Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

IBM HTTP Server ssl config problem

Status
Not open for further replies.

akshukla

Technical User
Apr 30, 2003
6
JP
Hi Everyone,
I am having trouble with ssl configuration on IHS 1.3.19.3, plateform Solaris8.
Please help if someone has any solution to it.
On one of our server ssl configuration works fine i.e. I can access the server using https,
if given in httpd.conf like this
LoadModule ibm_ssl_module libexec/mod_ibm_ssl_128.so
Listen 443
SSLEnable
Keyfile /opt/ibm/gsk5/sslKeys/keys.kdb

Now if I try to give it this way

ServerName 1.2.3.4
SSLEnable
Port 443
SSLClientAuth none
SSLCipherSpec 39
SSLCipherSpec 3A
SSLCipherSpec 62
DocumentRoot /opt/IBMHTTPD/htdocs/en_US

Options +Includes
AllowOverride None
order allow,deny
allow from all

ErrorDocument 500 /redirect.html
ErrorLog /opt/IBMHTTPD/logs/error_log
TransferLog /opt/IBMHTTPD/logs/access_log

It gives error in apachecl configtest command or if I try to start the IHS.
Syntax error on line 326 of /opt/IBMHTTPD/conf/httpd.conf:
Invalid command 'SSLEnable', perhaps mis-spelled or defined by a module not included in the server configuration. If I comment the line (as #SSLEnable), error remains the same, but with the next line of ssl config i.e. in my case 'SSLClientAuth none' and so on.
Pl. let me know if anyone has any solution to this.

Thanks-n-advance,
Arvind
 
Please assume that VirtualHost start and end tags are given properly in the httpd.conf. It has not come with the problem description because of HTML conflict.

-- Arvind
 
Something is wrong with your start and end tags. Start the admin server and edit using the browser. In /usr/HTTPServer/bin issue adminctl start then send a browser request to port 8008. You may need to set the user ID and password if you didn't use this before. Also, verify port 8008 in the admin.conf file.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top