Skip to content

Instantly share code, notes, and snippets.

@indolering
Created November 1, 2013 05:49
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save indolering/7261395 to your computer and use it in GitHub Desktop.
Save indolering/7261395 to your computer and use it in GitHub Desktop.
Various Apache 2 settings I've check to solve an 'ssl_error_rx_record_too_long error'
<IfModule mod_ssl.c>
<VirtualHost 46.149.28.113:443>
ServerAdmin webmaster@localhost
DocumentRoot /var/www/secure.speech.is
<Directory />
Options FollowSymLinks
AllowOverride None
</Directory>
<Directory /var/www/secure.speech.is>
Options Indexes FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
allow from all
</Directory>
ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
<Directory "/usr/lib/cgi-bin">
AllowOverride None
Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
Order allow,deny
Allow from all
</Directory>
ErrorLog ${APACHE_LOG_DIR}/error.log
# Possible values include: debug, info, notice, warn, error, crit,
# alert, emerg.
LogLevel debug
CustomLog ${APACHE_LOG_DIR}/ssl_access.log combined
Alias /doc/ "/usr/share/doc/"
<Directory "/usr/share/doc/">
Options Indexes MultiViews FollowSymLinks
AllowOverride None
Order deny,allow
Deny from all
Allow from 127.0.0.0/255.0.0.0 ::1/128
</Directory>
SSLEngine on
#SSLCACertificateFile /etc/ssl/certs/GlobalSign.crt
SSLCertificateFile /etc/ssl/certs/speech.is.crt
SSLCertificateKeyFile /etc/ssl/private/server.key
SSLCertificateChainFile /etc/ssl/certs/AlphaSSLroot.crt
#SSLCACertificateFile /etc/ssl/certs/AlphaSSLroot.crt
</VirtualHost>
</IfModule>
ls /etc/apache2/sites-enabled/
15-secure.speech.is
ubuntu@i-3cc019f9:/etc/apache2/sites-available$ openssl x509 -in /etc/ssl/certs/speech.is.crt -text -noout
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:21:6a:a6:fc:67:9b:e5:9e:01:77:9a:bc:ec:60:43:01:6d
Signature Algorithm: sha1WithRSAEncryption
Issuer: O=AlphaSSL, CN=AlphaSSL CA - G2
Validity
Not Before: Nov 1 02:47:59 2013 GMT
Not After : Nov 2 02:47:59 2014 GMT
Subject: OU=Domain Control Validated, CN=*.speech.is
ubuntu@i-3cc019f9:/etc/apache2/sites-available$ openssl x509 -in /etc/ssl/certs/AlphaSSLroot.crt -text -nooutCertificate:
Data:
Version: 3 (0x2)
Serial Number:
04:00:00:00:00:01:2f:4e:e1:37:02
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
Validity
Not Before: Apr 13 10:00:00 2011 GMT
Not After : Apr 13 10:00:00 2022 GMT
Subject: O=AlphaSSL, CN=AlphaSSL CA - G2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
apachectl -t -D DUMP_MODULES
/usr/sbin/apachectl: 87: ulimit: error setting limit (Operation not permitted)
[Fri Nov 01 05:30:46 2013] [warn] NameVirtualHost *:80 has no VirtualHosts
Loaded Modules:
core_module (static)
log_config_module (static)
logio_module (static)
mpm_prefork_module (static)
http_module (static)
so_module (static)
alias_module (shared)
auth_basic_module (shared)
authn_file_module (shared)
authz_default_module (shared)
authz_groupfile_module (shared)
authz_host_module (shared)
authz_user_module (shared)
autoindex_module (shared)
cgi_module (shared)
deflate_module (shared)
dir_module (shared)
env_module (shared)
mime_module (shared)
negotiation_module (shared)
php5_module (shared)
reqtimeout_module (shared)
setenvif_module (shared)
ssl_module (shared)
status_module (shared)
Syntax OK
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment