apache/ssl help

[Rick Stevens]

Keyser Soze wrote:
> ----- Original Message -----
> From: Rick Stevens <rstevens at vitalstream.com>
> Date: Mon, 29 Dec 2003 13:53:40 -0800
> 
> 
>>Keyser Soze wrote:
>>
>>>no, I do use ssh/sshd and putty to access the machine remotly, but that is not what I am asking for.
>>>
>>>imp is the webmail program I use.  I can access my mail on that machine via http:\\mymachine.com and the logging in, but I want to use https:\\mymachine.com and that is where my query originates.
>>
>>You have to set Apache up to use SSL.  Apache must be built with SSL
>>enabled, set up a certificate and put the appropriate directives in the
>>apache config file.  Details can be found on the Apache site:
>>
>>	http://httpd.apache.org/docs-2.0/ssl/ssl_faq.html
>>
>>BTW, we prefer bottom posting here.
>>
>>
>>>>Keyser Soze wrote:
>>>>
>>>>
>>>>>I have fedora core 1 installed and have apache and horde and imp all running and it seems to work great. Now I want to change the login to be able to use ssl. I have mode_ssl and openssl installed from fedora but have no idea how to enable ssl. Can someone point me in the right direction?
>>>>
>>>>What do you mean by "want the login to use ssl"?  The normal login
>>>>process doesn't use security.  I suspect you want to remote access it
>>>>via ssh, right?  In that case, simply run redhat-config-services
>>>>and enable sshd.  You need an ssh client to access it.  For Windows,
>>>>SecureCRT (commercial) or PuTTY (open source) are available.
> 
> ok bottom it is -
> 
> I now have apache running with the new certs and it is watching both secure and normal ports.
> 
> on the normal port (80) I see the imp login page and on the 443 page, I see the Fedora Core test page.
> 
> I'd like to not see imp on port 80, and instead I will put a page that I have yet to create.  I want imp to be on https (443).  
> 
> How can I do this?  
> 
> Or maybe a more basic question: If I am serving both secure and nonsecure pages, will there be two distinct sets of files (trees) under /var/www?  If so, what are the two tree roots?

You can put "SSLDisable" in the <virtualhost> section for sites you 
don't want SSL on.  You can also use "Port" directives to only listen on
the ports you want.
----------------------------------------------------------------------
- Rick Stevens, Senior Systems Engineer     rstevens at vitalstream.com -
- VitalStream, Inc.                       http://www.vitalstream.com -
-                                                                    -
-      Always remember you're unique, just like everyone else.       -
----------------------------------------------------------------------