Apache Development
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me
Go Back   Dev Shed ForumsSystem AdministrationApache Development

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
  #1  
Old July 22nd, 2003, 08:02 AM
Biggie Biggie is offline
Junior Member
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Jul 2003
Posts: 2 Biggie User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
You're speaking plain HTTP to an SSL-enabled server port. - HELP PLEASE !

Hi,
The web portal for our help desk software uses Apache2.
I was asked to get SSL setup on Apache2. I have never touched Apache or anything web related, but I was the only available person. With some assistance, I configured httpd.conf, ssl.conf, copied mod_ssl.so and 2 .dlls' and appeared to have it working.

Yesterday we got our real cert file and I pasted it into the .csr file and changed ssl.conf to point to this file as well as the .key file.

Someone also showed me how to make a redirect so if someone enters http it changes to https.

Everything is working initially. When you enter the URL, you get to URL and the lock icon shows up on the status bar. I click on the lock and it shows the valid SSL cert and all appears perfect.

When I login to the portal, I get:
Your browser sent a request that this server could not understand.
Reason: You're speaking plain HTTP to an SSL-enabled server port.
Instead use the HTTPS scheme to access this URL, please.

I did a google search on this message and found a bunch of matches. I understand what this means, but since I have zero apache/ssl/web experience, I cannot figure out why it is working correctly till I try to login, then something is directing the connection to an http url.

Since I am totally lost at this point, I will throw out some config lines.

Here are some lines from httpd.conf:

# PRGNREDIRECT #
RewriteEngine on

RewriteRule ^/$ URL{SERVER_NAME}:%{SERVER_PORT}/oaa/login.jsp [R=permanent]
RewriteRule ^/oaa/$ URL{SERVER_NAME}:%{SERVER_PORT}/oaa/login.jsp [R=permanent]
<IfModule mod_ssl.c>
Include conf/ssl.conf
</IfModule>

Here is from ssl.conf:

Listen 443
<VirtualHost *:80>
Redirect / URL
</VirtualHost>

# PRGNREDIRECT #
RewriteEngine on

RewriteRule ^/$ URL{SERVER_NAME}:%{SERVER_PORT}/oaa/login.jsp [R=permanent]
RewriteRule ^/oaa/$ URL{SERVER_NAME}:%{SERVER_PORT}/oaa/login.jsp [R=permanent]


</VirtualHost>

NOTE: I commented out the rewriteengine lines from httpd.conf (not ssl.conf) as a test and that did not help. (restarted apache always after all changes).

QUESTION: Can anyone suggest anything I can do to attempt to solve why I get re-directed to an http url when I attempt to login to the portal ??

I realize I am not supplying a lot of information.. I do not know what else to provide.

Please assume I know zero if you can make a suggestion.

THANK YOU !!!!!!!!!!!!

-Brian

Reply With Quote
  #2  
Old July 22nd, 2003, 09:09 AM
Tex_Consultant Tex_Consultant is offline
Junior Member
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Jul 2003
Posts: 6 Tex_Consultant User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
What's the method used on this "redirect"?

Reply With Quote
  #3  
Old July 22nd, 2003, 09:15 AM
Biggie Biggie is offline
Junior Member
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Jul 2003
Posts: 2 Biggie User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Quote:
Originally posted by Tex_Consultant
What's the method used on this "redirect"?


Sorry, I do not know. Can you please tell me how I to get that answer for you ?

Thanks !

Reply With Quote
  #4  
Old July 23rd, 2003, 10:13 AM
RichA. RichA. is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Jan 2002
Posts: 170 RichA. User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 8
Remove the ReWrite stuff.
You should have two VirtualHosts.
<VirtualHost *:80>
ServerName site.domain.tld
Redirect / https://site.domain.tld/
</VirtualHost>

<VirtualHost *:443>
SSLEngine On
ServerName site.domain.tld
...
</VirtualHost>

I have a feeling the seconf set of ReWriteRule directives in the ssl.conf file are confusing the browser. Try it without them

Reply With Quote
Reply

Viewing: Dev Shed ForumsSystem AdministrationApache Development > You're speaking plain HTTP to an SSL-enabled server port. - HELP PLEASE !


Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump



 Free IT White Papers!
 
How to Present Effectively Online
This white paper offers practical and actionable advice on the key steps that any presenter should consider as they plan and execute a Webinar or online meeting.

 
Open Source Security Myths
Open Source Software (OSS) is computer software whose source code is available to the general public with relaxed or non-existent intellectual property restrictions (or arrangement such as the public domain), and is usually developed with the input of many contributors.

 
Power and Cooling Capacity Management for Data Centers
This paper describes the principles for achieving power and cooling capacity management.

 
Scalable, Fault-Tolerant NAS for Oracle - The Next Generation
For several years NAS has been evolving as a storage alternative for Oracle databases, and for good reason: NAS is quite often the simplest, most cost-effective storage approach for Oracle. Learn about the benefits that HP's approach to scalable NAS brings to Oracle environments in this comprehensive white paper.

 
Understanding Web Application Security Challenges
This white paper discusses many common threats and preventive measures for Web application security, and explains what you can do to help protect your organization.

 

Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 





© 2003-2009 by Developer Shed. All rights reserved. DS Cluster 4 hosted by Hostway
Stay green...Green IT