Boston Linux & Unix (BLU) Home | Calendar | Mail Lists | List Archives | Desktop SIG | Hardware Hacking SIG
Wiki | Flickr | PicasaWeb | Video | Maps & Directions | Installfests | Keysignings
Linux Cafe | Meeting Notes | Blog | Linux Links | Bling | About BLU

BLU Discuss list archive


[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Weeeeeeeee're BACK!



So the DNS issues are resolved now.  My domain name DID NOT change, but
my IP is now 24.91.178.175 for both kramer.ne.mediaone.net and
thekramers.net.

I used Apache Toolbox to completely redownload/compile/install
Apache/mysql/imap/php/mod_* yadayada
The end result was nice, but I *STILL* can't get to my server though
SSL, even on the same box.  It seems like httpd understands it should be
doing SSL, but isn't listening.

/server-info includes:
Server Version: Apache/1.3.19 (Unix) PHP/4.0.4pl1 AuthMySQL/2.20
mod_gzip/1.3.19.1a
mod_fastcgi/2.2.10 mod_perl/1.25 mod_ssl/2.8.2 OpenSSL/0.9.6
......
Current Configuration: 
conf/httpd.conf 
     SSLPassPhraseDialog builtin
     SSLSessionCache dbm:/usr/local/apache/logs/ssl_scache
     SSLSessionCacheTimeout 300
     SSLMutex file:/usr/local/apache/logs/ssl_mutex
     SSLRandomSeed startup builtin
     SSLRandomSeed connect builtin
     SSLLog /usr/local/apache/logs/ssl_engine_log
     SSLLogLevel debug
     SSLEngine on
     SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
     SSLCertificateFile /usr/local/apache/conf/ssl.crt/server.crt
     SSLCertificateKeyFile /usr/local/apache/conf/ssl.key/server.key
     <Files ~ "\.(cgi|shtml|phtml|php3?)$"> 
       SSLOptions +StdEnvVars
     </Files> 
     <Directory "/usr/local/apache/cgi-bin"> 
       SSLOptions +StdEnvVars
     </Directory> 


httpd.conf includes:
VirtualHost _default_:443>

#  General setup for the virtual host
DocumentRoot "/usr/local/apache/shtdocs"
ServerName kramer.ne.mediaone.net
ServerAdmin root at kramer.ne.mediaone.net
ErrorLog /usr/local/apache/logs/error_log
TransferLog /usr/local/apache/logs/access_log

#   SSL Engine Switch:
#   Enable/Disable SSL for this virtual host.
SSLEngine on

#   SSL Cipher Suite:
#   List the ciphers that the client is permitted to negotiate.
#   See the mod_ssl documentation for a complete list.
SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
......


ssl_engine_log contains:
[09/Apr/2001 20:25:29 13234] [info]  Init: Initializing (virtual)
servers for SSL
[09/Apr/2001 22:23:24 13234] [info]  Init: 1st restart round (already
detached)
[09/Apr/2001 22:23:24 13234] [trace] Inter-Process Session Cache (DBM)
Expiry: old: 0, new: 0, removed: 0
[09/Apr/2001 22:23:24 13234] [info]  Init: Seeding PRNG with 1160 bytes
of entropy
[09/Apr/2001 22:23:24 13234] [info]  Init: Configuring temporary RSA
private keys (512/1024 bits)
[09/Apr/2001 22:23:24 13234] [info]  Init: Configuring temporary DH
parameters (512/1024 bits)
[09/Apr/2001 22:23:24 13234] [info]  Init: Initializing (virtual)
servers for SSL
[09/Apr/2001 23:45:15 13234] [info]  Init: 2nd restart round (already
detached)
[09/Apr/2001 23:45:15 13234] [trace] Inter-Process Session Cache (DBM)
Expiry: old: 0, new: 0, removed: 0
[09/Apr/2001 23:45:15 13234] [info]  Init: Seeding PRNG with 1160 bytes
of entropy
[09/Apr/2001 23:45:15 13234] [info]  Init: Configuring temporary RSA
private keys (512/1024 bits)
[09/Apr/2001 23:45:15 13234] [info]  Init: Configuring temporary DH
parameters (512/1024 bits)
[09/Apr/2001 23:45:15 13234] [info]  Init: Initializing (virtual)
servers for SSL
[10/Apr/2001 01:00:07 13234] [info]  Init: 3nd restart round (already
detached)
[10/Apr/2001 01:00:07 13234] [trace] Inter-Process Session Cache (DBM)
Expiry: old: 0, new: 0, removed: 0
[10/Apr/2001 01:00:07 13234] [info]  Init: Seeding PRNG with 1160 bytes
of entropy
[10/Apr/2001 01:00:07 13234] [info]  Init: Configuring temporary RSA
private keys (512/1024 bits)
[10/Apr/2001 01:00:07 13234] [info]  Init: Configuring temporary DH
parameters (512/1024 bits)
[10/Apr/2001 01:00:07 13234] [info]  Init: Initializing (virtual)
servers for SSL


------------------------------------------------------------------------------------------------
[root at kramer logs]# telnet thekramers.net 443
Trying 24.91.178.175...
telnet: Unable to connect to remote host: Connection refused
------------------------------------------------------------------------------------------------
Note no https or 443 mentioned here

[root at kramer logs]# netstat -l -p
(Not all processes could be identified, non-owned process info
 will not be shown, you would have to be root to see it all.)
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address        
State       PID/Program name   
tcp        0      0 *:www                   *:*                    
LISTEN      13234/httpd         
tcp        0      0 *:X                     *:*                    
LISTEN      10449/X             
tcp        0      0 *:587                   *:*                    
LISTEN      10223/sendmail: acc 
tcp        0      0 *:smtp                  *:*                    
LISTEN      10223/sendmail: acc 
tcp        0      0 *:mysql                 *:*                    
LISTEN      1163/mysqld         
tcp        0      0 *:printer               *:*                    
LISTEN      818/                
tcp        0      0 *:ssh                   *:*                    
LISTEN      797/                
tcp        0      0 *:finger                *:*                    
LISTEN      782/xinetd          
tcp        0      0 *:imap2                 *:*                    
LISTEN      782/xinetd          
tcp        0      0 *:pop3                  *:*                    
LISTEN      782/xinetd          
tcp        0      0 *:login                 *:*                    
LISTEN      782/xinetd          
tcp        0      0 *:shell                 *:*                    
LISTEN      782/xinetd          
tcp        0      0 *:ftp                   *:*                    
LISTEN      782/xinetd          
tcp        0      0 *:auth                  *:*                    
LISTEN      732/identd          
tcp        0      0 *:1024                  *:*                    
LISTEN      663/                
tcp        0      0 *:sunrpc                *:*                    
LISTEN      636/portmap         
udp        0      0 *:1025                 
*:*                                 663/                
udp        0      0 *:839                  
*:*                                 663/                
udp        0      0 *:1024                 
*:*                                 -                   
udp        0      0 *:sunrpc               
*:*                                 636/portmap         
raw        0      0 *:icmp                  *:*                    
7           -                   
raw        0      0 *:tcp                   *:*                    
7           -                   
Active UNIX domain sockets (only servers)
Proto RefCnt Flags       Type       State         I-Node PID/Program
name    Path
unix  0      [ ACC ]     STREAM     LISTENING     347   
285/                /var/run/pump.sock
unix  0      [ ACC ]     STREAM     LISTENING     1129  
878/gpm             /dev/gpmctl
unix  0      [ ACC ]     STREAM     LISTENING     39150 
10500/kfm           /tmp//kio_0_10500kramer.ne.mediaone.net_0
unix  0      [ ACC ]     STREAM     LISTENING     39152 
10500/kfm           /tmp//kfm_0_10500kramer.ne.mediaone.net_0
unix  0      [ ACC ]     STREAM     LISTENING     1810  
1163/mysqld         /var/lib/mysql/mysql.sock
unix  0      [ ACC ]     STREAM     LISTENING     39069 
10449/X             /tmp/.X11-unix/X0
unix  0      [ ACC ]     STREAM     LISTENING     1736  
1082/xfs            /tmp/.font-unix/fs7100
[root at kramer logs]# 

------------------------------------------------------------------------------------------------

Can anyone give me some more tests to run, or can someone lend me their
magic sand and voodoo doll?


Thanks in advance.
-
Subcription/unsubscription/info requests: send e-mail with
"subscribe", "unsubscribe", or "info" on the first line of the
message body to discuss-request at blu.org (Subject line is ignored).




BLU is a member of BostonUserGroups
BLU is a member of BostonUserGroups
We also thank MIT for the use of their facilities.

Valid HTML 4.01! Valid CSS!



Boston Linux & Unix / webmaster@blu.org