|
|
|
|
|
|
| Author |
Message |
jda *nix forums beginner
Joined: 01 Jun 2006
Posts: 4
|
Posted: Thu Jul 13, 2006 7:19 pm Post subject:
getting ssl to work, rp7410 11i apache 2.0.52
|
|
|
I am trying to get ssl working on our rp7410 server runing 11i. The
admin prior to me setup that server and then left the company, so I'm
now in charge and trying to figure what was done.
I know the bundle hpuxwsApache A.2.0.52.00 HP-UX Apache-based Web
Server was installed and that apache (2.0.52) has been running fine.
But the prior admin left before getting a certificate and getting ssl
working.
That is my job. :-)
I used /opt/hpws/apache/bin/openssl to generate the key and the csr to
get the certificate. So I know openssl is installed and at least the
program openssl works.
What I have done:
1 - generated key and csr
2 - get certificate from provider
3 - install per cert provide and 3rd party software we are running
4 - add https 443 to /etc/services
5 - configure ssl.conf
6 - reboot server
I'm getting a connection refused when I try:
openssl s_client -connect localhost:443 -state -debug
I get:
warning, not much extra random data, consider using the -rand option
connect: Connection refused
connect:errno=239
To me it seems like port 443 is not setup correctly or port 443 has
nothing listening on it. If I had to guess it's the latter, but not
sure what I need to do to get things to work.
Anyone have any ideas?
John |
|
| Back to top |
|
 |
Kevin Collins *nix forums Guru Wannabe
Joined: 11 Mar 2005
Posts: 216
|
Posted: Fri Jul 14, 2006 8:43 pm Post subject:
Re: getting ssl to work, rp7410 11i apache 2.0.52
|
|
|
In article <1152818360.702662.120580@75g2000cwc.googlegroups.com>, jda wrote:
| Quote: | I am trying to get ssl working on our rp7410 server runing 11i. The
admin prior to me setup that server and then left the company, so I'm
now in charge and trying to figure what was done.
I know the bundle hpuxwsApache A.2.0.52.00 HP-UX Apache-based Web
Server was installed and that apache (2.0.52) has been running fine.
But the prior admin left before getting a certificate and getting ssl
working.
That is my job. :-)
I used /opt/hpws/apache/bin/openssl to generate the key and the csr to
get the certificate. So I know openssl is installed and at least the
program openssl works.
What I have done:
1 - generated key and csr
2 - get certificate from provider
3 - install per cert provide and 3rd party software we are running
4 - add https 443 to /etc/services
5 - configure ssl.conf
6 - reboot server
|
You don't need to reboot - simply restarting Apache would have worked and saved
a lot of time. Try:
# /sbin/init.d/hpws_apache stop
# /sbin/init.d/hpws_apache start
| Quote: | I'm getting a connection refused when I try:
openssl s_client -connect localhost:443 -state -debug
I get:
warning, not much extra random data, consider using the -rand option
connect: Connection refused
connect:errno=239
|
Did you look at the logs in /opt/hpws/apache/logs? Do you see anything there
indicating a connection or a problem?
| Quote: | To me it seems like port 443 is not setup correctly or port 443 has
nothing listening on it. If I had to guess it's the latter, but not
sure what I need to do to get things to work.
|
Try 'netstat -an | grep :443' or (if you have lsof installed) 'lsof -i TCP:443'
- that will tell you if something is listening...
Kevin
--
Unix Guy Consulting, LLC
Unix and Linux Automation, Shell, Perl and CGI scripting
http://www.unix-guy.com |
|
| Back to top |
|
 |
jda *nix forums beginner
Joined: 01 Jun 2006
Posts: 4
|
Posted: Mon Jul 17, 2006 2:58 pm Post subject:
Re: getting ssl to work, rp7410 11i apache 2.0.52
|
|
|
Kevin,
tried the stopping and starting apache first but that was before
realized that /etc/services didn't have https 443 setup. The reboot
was done to make sure everything was started correctly - over kill
probably - but knew everything started clean.
The netstat -an | grep :443 shows nothing. Which tells me nothing is
listening, which I assume means somethings not configured right or
running that should be.
any suggestions?
John
Kevin Collins wrote:
| Quote: | In article <1152818360.702662.120580@75g2000cwc.googlegroups.com>, jda wrote:
You don't need to reboot - simply restarting Apache would have worked and saved
a lot of time. Try:
# /sbin/init.d/hpws_apache stop
# /sbin/init.d/hpws_apache start
I'm getting a connection refused when I try:
openssl s_client -connect localhost:443 -state -debug
I get:
warning, not much extra random data, consider using the -rand option
connect: Connection refused
connect:errno=239
Did you look at the logs in /opt/hpws/apache/logs? Do you see anything there
indicating a connection or a problem?
To me it seems like port 443 is not setup correctly or port 443 has
nothing listening on it. If I had to guess it's the latter, but not
sure what I need to do to get things to work.
Try 'netstat -an | grep :443' or (if you have lsof installed) 'lsof -i TCP:443'
- that will tell you if something is listening...
Kevin
--
Unix Guy Consulting, LLC
Unix and Linux Automation, Shell, Perl and CGI scripting
http://www.unix-guy.com |
|
|
| Back to top |
|
 |
Google
|
|
| Back to top |
|
 |
|
|
The time now is Mon Dec 01, 2008 10:20 pm | All times are GMT
|
|
Credit Cards | Remortgaging | Mortgage Calculator | Mortgages | Personal Loans
|
|
Copyright © 2004-2005 DeniX Solutions SRL
|
|
|
|
Other DeniX Solutions sites:
Unix/Linux blog |
electronics forum |
medicine forum |
science forum |
|
|
Privacy Policy
|
Powered by phpBB © 2001, 2005 phpBB Group
|
|