Apache 2.0.40-21.3+mod_ssl+OpenSSL+RedHat 9

External Since: Sep 04, 2003 Posts: 1

Hello all,

I'm in a pinch here - webadmin cut out and I'm trying to complete some
of his projects. I know my way around linux ok, but am pretty green
on ssl with apache. Been trying for weeks to resolve this...

Using these packages (Apache 2.0.40-21.3+mod_ssl 2.0.40-21.3+OpenSSL
0.9.7a-5+RedHat 9) from a default webserver install + rpm updates I
get this error every time I try to start the server with ssl enabled.

44# /usr/sbin/apachectl startssl
/usr/sbin/apachectl: line 111: 20846 Broken pipe $HTTPD -k
start -DSSL

Following is my virtual host setup for the ssl. I have only to
change SSLEngine to off, and the server starts up....

<IfDefine SSL>
<VirtualHost 10.x.xx.xxx:443>
# # General setup for the virtual host
   DocumentRoot "/home/httpd/www/foo"
   JkMount /*.jsp tomcat
   JkMount /servlet/* tomcat
<font color=green>   ServerName <a style='text-decoration: underline;' href="http://www.foo.com</font" target="_blank">www.foo.com</font</a>>
   ServerAdmin root@localhost

   ErrorLog "|/usr/local/sbin/cronolog
/var/log/apache/foo/error/%Y-%m-%d-foo_error.log"
   CustomLog "|/usr/local/sbin/cronolog
/var/log/apache/foo/access/%Y-%m-%d-foo_access.log" combined

   SSLEngine on
   SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
   SSLCertificateFile /usr/share/ssl/certs/cert-foo.crt
   SSLCertificateKeyFile /usr/share/ssl/private/cert-foo.key

   <Files ~ "\.(cgi|asp|jsp|shtml|phtml|php3?)$">
    SSLOptions +StdEnvVars
   </Files>
   <Directory "/home/httpd/www/foo">
    SSLOptions +StdEnvVars
    SSLRequireSSL
    Options -Indexes
   </Directory>
   SetEnvIf User-Agent ".*MSIE.*" \
   nokeepalive ssl-unclean-shutdown \
   downgrade-1.0 force-response-1.0
</VirtualHost>
</IfDefine>

Many thanks,
Chris