Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a clean install of Zend Server CE, and I've been trying to add SSL support for the past hours, but I have no idea how, I moved the same SSL configuration file from xampp to zend (changed the directives and added the ssl keys and certificates, ofcourse), and mixed and matched all the configurations (because on xampp it worked), and now I'm getting "Forbidden" whenever I try to access through https.

ssl config:

<IfModule ssl_module>

Listen 443

<IfModule mime_module>

    AddType application/x-x509-ca-cert .crt
    AddType application/x-pkcs7-crl    .crl

SSLPassPhraseDialog  builtin

SSLMutex default

<VirtualHost _default_:443>
    #   General setup for the virtual host
    DocumentRoot "C:\Program Files (x86)\Zend\Apache2"
    ServerName localhost:443
    ServerAdmin webmaster@localhost
    ErrorLog "logs/error.log"
    <IfModule log_config_module>
        CustomLog "logs/access.log" combined

    SSLEngine on


    SSLCertificateFile "conf/ssl.crt/server.crt"

    SSLCertificateKeyFile "conf/ssl.key/server.key"

    <FilesMatch "\.(cgi|shtml|pl|asp|php)$">
        SSLOptions +StdEnvVars

    BrowserMatch ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0

    CustomLog "logs/ssl_request.log" "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"



ServerRoot "C:\Program Files (x86)\Zend\Apache2"
Listen  80

LoadModule actions_module modules/
LoadModule alias_module modules/
LoadModule asis_module modules/
LoadModule auth_basic_module modules/
LoadModule auth_digest_module modules/
#LoadModule authn_alias_module modules/
#LoadModule authn_anon_module modules/
#LoadModule authn_dbd_module modules/
#LoadModule authn_dbm_module modules/
LoadModule authn_default_module modules/
LoadModule authn_file_module modules/
#LoadModule authnz_ldap_module modules/
#LoadModule authz_dbm_module modules/
LoadModule authz_default_module modules/
LoadModule authz_groupfile_module modules/
LoadModule authz_host_module modules/
#LoadModule authz_owner_module modules/
LoadModule authz_user_module modules/
LoadModule autoindex_module modules/
#LoadModule cache_module modules/
#LoadModule cern_meta_module modules/
LoadModule cgi_module modules/
#LoadModule charset_lite_module modules/
#LoadModule dav_module modules/
#LoadModule dav_fs_module modules/
#LoadModule dav_lock_module modules/
#LoadModule dbd_module modules/
#LoadModule deflate_module modules/
LoadModule dir_module modules/
#LoadModule disk_cache_module modules/
#LoadModule dumpio_module modules/
LoadModule env_module modules/
#LoadModule expires_module modules/
#LoadModule ext_filter_module modules/
#LoadModule file_cache_module modules/
LoadModule filter_module modules/
LoadModule headers_module modules/
#LoadModule ident_module modules/
LoadModule imagemap_module modules/
LoadModule include_module modules/
LoadModule info_module modules/
LoadModule isapi_module modules/
#LoadModule ldap_module modules/
#LoadModule logio_module modules/
LoadModule log_config_module modules/
#LoadModule log_forensic_module modules/
#LoadModule mem_cache_module modules/
LoadModule mime_module modules/
LoadModule mime_magic_module modules/
LoadModule negotiation_module modules/
#LoadModule proxy_module modules/
#LoadModule proxy_ajp_module modules/
#LoadModule proxy_balancer_module modules/
#LoadModule proxy_connect_module modules/
#LoadModule proxy_ftp_module modules/
#LoadModule proxy_http_module modules/
#LoadModule proxy_scgi_module modules/
#LoadModule reqtimeout_module modules/
LoadModule rewrite_module modules/
LoadModule setenvif_module modules/
#LoadModule speling_module modules/
LoadModule ssl_module modules/
LoadModule status_module modules/
#LoadModule substitute_module modules/
#LoadModule unique_id_module modules/
LoadModule userdir_module modules/
#LoadModule usertrack_module modules/
#LoadModule version_module modules/
#LoadModule vhost_alias_module modules/
<IfModule !mpm_netware_module>
<IfModule !mpm_winnt_module>

User daemon
Group daemon


DocumentRoot "C:\Program Files (x86)\Zend\Apache2/htdocs"

<Directory />
    Options FollowSymLinks
    AllowOverride All
    Order deny,allow
    Deny from all

<Directory "C:\Program Files (x86)\Zend\Apache2/htdocs">
    Options Indexes FollowSymLinks
    AllowOverride All
    Order allow,deny
    Allow from all

<IfModule dir_module>
    DirectoryIndex index.php index.html

<FilesMatch "^\.ht">
    Order allow,deny
    Deny from all
    Satisfy All
ErrorLog "logs/error.log"
LogLevel warn
<IfModule log_config_module>
    LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
    LogFormat "%h %l %u %t \"%r\" %>s %b" common
    <IfModule logio_module>
      # You need to enable mod_logio.c to use %I and %O
      LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O" combinedio
    CustomLog "logs/access.log" common
<IfModule alias_module>

    ScriptAlias /cgi-bin/ "C:\Program Files (x86)\Zend\Apache2/cgi-bin/"
<Directory "C:\Program Files (x86)\Zend\Apache2/cgi-bin">
    AllowOverride None
    Options None
    Order allow,deny
    Allow from all

DefaultType text/plain
<IfModule mime_module>

    TypesConfig conf/mime.types

    AddType application/x-compress .Z
    AddType application/x-gzip .gz .tgz


# Server-pool management (MPM specific)
#Include conf/extra/httpd-mpm.conf
# Multi-language error messages
#Include conf/extra/httpd-multilang-errordoc.conf
# Fancy directory listings
#Include conf/extra/httpd-autoindex.conf
# Language settings
#Include conf/extra/httpd-languages.conf
# User home directories
#Include conf/extra/httpd-userdir.conf
# Real-time info on requests and configuration
#Include conf/extra/httpd-info.conf
# Virtual hosts
Include conf/extra/httpd-vhosts.conf
# Local access to the Apache HTTP Server Manual
#Include conf/extra/httpd-manual.conf
# Distributed authoring and versioning (WebDAV)
#Include conf/extra/httpd-dav.conf
# Various default settings
#Include conf/extra/httpd-default.conf
# Secure (SSL/TLS) connections
Include conf/extra/httpd-ssl.conf
# Note: The following must must be present to support
#       starting without SSL on platforms with no /dev/random equivalent
#       but a statically compiled-in mod_ssl.
<IfModule ssl_module>
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
Include "conf/zend.conf"
NameVirtualHost *:80
<VirtualHost *:80>
Include "C:\Program Files (x86)\Zend\ZendServer/etc/sites.d/zend-default-vhost-80.conf"
Include "C:\Program Files (x86)\Zend\ZendServer/etc/sites.d/globals-*.conf"
Include "C:\Program Files (x86)\Zend\ZendServer/etc/sites.d/vhost_*.conf"
share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.