[cobalt-users] Raq2 Virtual SSL pages?

["Clayton McGow" <mrwilder@xxxxxxxxxxx>]

Hello all,

	I have set up OpenSSL on my raq2, generated my own cert,
etc... it all works great. Here's my question:

	I set DocumentRoot to /home/sites/ssl with Script Alias
/cgi-bin/ "/home/sites/ssl/cgi-bin/"

	I made a symbolic link to some of my virtual sites, so they
can drop things in an ssl environment. For example, 

mkdir /home/sites/ssl/www.virtualdomain.com
cd /home/sites/ssl
chown somesiteadmin www.virtualdomain.com
ln -s -d /home/sites/ssl/www.virtualdomain.com
/home/sites/www.virtualdomain.com/web/ssl
cd /home/sites/www.virtualdomain.com/web
chown somesiteadmin
/home/sites/www.virtualdomain.com/web/ssl

Now, THAT works fine (the customer can drop an index.html
file in their ssl folder, and it shows up on the web as
secure)... BUT when I try this:

mkdir /home/sites/ssl/cgi-bin/virtualdomain.com
cd /home/sites/ssl/cgi-bin
chown somesiteadmin virtualdomain.com
ln -s -d /home/sites/ssl/cgi-bin/virtualdomain.com
/home/sites/www.virtualdomain.com/web/ssl/cgi-bin
cd /home/sites/www.virtualdomain.com/web/ssl
chown somesiteadmin
/home/sites/www.virtualdomain.com/web/ssl/cgi-bin

The CGIs don't work.

The customers cgi's ARE parsed from the "real" script alias
folder (/home/sites/ssl/cgi-bin/virtualdomain) but NOT from
the symbolic link in their folder (the one at
/home/sites/www.virtualdomain.com/web/ssl/cgi-bin)

In other words, if I go to
https://ssl.atoznet.com/cgi-bin/virtualdomainname/test.cgi ,
it works... but if I go to
https://www.virtualdomainname.com/ssl/cgi-bin/test.cgi   it
doesn't.

I have expiremented a lot and when the symbolic link is in
the URL, I always either get "you do not have permission to
access this file" OR I get the file, but it's not parsed,
ie., I just see the text in the cgi source.

I've tried chmod 777 every file/dir in the path, both real
and symbolic. and adding a "scriptalias" line for the
SYMBOLIC folders in httpd.conf. I've tried changing the
value for followsymlinks. Nothing works.

Also, I have one other problem. My FTP client (WS-FTP Pro)
can NOT open any of the symbolic links I have created. It
treats them as files to download, rather than directories.
The symbolic link folders work fine in telnet, however.

Any body have  an idea of how I should go about this (other
than actually getting everyone a certificate and their own
IP address)?


-- 
Clayton McGow
mrwilder@xxxxxxxxxxx