180/named
tcp        0      0 :::25                   :::*                    LISTEN      8091/master
tcp        0      0 10.0.10.1:22            10.0.0.49:41691         ESTABLISHED 4344/2
tcp        0      0 10.0.10.1:22            10.0.0.49:48576         ESTABLISHED 3466/sshd: web4_com

As you can see, there's nothing on 443.

Ok, I'm on Suse 10.1.
Here's the /etc/apache2/listen.conf:

Code:

Listen 80
<IfDefine SSL>
    <IfDefine !NOSSL>
        <IfModule mod_ssl.c>

            Listen 443

        </IfModule>
    </IfDefine>[SIZE="4"][/SIZE]
</IfDefine>

I checked almost every thread that could have any relation with my problem on the forum, but found no solution.

To be clear: I have checked that the reseller has the SSL checkbox checked, the same with the site. Other sites don't have SSL checked.

I modified /root/ispconfig/isp/conf/openssl.cnf.master as martinfst reccomends here: http://howtoforge.net/forums/showthread.php?t=10421&page=4
I also got a certificate from cacert.org and "installed" it.

I get this in /var/log/apache2/error_log:

Code:

[Fri Mar 02 20:36:45 2007] [error] [client ::1] Directory index forbidden by Options directive: /srv/www/htdocs/
[Fri Mar 02 20:36:45 2007] [error] [client ::1] Directory index forbidden by Options directive: /srv/www/htdocs/
[Fri Mar 02 20:37:04 2007] [notice] caught SIGTERM, shutting down
[COLOR="Yellow"][Fri Mar 02 20:37:04 2007] [warn] Init: Session Cache is not configured [hint: SSLSessionCache][/COLOR]
[Fri Mar 02 20:37:05 2007] [notice] Apache/2.2.0 (Linux/SUSE) configured -- resuming normal operations
[Fri Mar 02 20:37:18 2007] [notice] caught SIGTERM, shutting down
[Fri Mar 02 20:37:18 2007] [warn] Init: Session Cache is not configured [hint: SSLSessionCache]
[Fri Mar 02 20:37:18 2007] [notice] Apache/2.2.0 (Linux/SUSE) configured -- resuming normal operations

I checked then /etc/apache2/ssl-global.conf:

Code:

<IfDefine SSL>
<IfDefine !NOSSL>
<IfModule mod_ssl.c>

      
        AddType application/x-x509-ca-cert .crt
        AddType application/x-pkcs7-crl    .crl

      
        SSLPassPhraseDialog  builtin

        #SSLSessionCache        none
        #SSLSessionCache         dbm:/var/lib/apache2/ssl_scache
        #SSLSessionCache        shmht:/var/lib/apache2/ssl_scache(512000)
        SSLSessionCache         shmcb:/var/lib/apache2/ssl_scache(512000)
        SSLSessionCacheTimeout  600

      
        SSLMutex  default

        SSLRandomSeed startup builtin
        SSLRandomSeed connect builtin
        #SSLRandomSeed startup file:/dev/random  512
        #SSLRandomSeed connect file:/dev/random  512
        #SSLRandomSeed startup file:/dev/urandom 512
        #SSLRandomSeed connect file:/dev/urandom 512

</IfModule>
</IfDefine>
</IfDefine>

This file is stripped of non-code comments.

How can SSLSessionCache be not configured?

I'm puzzled...

Any advice is really appreciated.

grasomega

P.S. I'm not an expert, not by far! But I think I'm not such a noob also...
I will be out of town for the weekend...
Thanks in advance for the help.

 

Yes, I did. I followed The Perfect Setup on Suse 10.1.
I forgot to mention that I was on ISPConfig 2.2.8.
I have upgraded to 2.2.10 with absolutely no problem (everything that worked stayed that way, but, unfortunately, also did everything that didn't ).

After moving from:

#SSLSessionCache dbm:c:/Apache2/logs/ssl_scache
SSLSessionCache shmcb:c:/Apache2/logs/ssl_scache(512000)

to

SSLSessionCache dbm:c:/Apache2/logs/ssl_scache
#SSLSessionCache shmcb:c:/Apache2/logs/ssl_scache(512000)

and back, I got rid of the SSLSessionCache error in log.

Still, I don't have any server running on port 443.

grasomega

 

Thank you, Till, that did it!

I wasn't aware of that setting. I usually use Suse Linux for desktop, but this is the first web server I tried.

grasomega