I've set up ssl for my domain and it works from Apache perspective.
The problem is that typing https://mydomain.com sometimes results in timeouts and sometimes it works fine. When it works

It takes some time to enter my website via http but it never timeouts. Why does this happen for https and is there a way to control timeout time for https?

My configuration: Apache 2.2.11 on CentOS 5

NameVirtualHost *:443
<VirtualHost *:443>
    SuexecUserGroup foo
    DocumentRoot /home/mydomain/www/
    ServerName mydomain.com

    SSLEngine on
    SSLProtocol -all +TLSv1 +SSLv3
    SSLCipherSuite HIGH:MEDIUM:!aNULL:+SHA1:+MD5:+HIGH:+MEDIUM
    SSLCertificateFile /path/mydomain.com.crt
    SSLCertificateKeyFile /path/mydomain.com.key
    SSLVerifyClient none
    SSLProxyVerify none
    SSLVerifyDepth 0
    SSLProxyVerifyDepth 0
    SSLProxyEngine off
    SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
    <Directory "/home/mydomain/www">
            SSLRequireSSL
            AllowOverride all
            Options +FollowSymLinks +ExecCGI -Indexes
            AddHandler php5-fastcgi .php
            Action php5-fastcgi /cgi-bin/a.fcgi
            Order allow,deny
            Allow from all
    </Directory>
    <Directory "/var/suexec/mydomain.com">
            AllowOverride None
            Options None
            Order allow,deny
            Allow from all
    </Directory>
</VirtualHost>

Thanks.

EDIT

It's a self signed certificate.
When https://mydomain.com works it results in warning that the certificate is not signed but accepting it lets me see the website via https.

link|improve this question

feedback

2 Answers

Try checking the SSL installation at http://www.sslshopper.com/ssl-checker.html. It might be able to find a problem.

link|improve this answer
Test resulted in: mydomain.com resolves to 111.111.111.111 Server Type: mydomain HTTP Server No SSL certificates were found on mydomain.com What I forgot to mention is that I have a self generated certificate. – 6bytes Nov 30 '09 at 17:04
feedback
up vote 0 down vote accepted

I found the cause of this problem.

Port 443 was closed in my firewall configuration. It worked sometimes because my IP was added to firewall as a safe one. That's why it did not work for other IPs.

All I had to do is open port 443 in firewall and it works just fine :)

link|improve this answer
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.