Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am running Apache 2.6 on my computer running Arch Linux. It runs a mail server, and because I wanted to setup webmail, I decided I would create my own SSL certificates, as only my friends and family would be using it. I configured Apache to serve secure data on port 443, but it doesn't seem to work.

My virtual host file:

<VirtualHost *:443>
    ServerAdmin postmaster@duncan.usr.sh
    DocumentRoot "/srv/http"
    <IfModule mod_ssl>
        SSLEngine on
        SSLCertificateFile /srv/ssl/duncan.crt
        SSLCertificateKeyFile /srv/ssl/duncan.key
        SSLCertificateChainFile /srv/ssl/duncan.crt
    </IfModule>


</VirtualHost>

I also made sure to uncomment mod_log_config and mod_ssl in httpd.conf, as well as the line that includes the file that contains all the virtual hosts (I checked the path too). What is going on?

In the error log, I get:

[Thu Aug 15 11:03:45.445668 2013] [ssl:warn] [pid 29779:tid 139642496866112] AH01906: RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Aug 15 11:03:45.551540 2013] [ssl:warn] [pid 29782:tid 139642496866112] AH01873: Init: Session Cache is not configured [hint: SSLSessionCache]
[Thu Aug 15 11:03:45.551839 2013] [ssl:warn] [pid 29782:tid 139642496866112] AH01906: RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Aug 15 11:03:45.551903 2013] [lbmethod_heartbeat:notice] [pid 29782:tid 139642496866112] AH02282: No slotmem from mod_heartmonitor
[Thu Aug 15 11:03:45.553665 2013] [mpm_event:notice] [pid 29782:tid 139642496866112] AH00489: Apache/2.4.6 (Unix) OpenSSL/1.0.1e configured -- resuming normal operations

I used the following command to generate the certificates:

openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout duncan.key -out duncan.crt
share|improve this question

1 Answer 1

up vote 0 down vote accepted

Its not clear what "but it doesn't seem to work" means in this instance.

Perhaps Apache is not listening?

Run

netstat -tupln

To see if apache is listening on port 443, if it is not, then you probably need

Listen 443 somewhere in your apache configuration and then restart apache.
share|improve this answer
    
That worked. I never thought of that. –  Ian Aug 15 '13 at 15:17

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.