port 443

[kaancho12]

hi,
i am testing to see if port 443 is accepting any connection or not. when i type:~]# netstat -nl | grep ":443" i get
tcp 0 0 0.0.0.0:443 0.0.0.0:*
LISTEN
and yet when i type: telnet localhost 443 i get
Trying 127.0.0.1...
telnet: connect to address 127.0.0.1: Connection timed out
telnet: Unable to connect to remote host: Connection timed out

is there something i need to check or something i need to reconfigure? i am doing all this to check if the openssl that i installed in my apache is working correctly or not. thanks
ko12

 

[IRudebwoy]

Point your browser to

http://<your.server.name>:443

and check the logs. If it works you should get the default web page and an entry in the access log. Apache is listening and accepting connections over port 443.

Check these files if you're using the defaults.
/<path/to/your/logfiles>/access_log
/<path/to/your/logfiles>/error_log
/<path/to/your/logfiles>/ssl_access_log
/<path/to/your/logfiles>/ssl_error_log

You still need to configure apache with certificates to support SSL in order to use a URL like

https://<your.server.name>/

I hope this helps.


## Just because you can do something doesn't mean you should.

Lorenzo Wacondo (System Administrator)

http://www.laguna-industries.com

 

[kaancho12]

hi,
i actually tried accessing the secure server through

http://<your.server.name>:443

and through

https://<server.name>

but both of them did not have anything in the error log. they did have access log which was like:
ip.ip.ip.ip - - [13/Jul/2005:01:12:34 -0400] "GET /cgi-bin/sc/order.cgi?rd=1&storeid=*0c16176f4dbc&sbid=SSMSB1121230814.6729&prevlocation=

http://www.server.com/

HTTP/1.1" 200 17418 "

http://www.server.com/"

"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.3) Gecko/20040910"

i was testing "telnet localhost 443" to see if port 443 was responding to any requests or not.
i really need to test out the ssl thing soon. please let me know if you have any idea.
ko12

 

[jstreich]

if browsing to

http://<your.server.name>:443

gave you anything at all (besides an error -- except perhaps a 404 which would mean it's serving pages, just doesn't have one to serve), it's at least serving pages and accepting requests. Then it's just left to ssl.

[plug=shameless]

http://game-master.us/phpx-3.4.0/

[/plug]

 

[kaancho12]

well, both of the pages i tried to access timed out for one without giving any particular error. someone had suggested that i try "telnet localhost 443" which i thought is supposed to check if port 443 was accepting any connections and thats when i got the error which i displayed in the thread earlier. Is this a problem with "Telnet" ? Do i need to reinstall it?
thanks ko12

 

[thedaver]

You need to check your local machine's IPTables/Firewall to make sure that you are in fact able to reach the 443 port from an external host.

You might very well be running a port 443 service/daemon but the firewall blocks access, which may explain your experience.

D.E.R. Management - IT Project Management Consulting

http://www.dermanagement.com/

 

[Kozusnik]

It's been a while, but don't you have to create a default certificate for openssl before you try to use it? Has that been done? How are you starting the daemon? Try it from the command line and see if you get any errors.


Maybe I'm thinking of gpg, but I can't recall.

Mark

 

[thedaver]

Apache 1.23.x series ships with enabled certificates, IIRC.

D.E.R. Management - IT Project Management Consulting

http://www.dermanagement.com/

 

[IRudebwoy]

I know this is stupid but can you ping the server at all.

ko12: If you getting entries in the access log and nothing on the client side maybe the server can't find your machine.

Just a thought.



## Just because you can do something doesn't mean you should.

Lorenzo Wacondo (System Administrator)

http://www.laguna-industries.com

 

[rzs0502]

Is your iptables running? If so, stop the firewall and try again. You can then add a rule for the port later.
How are you starting Apache?
With my Apache 2 setup (on Slackware), I had the change my rc.httpd for SSL
/usr/sbin/apachectl startssl
Also, have you created the ssl keys?
Apache 2 comes with a script to create 'dummy' or test keys called mkcert.sh (/etc/apache2) on my system.




&quot;If you always do what you've always done, you will always be where you've always been.&quot;

 

[kaancho12]

hi all,
thank you for your pointers. it was actually firwall problem. as soon as i changed the firewall to accept port 443 the ssl worked fine and i havent had an issue with that.
thanks
ko12