[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-users] Equifaxsecure and Thawte Certificates?
- Subject: Re: [cobalt-users] Equifaxsecure and Thawte Certificates?
- From: "Mike Fritsch" <mfritsch@xxxxxxxxxxxx>
- Date: Thu Aug 3 01:32:18 2000
So are you saying I just need to copy and paste the following in the virtual
site inside of the httpd.conf file?
I did that but it just crashed HTTPD.
# Hardcoded, issues with mod_perl and cobalt modules.
if (/^<\/Virtual/ and (-f "/etc/httpd/ssl/$group")) {
$ret = ssl_cert_check("/home/sites/$group/certs/");
if ($ret=~/^2/o) {
$PerlConfig .= "Listen $ip:443\n";
$PerlConfig .= "<VirtualHost $ip:443>\n";
$PerlConfig .= "SSLengine on\n";
$PerlConfig .= "SSLCertificateFile /home/sites/$group/certs/certificate\n";
$PerlConfig .= "SSLCertificateKeyFile /home/sites/$group/certs/key\n";
$PerlConfig .= "SSLCACertificateFile /home/sites/$group/certs/ca\n";
$PerlConfig .= join('', @ssl_conf);
} elsif (ssl_cert_check("/home/sites/home/certs/") =~ /^2/ ) {
$PerlConfig .= "Listen $ip:443\n";
$PerlConfig .= "<VirtualHost $ip:443>\n";
$PerlConfig .= "SSLengine on\n";
$PerlConfig .= "SSLCertificateFile /home/sites/home/certs/certificate\n";
$PerlConfig .= "SSLCertificateKeyFile /home/sites/home/certs/key\n";
$PerlConfig .= "SSLCACertificateFile /home/sites/home/certs/ca\n";
$PerlConfig .= join('', @ssl_conf);
} else {
print STDERR "Site $group has invalid certificate: $ret\n";
I did that but it just crashed HTTPD.
Mike
----- Original Message -----
From: "Robert G. Fisher" <rfisher@xxxxxxxxxxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>
Sent: Wednesday, August 02, 2000 12:51 PM
Subject: Re: [cobalt-users] Equifaxsecure and Thawte Certificates?
> On Wed, Aug 02, 2000 at 11:22:13AM -0700, Mike Fritsch wrote:
> > We have a Thawte certificate installed on one of our virtual sites and
we
> > just bought a Exquifax secure cert, when we go to make the modifications
to
> > the httpd.conf it looks like it will void the Thawte from working
because
> > the SSL directives are global rather than individual(one for each site).
>
> So stick them into each VirtualHost entry.
>
> If you're using a RaQ3+, then also change the vhost*.al files to add
> them there as well -- a change was posted to the list, check the
> archives.
>
>
> --
> Robert G. Fisher NEOCOM Microspecialists Inc.
> System Administrator/Programmer (540) 666-9533 x 116
>
>
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To Subscribe or Unsubscribe, please go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users