Apache2 ssl certificate script not present in Hardy

Joel Oliver joelol75 at verizon.net
Tue Sep 9 01:51:34 UTC 2008


David Fletcher wrote:
> I've got a small, spare machine at work that I can experiment on. I've 
> installed a server (command line only install option) on it using the Ubuntu 
> Hardy Alternate CD.
>
> I would like to get squirrelmail working over ssl, for access to my mail 
> server whilst away from home.
>
> Squirrelmail is installed and working (showing my mail box - I've done nothing 
> else with it yet) over http. What I've done next is:-
>
> Edit the /etc/apache2/available-servers/squirrelmail file to enable switching 
> from http to https. This is working.
>
> Downloaded and unpacked the squirrelmail secure login plugin. I'm assuming 
> that I need this.
>
> Copied /etc/apache2/sites-available/default 
> to /etc/apache2/sites-available/ssl and edited as described in the how-to I 
> found to set the port number to 443 and switch on ssl. The problem is, I 
> don't have the /etc/apache2/ssl/apache.pem certificate file. When I 
> previously set up a server (to run subversion over Apache/ssl) with Dapper 
> there was a script in /usr/sbin/ called apache2-ssl-certificate, which 
> created a certificate for Apache to use over ssl, and it works just fine. 
> That script is not present on the Hardy system I just installed.
>
> Question - What do I use instead of apache2-ssl-certificate to 
> create /etc/apache2/ssl/apache.pem? Or has everything changed?
>
> TIA
>
> Dave
>
>
>
>   
The SSL is included with apache2 but needs to be enabled.  a2enmod ssl 
should do the trick... Then just create certificates (Info at 
http://www.tc.umn.edu/~brams006/selfsign_ubuntu.html )and  set up the 
site similar to : 

 NameVirtualHost *:443
<VirtualHost *:443>

        ServerAdmin user at gmail.com
        SSLEngine on
        SSLCertificateFile /etc/apache2/apache.pem

        DocumentRoot /www/ssl/
        <Directory />
                Options FollowSymLinks
                AllowOverride Options FileInfo AuthConfig Limit Indexes
        </Directory>
        <Directory /www/ssl/>
                Options Indexes FollowSymLinks MultiViews
                AllowOverride Options FileInfo AuthConfig Limit Indexes
                Order allow,deny
                allow from all
        </Directory>

    ScriptAlias /proxy/ /www/cgi/
    <Directory "/www/cgi">
        AllowOverride Options FileInfo AuthConfig Limit Indexes
        Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
        Order allow,deny
        Allow from all
    </Directory>

        ErrorLog /var/log/apache2/sslerror.log

        # Possible values include: debug, info, notice, warn, error, crit,
        # alert, emerg.
        LogLevel warn

        CustomLog /var/log/apache2/sslaccess.log combined
        ServerSignature Off

</VirtualHost>







More information about the kubuntu-users mailing list