using ssl

[toni31]

Hi,

Please could someone provide me some details about get apache/tomcat running using ssl in an easy way?
I was trying to follow the instructions in the manual, created a certificat and which is useless because of the information, also you have to type in the password everytime you restart it?
Next step was to test https://fqdn/sac/, the certificate was shown, but no interface. The apache eror log shows: File does not exist: /srv/www/htdocs/sac.


Thanks

[toni31]

right now i have tried every wiki article dealing with ssl. Some describe only ssl-configuration in apache, others include some configurations between apache and scalix. So im very confused.
after following some spanish article and others i think ssl is working (http is rewritten to https and the certificate is shown, but no website), but i get a message in the errorlog that file does not exist: /srv/www/htdocs/ webmail or /sac.
Does anyone know how to get this thing work?

btw: i can't belive that these things cannot be done in the administration console.

[Valerion]

The best place to do it is in the apache config. The tomcat method is a lot harder to do. You need to create the SSL certificates without a password, then you won't get asked for it on startup. You will have to protect your private key very well, though. Go to http://httpd.apache.org/docs/2.0/ssl/ssl_faq.html and scroll down to the section on certificates, it will give you step by step ionformation on how to generate and sign them, including key removal. The document also contains a lot of information on how mod_ssl works and how to set it up.

[toni31]

now i have made it step by step:

-create a certificate
-included httpd-ssl.conf (edited with ssl-settings)in httpd.conf
-restarted apache
-https://server-name/sac, certificate is shown and accepted
-no site is shown

errorlog shows file not found /srv/www/htdocs

i think the vhost is misconfigured. i read about the option in the httds-ssl.conf to set an option "DocumentRoot /usr/local/apache2/save.sites"

Please, could anyone tell me, how to set vhosts? how are https-requests forwarded to tomcat?

Thanks

[toni31]

it was working after i included the /connector/ajp/app-servername.*.conf ind the httpd-ssl.conf and comment out DocumentRoot.