topic Re: Problem with Automatically Directing Users to Port 443 in Operating System - Linux

Problem with Automatically Directing Users to Port 443

Andrew Kaplan — Thu, 19 Feb 2004 11:00:41 GMT

I am trying to have users who log into a webserver be automatically redirected to a secure port.did Here is where I am at:

1. I installed the OS from scratch, and loaded the bundled Apache server with the mod_ssl package.
INFO: Red Hat Linux 8.0
Apache 2.0.40
OpenSSL 0.9.6

2. I tested connectivity to ports 80 and 443, and both came back with the test page.

3. I want to achieve an automatic redirection to port 443, so I added the following to the
VirtualHost section of the httpd.conf file -

ServerName example.com
ServerAdmin webmaster@example.com
DocumentRoot /www
Redirect / https://example.com/

ServerName example.com
ServerAdmin webmaster@example.com
DocumentRoot /www

SSLEngine On
SSLCertificateFile /usr/local/apache/conf/ssl.crt/ca-bundle.crt
SSLCertificateKeyFile
/usr/local/apache/conf/ssl.key/server.key
SSLCertificateChainFile
/usr/local/apache/conf/ssl.key/server.key
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown

4. The Apache server (version 2.0.40 bundled with Red Hat 8.0 along with mod_ssl) did not start with the above information added. THe error message that appeared in the error_log
file was -
Failed to configure CA certificate chain!

5. After I removed the above text, I was able to restart the server successfully.

Re: Problem with Automatically Directing Users to Port 443

Alexander Chuzhoy — Thu, 19 Feb 2004 11:26:07 GMT

Here's a link :
http://www.sans.org/rr/papers/index.php?id=302

Re: Problem with Automatically Directing Users to Port 443

Martin P.J. Zinser — Thu, 19 Feb 2004 22:14:15 GMT

Did you use the same certificates in the working config? The error seems to indicate a problem with the certs.

Re: Problem with Automatically Directing Users to Port 443

Andrew Kaplan — Fri, 20 Feb 2004 08:54:28 GMT

I am almost positive that I did. Just to be sure, what procedure do you follow to create the certificates? The one that I went by is on the www.modssl.org website. Thanks.

Re: Problem with Automatically Directing Users to Port 443

Martin P.J. Zinser — Fri, 20 Feb 2004 21:34:39 GMT

Hello Andrew,

I don't use modssl, but you might want into the generic openssl verify command to check if your certificates are good.

Greetings, Martin