Configuring httpd-ssl.conf on Leopard and Apache 2.2.6

Question

Hi everybody,
I recently migrated to Leopard from Tiger 10.4.10. On my Tiger client I had installed my own web server using mod_ssl with Apache 1.3 server. On Leopard, apache 2.2.6 and OpenSSL 0.9.7 are now installed and configurations files have changed.
Since two weeks, I'm trying to install mod_ssl without success on my machine. Thereafter, I will show only what's relevant from two configuration files :
First -> Httpd.conf (which is in /etc/apache2/)
#My port 80 is blocked by my isp
Listen 8080
<IfDefine SSL>
LoadModule ssl_module libexec/apache2/mod_ssl.so
</IfDefine SSL>
LoadModule php5_module /usr/local/php5/libphp5.so
User www
Group www
</IfModule>
<IfModule mod_ssl.c>
Listen 8080
Listen 8083
</IfModule>
DocumentRoot "/Library/WebServer/Documents"
<IfModule dir_module>
DirectoryIndex index.htm lndex.php index.htm default.html
</IfModule>
ErrorLog /private/var/log/apache2/error_log
# Virtual hosts
#Include /private/etc/apache2/extra/httpd-vhosts.conf
# Local access to the Apache HTTP Server Manual
Include /private/etc/apache2/extra/httpd-manual.conf
# Distributed authoring and versioning (WebDAV)
#Include /private/etc/apache2/extra/httpd-dav.conf
# Various default settings
#Include /private/etc/apache2/extra/httpd-default.conf
# Secure (SSL/TLS) connections
#Include /private/etc/apache2/extra/httpd-ssl.conf
<IfModule ssl_module>
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
</IfModule>
AddType application/x-httpd-php .php
AddType application/x-httpd-php-source .phps
DirectoryIndex index.html index.php
</IfModule>
#Include /private/etc/apache2/other/*.conf
# end of httpd.conf
Second ->httpd-ssl.conf (which is in /etc/apache2/extra/)( I elided personnal information)
<IfModule mod_ssl.c>
listen 8080
listen 8083
</IfModule>
AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl .crl
SSLPassPhraseDialog builtin
#SSLSessionCache "dbm:/private/var/run/ssl_scache"
SSLSessionCache "shmcb:/private/var/run/ssl_scache(512000)"
SSLSessionCacheTimeout 300
SSLMutex "file:/private/var/run/ssl_mutex"
<VirtualHost default:8080>
#Just to keep things sane...
DocumentRoot "/Library/WebServer/Documents"
ServerName myadress.com
ServerAdmin [email protected]
SSLEngine off
</VirtualHost>
<VirtualHost default:8083>
# General setup for the virtual host
DocumentRoot "/Library/WebServer/Documents"
ServerName myadress.com
ServerAdmin [email protected]
ErrorLog "/private/var/log/apache2/error_log"
TransferLog "/private/var/log/apache2/access_log"
# SSL Engine Switch:
# Enable/Disable SSL for this virtual host.
SSLEngine on
# SSL Cipher Suite:
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:eNULL
# Server Certificate:
SSLCertificateFile "/private/etc/apache2/ssl.key/server.crt"
#SSLCertificateFile "/private/etc/apache2/server-dsa.crt"
# Server Private Key:
SSLCertificateFile "/private/etc/apache2/ssl.key/server.key"
#SSLCertificateKeyFile "/private/etc/apache2/server-dsa.key"
# Server Certificate Chain:
#SSLCertificateChainFile "/private/etc/apache2/server-ca.crt"
# Certificate Authority (CA):
#SSLCACertificatePath "/private/etc/apache2/ssl.crt"
SSLCACertificatePath "/private/etc/apache2/ssl.key/"
#SSLCACertificateFile "/private/etc/apache2/ssl.crt/ca-bundle.crt"
# Certificate Revocation Lists (CRL):
#SSLCARevocationPath "/private/etc/apache2/ssl.crl"
#SSLCARevocationFile "/private/etc/apache2/ssl.crl/ca-bundle.crl"
# Client Authentication (Type):
#SSLVerifyClient require
#SSLVerifyDepth 10
# Access Control:
#<Location />
#SSLRequire ( %{SSL_CIPHER} !~ m/^(EXP|NULL)/ \
# and %{SSLCLIENT_S_DNO} eq "Snake Oil, Ltd." \
# and %{SSLCLIENT_S_DNOU} in {"Staff", "CA", "Dev"} \
# and %{TIME_WDAY} >= 1 and %{TIME_WDAY} <= 5 \
# and %{TIME_HOUR} >= 8 and %{TIME_HOUR} <= 20 ) \
# or %{REMOTE_ADDR} =~ m/^192\.76\.162\.[0-9]+$/
#</Location>
# SSL Engine Options:
#SSLOptions +FakeBasicAuth +ExportCertData +StrictRequire
<FilesMatch "\.(cgi|shtml|phtml|php)$">
SSLOptions +StdEnvVars
</FilesMatch>
<Directory "/Library/WebServer/CGI-Executables">
SSLOptions +StdEnvVars
</Directory>
# SSL Protocol Adjustments:
BrowserMatch ".MSIE." \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
# Per-Server Logging:
CustomLog "/private/var/log/apache2/sslrequestlog" \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>
### end of httpd-ssl.conf
When I uncomment this line in httpd.conf :
LoadModule ssl_module libexec/apache2/mod_ssl.so
and try to send the 'apachectl start' command in terminal nothing happens. Apache seems to hang and
no "Apache/2.2.6 (Unix) DAV/2 PHP/5.2.5 configured -- resuming normal operations" in my console log. Of course, nothing in my error_log.
I've read somewhere else that there would be a bug in 9.7 version of modssl and that we should install 9.8 version. Could anybody confirm this ?
Is there somebody here who succeeded installing ssl on apache 2.2.6 and Leopard 10.5.1 ?
Thanks for helping me
Regards

Answer 1

You need the latest plugin.
Get it from at least 6.1 SP4.
Eric
"Michael Congdon" <[email protected]> wrote in message
news:[email protected]..
>
I am having the exact same problem with Apache 2.0.40 on Solaris 2.7 andWebLogic
6.1 SP 1.
Please let me know if you get any help. I don't know of anyone who hassuccessfully
used Apache 2.0 w/WebLogic.
"Yanjing Liu" <[email protected]> wrote:
I tried to use apache plug-in to forward request to a wls6.1sp1 on
Win2000.
>>
So I installed Apache 2.0.40 running on Solaris 8 and simply copymod_wl.so
from
WL_HOME\lib\Solaris to APATHE_HOME/libexec. A few lines has been added
to my httpd.conf,
which are:
LoadModule weblogic_module libexec/mod_wl.so
<IfModule mod_weblogic.c>
WebLogicHost myweblogicserver.com WebLogicPort 7001
</IfModule>
<Location /weblogic>
SetHandler weblogic-handler
</Location>
When I verify the syntax of the httpd.conf file with the followingcommand:
>>
/export/home/apache2/bin/apachectl configtest
Here are the errors I got:
Cannot load /export/home/apache2/libexec/mod_wl_20.so into server:ld.so.1
>>
/export/home/apache2/bin/httpd:fatal: relocation error:file
/export/home/apache2/libexec/mod_wl_20.so: symbol apr_pool_create:referenced
symbol not found.
Has anyone expereinced a similiar problem?
Thanks,
Yanjing