Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I'm having a weird issue with trying to setup SSL (https) on Zend Server CE for OSX. Currently I am running Zend Server 5.5.

$ sudo zendctl.sh version
Password:
Zend Server version: 5.5.0

I created a self-signed certificate in the correct directory using this:

$ openssl req -x509 -newkey rsa:2048 -keyout server.key -out server.crt \
> -days 365 -nodes

I already uncommented this out in my httpd.conf:

# Secure (SSL/TLS) connections
Include conf/extra/httpd-ssl.conf

And I added this to my httpd-vhost.conf file:

NameVirtualHost *:80
NameVirtualHost *:443

And these are my vhost conf for the site (I'm trying to use one directory for both SSL and port 80 requests):

<VirtualHost *:80>
    DocumentRoot /usr/local/zend/apache2/htdocs/mydomain.com
    ServerName mydomain.local
    AllowEncodedSlashes On
</VirtualHost>

#this is the HTTPS version
<VirtualHost mydomain.local:443>
    DocumentRoot /usr/local/zend/apache2/htdocs/mydomain.com
    ServerName mydomain.local:443
    AllowEncodedSlashes On
</VirtualHost>

When I try to load the site in my browser (FF) using https://mydomain.local/ I get this:

The connection was interrupted The connection to mydomain.local was interrupted while the page was loading.

So I tried this with the openssl command:

$ openssl s_client -connect mydomain.local:443
CONNECTED(00000003)
20743:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:/SourceCache/OpenSSL098/OpenSSL098-35.1/src/ssl/s23_clnt.c:607:

Additionally, I can get to the site by going to http://mydomain.local:443 but not https.

What does this error mean? Why can't I load my site with HTTPS?

share|improve this question

1 Answer 1

up vote 2 down vote accepted

You need to setup SSL for your VHost on :443...

SSLEngine On
SSLCertificateFile      /path/to/crt.crt
SSLCertificateKeyFile   /path/to/key.key
share|improve this answer
    
Yep that did it! Epic fail. I didn't realize that had to go right in the vhost conf for that domain. You're the man thanks! –  mmmshuddup Dec 13 '11 at 0:16

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.