[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] Equifaxsecure and Thawte Certificates?



So are you saying I just need to copy and paste the following in the virtual
site inside of the httpd.conf file?

I did that but it just crashed HTTPD.

# Hardcoded, issues with mod_perl and cobalt modules.
        if (/^<\/Virtual/ and (-f "/etc/httpd/ssl/$group")) {
            $ret = ssl_cert_check("/home/sites/$group/certs/");
            if ($ret=~/^2/o) {
                $PerlConfig .= "Listen $ip:443\n";
                $PerlConfig .= "<VirtualHost $ip:443>\n";
                $PerlConfig .= "SSLengine on\n";
$PerlConfig .= "SSLCertificateFile /home/sites/$group/certs/certificate\n";
$PerlConfig .= "SSLCertificateKeyFile /home/sites/$group/certs/key\n";
$PerlConfig .= "SSLCACertificateFile /home/sites/$group/certs/ca\n";
                $PerlConfig .= join('', @ssl_conf);
            } elsif (ssl_cert_check("/home/sites/home/certs/") =~ /^2/ ) {
                $PerlConfig .= "Listen $ip:443\n";
                $PerlConfig .= "<VirtualHost $ip:443>\n";
                $PerlConfig .= "SSLengine on\n";
$PerlConfig .= "SSLCertificateFile /home/sites/home/certs/certificate\n";
$PerlConfig .= "SSLCertificateKeyFile /home/sites/home/certs/key\n";
$PerlConfig .= "SSLCACertificateFile /home/sites/home/certs/ca\n";
                $PerlConfig .= join('', @ssl_conf);
            } else {
                print STDERR "Site $group has invalid certificate: $ret\n";

I did that but it just crashed HTTPD.

Mike
----- Original Message -----
From: "Robert G. Fisher" <rfisher@xxxxxxxxxxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>
Sent: Wednesday, August 02, 2000 12:51 PM
Subject: Re: [cobalt-users] Equifaxsecure and Thawte Certificates?


> On Wed, Aug 02, 2000 at 11:22:13AM -0700, Mike Fritsch wrote:
> > We have a Thawte certificate installed on one of our virtual sites and
we
> > just bought a Exquifax secure cert, when we go to make the modifications
to
> > the httpd.conf it looks like it will void the Thawte from working
because
> > the SSL directives are global rather than individual(one for each site).
>
> So stick them into each VirtualHost entry.
>
> If you're using a RaQ3+, then also change the vhost*.al files to add
> them there as well -- a change was posted to the list, check the
> archives.
>
>
> --
> Robert G. Fisher      NEOCOM Microspecialists Inc.
> System Administrator/Programmer      (540) 666-9533 x 116
>
>
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To Subscribe or Unsubscribe, please go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users