apache, ssl, and php problem

rocknice · 2005-04-01 04:12:17

i just added ssl support to my apache website running php. before i added ssl i had a php flash script that has always worked fine until i altered the httpd.conf file to forbid access to this directory unless it was an encrypted connection. i used the code

<Directory "/home/httpd/html/folder">
AuthType Basic
AuthName "user"
AuthUserFile /home/httpd/passwords/folder
Require user user
SSLRequireSSL
</Directory>

i tested the ssl with the directory running php before i altered the code and it worked fine. now that i altered the code to require ssl, the folder's index shows up a blank page. what went wrong, is there some bug or something i did wrong?

cactus · 2005-04-01 06:03:19

steps to use ssl in arch with apache.
1) pacman -S openssl apache

2) Read /etc/httpd/conf/mod_ssl.txt

2a) Edit /etc/conf.d/httpd and set HTTPD_USE_SSL to "yes"

2b) Create an ssl key, request, and certificate.
# This generates the cert and key (valid for 3650 days)
# Be sure to enter the FQDN of your apache server as the "Common Name".
openssl req -new -x509 -newkey rsa:1024 -days 3650
-keyout server.key -out server.crt
# This will remove the passphrase
openssl rsa -in server.key -out server.key

2c) Modify /etc/httpd/conf/ssl.conf to use your new certificate.
SSLCertificateFile /etc/httpd/conf/server.crt
SSLCertificateKeyFile /etc/httpd/conf/server.key

3) Edit /etc/httpd/conf/ssl.conf
Define an appropriate virtualhost for your ssl site

4) Restart apache (/etc/rc.d/httpd restart)
If it hangs or fails to start, check the /var/log/httpd/error_log or try running
'/usr/sbin/apachectl startssl' and looking for errors/prompts.

NOTE: Using the same dir for ssl and non-ssl does not make sense, as someone could just use non-ssl to access the same information. Instead, create a new directory (something like /home/httpd/ssl), and use that dir for ssl web activities. Adjust /etc/httpd/conf/ssl.conf accordingly

rocknice · 2005-04-01 06:14:02

ssl works, but i want to make a directory only accessible by an ssl connection, and to forward the connection to the ssl connection if someone tries to connect without ssl, so far i have just tried to get the part about making the directory accessible only with an ssl connection and that doesnt work. how do i do that?

Arch Linux

#1 2005-04-01 04:12:17

apache, ssl, and php problem

#2 2005-04-01 06:03:19

Re: apache, ssl, and php problem

#3 2005-04-01 06:14:02

Re: apache, ssl, and php problem

Board footer