Problems with https

Discussion in 'Installation/Configuration' started by lyndros, Apr 12, 2006.

  1. lyndros

    lyndros New Member

    Hi all,

    i've updated from 2.2.0 to 2.2.1, but im having some problems.

    I've changed the default ispconfig port 81 in /root/ispconfig/httpd/conf/httpd.conf

    Line 237 -> Port 12000

    Line 246 -> Listen 12000

    Line 1068 -> <VirtualHost _default_:12000>

    and then in /home/admispconfig/ispconfig/lib/config.inc.php

    is that correct ? i think that is because it worked

    i'm hosting right 3 or 4 pages in my server, but im having this problem with ssl,
    for example i have this site (www.example.com) without ssl, but when i do https://www.example.com , then it redirects to the main page of my first ssl enable site...

    there is anyway to solve this?
    and is anyway to make a site only http or https?

    thanks in advanced :p

    keep up the good work
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    have you enabled SSL for the site www.example.com and created an SSL cert for this site?


    Only http, yes.
    Only https, no.
     
  3. lyndros

    lyndros New Member

    no i havent enable SSL for the site because this site must be http only. :(

    any help would be appreciated

    thk u :D
     
  4. danielos

    danielos New Member

    I have been trying as you to install the new version......if you haven´nt installed it, don´t do it. I have been working the whole night.....port 81 on https does not work anymore, and I don´t understand why?

    But I do appreciate all the work on ispconfig and I am completely sure that this will be fixed!

    The thing is that lynx works but not explorer or firefox, very strange. I am getting that the certificate is wrong, errorcode -8182. But I used exactly the same settings as before.
     
    Last edited: Apr 12, 2006
  5. till

    till Super Moderator Staff Member ISPConfig Developer

    You can have only one SSL site per IP. If you want to get to a special default SSL site, you will have to set www.example.com to an IP where you created an default SSL site for or you use an IP where you dont have created an SSL website.
     
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    First, this thraed is not about an update problem.

    The error "8182" means that your SSL cert is broken, this happens when you enter a wrong value when you are asked for the SSL-Cert values during update.

    To recreate the SSL cert, please have a look here:

    http://www.howtoforge.com/forums/showthread.php?t=121
     
  7. lyndros

    lyndros New Member

    i dont want an special SSL site, i only want a html only site, but the problem is that www.example.com (an html only site) when i put https://www.example.com , it would appear connection refuse or something like this (because this is a html only site), but i dont know why... when i create all html only sites and try to connect https:// to this sites instead of conection refuse i get the web page of my first SSL site in vhost...


    do u understand me ? sorry for my english :p

    thk u very much
     
  8. till

    till Super Moderator Staff Member ISPConfig Developer

    I understand you and i posted the solution already. I will try to explain it a bit:

    If you call a name based apache vhost that does not exist as https, apache will deliver the first vhost that it finds on the same IP address.

    If you want to get an "website does not exist error", you must use an other IP address for your http only website. An IP address where no https website exists for.
     
  9. lyndros

    lyndros New Member

    now i understand u sorry, but the first time i didnt :p, ok so if i up a virtual interface i will not have this problems i guess, no ?

    thnk u very much
     
  10. falko

    falko Super Moderator ISPConfig Developer

    You could edit /root/ispconfig/scripts/lib/config.lib.php and change lines 1222 - 1227 from

    PHP:
    $mod->tpl->assign( array(SERVERIP => "NameVirtualHost ".$ip["server_ip"].$web_port."
    <VirtualHost "
    .$ip["server_ip"].$web_port.">
      ServerName localhost
      ServerAdmin root@localhost
      DocumentRoot /var/www/sharedip
    </VirtualHost>"
    ));
    to

    PHP:
    $mod->tpl->assign( array(SERVERIP => "NameVirtualHost ".$ip["server_ip"].$web_port."
    NameVirtualHost "
    .$ip["server_ip"].$ssl_port."
    <VirtualHost "
    .$ip["server_ip"].$web_port.">
      ServerName localhost
      ServerAdmin root@localhost
      DocumentRoot /var/www/sharedip
    </VirtualHost>

    <VirtualHost "
    .$ip["server_ip"].$ssl_port.">
      ServerName localhost
      ServerAdmin root@localhost
      DocumentRoot /var/www/sharedip
    </VirtualHost>"
    ));
    and then change something in the ISPConfig web interface so that the Apache configuration gets rewritten.
    Afterwards, you'll see the "Shared IP" page when you use https://www.example.com, and you haven't created a SSL web site for www.example.com.
     
  11. lyndros

    lyndros New Member


    nice that's perfect falko thks again :p

    :D
     

Share This Page