SSL installation on apache2 / debian
Clash Royale CLAN TAG#URR8PPP
up vote
0
down vote
favorite
So I have a debian wheezy installation where I someone started to install SSL but gave up and so I'm here to finish the task.
problem - when accessing with http (port 80) - all is working. When accessing https (443) - ERR_CONNECTION_CLOSED.
So I started debugging from the start -
- Is router forwarding 443 to the internal ip of the server - Check.
- Is port opened - Check.
- Is port listening - Check.
- Apache is starting correctly - Check
So it seems to me the problem is in Apache settings - I go to the default-ssl in the /etc/apache2/sites-enabled and check - it is the same template as always (default crt/key files which are available, checked)
<IfModule mod_ssl.c>
<VirtualHost *:443>
ServerAdmin webmaster@hostmauritius.com
ServerName www.mysite.com:443
DocumentRoot /var/www/mysite/
<Directory />
Options FollowSymLinks
AllowOverride None
</Directory>
.
.
.
So here I'm a bit lost - I always just added a virtual site and all was working for me. I'm not sure if the person who started before me did something weird but there has to be a logic which will allow to find the problem...
debian apache-httpd ssl
edited 4 mins ago
Rui F Ribeiro
37.8k1475119
asked Aug 21 '15 at 8:07
Yanipan
177116
add a comment |Â
up vote
0
down vote
favorite
So I have a debian wheezy installation where I someone started to install SSL but gave up and so I'm here to finish the task.
problem - when accessing with http (port 80) - all is working. When accessing https (443) - ERR_CONNECTION_CLOSED.
So I started debugging from the start -
- Is router forwarding 443 to the internal ip of the server - Check.
- Is port opened - Check.
- Is port listening - Check.
- Apache is starting correctly - Check
So it seems to me the problem is in Apache settings - I go to the default-ssl in the /etc/apache2/sites-enabled and check - it is the same template as always (default crt/key files which are available, checked)
<IfModule mod_ssl.c>
<VirtualHost *:443>
ServerAdmin webmaster@hostmauritius.com
ServerName www.mysite.com:443
DocumentRoot /var/www/mysite/
<Directory />
Options FollowSymLinks
AllowOverride None
</Directory>
.
.
.
So here I'm a bit lost - I always just added a virtual site and all was working for me. I'm not sure if the person who started before me did something weird but there has to be a logic which will allow to find the problem...
debian apache-httpd ssl
edited 4 mins ago
Rui F Ribeiro
37.8k1475119
asked Aug 21 '15 at 8:07
Yanipan
177116
1
Tryapache2ctl -t -D DUMP_VHOSTSto see if you have correct virtual host definitions for*:443. Do you haveSSLEngine onand other SSL certificate file specifications in every SSL enabled<VirtualHost>?
– yaegashi
Aug 21 '15 at 8:45
Thanks for the comment - I dumped the vhosts list and indeed got nothing on 443 nor the domain (many others did show up). I'm sure apache is reading the default-ssl files in sites-enabled because if I put any error in the syntax it can't start - and I think config is correct. I have the SSL enabled and listen in the file. Any idea would be appreciated :)
– Yanipan
Aug 21 '15 at 9:13
Then have you runa2enmod sslto enablemod_ssl?
– yaegashi
Aug 21 '15 at 9:44
Yes, tried again and prompted it's already enabled.
– Yanipan
Aug 21 '15 at 12:13
add a comment |Â
up vote
0
down vote
favorite
up vote
0
down vote
favorite
So I have a debian wheezy installation where I someone started to install SSL but gave up and so I'm here to finish the task.
problem - when accessing with http (port 80) - all is working. When accessing https (443) - ERR_CONNECTION_CLOSED.
So I started debugging from the start -
- Is router forwarding 443 to the internal ip of the server - Check.
- Is port opened - Check.
- Is port listening - Check.
- Apache is starting correctly - Check
So it seems to me the problem is in Apache settings - I go to the default-ssl in the /etc/apache2/sites-enabled and check - it is the same template as always (default crt/key files which are available, checked)
<IfModule mod_ssl.c>
<VirtualHost *:443>
ServerAdmin webmaster@hostmauritius.com
ServerName www.mysite.com:443
DocumentRoot /var/www/mysite/
<Directory />
Options FollowSymLinks
AllowOverride None
</Directory>
.
.
.
So here I'm a bit lost - I always just added a virtual site and all was working for me. I'm not sure if the person who started before me did something weird but there has to be a logic which will allow to find the problem...
debian apache-httpd ssl
edited 4 mins ago
Rui F Ribeiro
37.8k1475119
asked Aug 21 '15 at 8:07
Yanipan
177116
So I have a debian wheezy installation where I someone started to install SSL but gave up and so I'm here to finish the task.
problem - when accessing with http (port 80) - all is working. When accessing https (443) - ERR_CONNECTION_CLOSED.
So I started debugging from the start -
- Is router forwarding 443 to the internal ip of the server - Check.
- Is port opened - Check.
- Is port listening - Check.
- Apache is starting correctly - Check
So it seems to me the problem is in Apache settings - I go to the default-ssl in the /etc/apache2/sites-enabled and check - it is the same template as always (default crt/key files which are available, checked)
<IfModule mod_ssl.c>
<VirtualHost *:443>
ServerAdmin webmaster@hostmauritius.com
ServerName www.mysite.com:443
DocumentRoot /var/www/mysite/
<Directory />
Options FollowSymLinks
AllowOverride None
</Directory>
.
.
.
So here I'm a bit lost - I always just added a virtual site and all was working for me. I'm not sure if the person who started before me did something weird but there has to be a logic which will allow to find the problem...
debian apache-httpd ssl
debian apache-httpd ssl
edited 4 mins ago
Rui F Ribeiro
37.8k1475119
asked Aug 21 '15 at 8:07
Yanipan
177116
edited 4 mins ago
Rui F Ribeiro
37.8k1475119
asked Aug 21 '15 at 8:07
Yanipan
177116
edited 4 mins ago
Rui F Ribeiro
37.8k1475119
edited 4 mins ago
Rui F Ribeiro
37.8k1475119
edited 4 mins ago
Rui F Ribeiro
37.8k1475119
37.8k1475119
asked Aug 21 '15 at 8:07
Yanipan
177116
asked Aug 21 '15 at 8:07
Yanipan
177116
asked Aug 21 '15 at 8:07
Yanipan
177116
177116
1
Tryapache2ctl -t -D DUMP_VHOSTSto see if you have correct virtual host definitions for*:443. Do you haveSSLEngine onand other SSL certificate file specifications in every SSL enabled<VirtualHost>?
– yaegashi
Aug 21 '15 at 8:45
Thanks for the comment - I dumped the vhosts list and indeed got nothing on 443 nor the domain (many others did show up). I'm sure apache is reading the default-ssl files in sites-enabled because if I put any error in the syntax it can't start - and I think config is correct. I have the SSL enabled and listen in the file. Any idea would be appreciated :)
– Yanipan
Aug 21 '15 at 9:13
Then have you runa2enmod sslto enablemod_ssl?
– yaegashi
Aug 21 '15 at 9:44
Yes, tried again and prompted it's already enabled.
– Yanipan
Aug 21 '15 at 12:13
add a comment |Â
1
Tryapache2ctl -t -D DUMP_VHOSTSto see if you have correct virtual host definitions for*:443. Do you haveSSLEngine onand other SSL certificate file specifications in every SSL enabled<VirtualHost>?
– yaegashi
Aug 21 '15 at 8:45
Thanks for the comment - I dumped the vhosts list and indeed got nothing on 443 nor the domain (many others did show up). I'm sure apache is reading the default-ssl files in sites-enabled because if I put any error in the syntax it can't start - and I think config is correct. I have the SSL enabled and listen in the file. Any idea would be appreciated :)
– Yanipan
Aug 21 '15 at 9:13
Then have you runa2enmod sslto enablemod_ssl?
– yaegashi
Aug 21 '15 at 9:44
Yes, tried again and prompted it's already enabled.
– Yanipan
Aug 21 '15 at 12:13
1
1
Try
apache2ctl -t -D DUMP_VHOSTS to see if you have correct virtual host definitions for *:443. Do you have SSLEngine on and other SSL certificate file specifications in every SSL enabled <VirtualHost>?– yaegashi
Aug 21 '15 at 8:45
Try
apache2ctl -t -D DUMP_VHOSTS to see if you have correct virtual host definitions for *:443. Do you have SSLEngine on and other SSL certificate file specifications in every SSL enabled <VirtualHost>?– yaegashi
Aug 21 '15 at 8:45
Thanks for the comment - I dumped the vhosts list and indeed got nothing on 443 nor the domain (many others did show up). I'm sure apache is reading the default-ssl files in sites-enabled because if I put any error in the syntax it can't start - and I think config is correct. I have the SSL enabled and listen in the file. Any idea would be appreciated :)
– Yanipan
Aug 21 '15 at 9:13
Thanks for the comment - I dumped the vhosts list and indeed got nothing on 443 nor the domain (many others did show up). I'm sure apache is reading the default-ssl files in sites-enabled because if I put any error in the syntax it can't start - and I think config is correct. I have the SSL enabled and listen in the file. Any idea would be appreciated :)
– Yanipan
Aug 21 '15 at 9:13
Then have you run
a2enmod ssl to enable mod_ssl?– yaegashi
Aug 21 '15 at 9:44
Then have you run
a2enmod ssl to enable mod_ssl?– yaegashi
Aug 21 '15 at 9:44
Yes, tried again and prompted it's already enabled.
– Yanipan
Aug 21 '15 at 12:13
Yes, tried again and prompted it's already enabled.
– Yanipan
Aug 21 '15 at 12:13
add a comment |Â
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f224600%2fssl-installation-on-apache2-debian%23new-answer', 'question_page');
);
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
1
Try
apache2ctl -t -D DUMP_VHOSTSto see if you have correct virtual host definitions for*:443. Do you haveSSLEngine onand other SSL certificate file specifications in every SSL enabled<VirtualHost>?– yaegashi
Aug 21 '15 at 8:45
Thanks for the comment - I dumped the vhosts list and indeed got nothing on 443 nor the domain (many others did show up). I'm sure apache is reading the default-ssl files in sites-enabled because if I put any error in the syntax it can't start - and I think config is correct. I have the SSL enabled and listen in the file. Any idea would be appreciated :)
– Yanipan
Aug 21 '15 at 9:13
Then have you run
a2enmod sslto enablemod_ssl?– yaegashi
Aug 21 '15 at 9:44
Yes, tried again and prompted it's already enabled.
– Yanipan
Aug 21 '15 at 12:13