Scalix 12.5 and SSL certificate

[mrezzonico]

Hi all,
I have installed Scalix 12.5.
All seems ok !

I only have (for the moment) the following question:
I see that when installing Scalix I need to generate a "SSL certificate".
If I do not generate this certificate, apache do not start.
Is it possible to avoid the generation of the "SSL certificate" ?

Thanks for any help.
Miche

[prakashnikhar]

hi,

While installing scalix 12.5, there is option available to choose HTTPS connection instead of HTTP for 1) Scalix Management Services 2) Scalix Web Access. You may choose HTTPS connection for both or none.

Prakash

[mrezzonico]

Hi Prakash,

thanks for your reply.
I saw the option about HTTPS during the installation.
The problem is that, even if I chose none, apache do not start.

Miche

[prakashnikhar]

Hi Miche,

please check the httpd service status and scalix services

try to browse with ip only to check Apache HTTP Server Test page

if Apache HTTP Server Test page don't open then problem is in your OS

-Prakash

[mrezzonico]

Hi Prakash,

I have done a new installation.
The problem is that scalix-installer add the following lines:

Code: Select all

<VirtualHost provascalix.ofima.ch:443>
    #to force kill close connections please uncomment 2 line below
    #ProxyRequests Off
    #SetEnv proxy-nokeepalive 1

    SSLEngine on
    SSLProtocol all -SSLv2 -SSLv3
    SSLCipherSuite ALL:!aNULL:!eNULL:!SSLv2:!LOW:!EXP:!MD5:@STRENGTH
    SSLCertificateFile /etc/apache2/ssl.crt/server.crt
    SSLCertificateKeyFile /etc/apache2/ssl.key/server.key
    Include /etc/opt/scalix-tomcat/connector/ajp/app-provascalix.*.conf
</VirtualHost>

to the file:

Code: Select all

/etc/opt/scalix-tomcat/connector/ajp/etc/opt/scalix-tomcat/connector/ajp

.. even if I do not chose "1) Scalix Management Services 2) Scalix Web Access"

As a workaround I commented the line with "SSLEngine on".
After that, apache start without error.

Miche

[ScalixSupport]

Hello Mr. Miche,

In this case if you generated certificate and Apache doesn't start you need to check certs path in /etc/httpd/conf.d/ssl.conf and logs in /etc/httpd/logs

Regards,
Scalix Support Team.