Kernel SSL (KSSL) Proxy isn't listening on port 443

Question

Hello
I'm having some trouble with Solaris 10 KSSL. The SMF says it's configured and online but netstat shows nothing listening on 443. The configuration I'm using is below so you can try it if you like.
Thanks for any insight.
J
--- config commands start here ---
- Generate certificate and key (In this case self-signed for testing)
/usr/sfw/bin/openssl req -x509 -nodes -days 365 -subj "/C=NZ/ST=Canterbury/L=MtHutt/CN=`hostname`" -newkey rsa:1024 -keyout /var/tmp/mykey.pem -out /var/tmp/mycert.pem
- Configure KSSL Proxy instance
echo "password" > /var/tmp/kssl.pass
cat /var/tmp/mycert.pem /var/tmp/mykey.pem > /var/tmp/mystuff.pem
rm /var/tmp/mykey.pem /var/tmp/mycert.pem
(NOTE: The following command must be run from Global Zone.)
ksslcfg create -f pem -i /var/tmp/mystuff.pem -p /var/tmp/kssl.pass -x 8080 443
- Configure web server
(This example uses the Solaris supplied Apache in /usr/apache2)
hostname=`hostname`
ipaddr=`grep $hostname /etc/hosts | awk '{ print $1 }'`
cat /etc/apache2/httpd.conf-example | sed "s/^Listen 80/Listen $ipaddr:8080/" > /etc/apache2/httpd.conf
svcadm enable apache2
Edited by: ajcook on 9/01/2009 00:25

Answer 1

The answer, as it often is, was user error. I had neglected to restart the Apache server to listen on the KSSL proxy port (port 8080 in the example given).
Mildly interesting exercise because it means that the KSSL doesn't start listening on it's SSL port until it verifies that the proxy port is available.
As soon as Apache was restarted, KSSL burst into life, ie.
/usr/sfw/bin/openssl s_client -connect localhost:443
CONNECTED(00000004)