Comments on: Install and Configure Apache2 with PHP5 and SSL Support in Debian Etch

By: zeigerpuppy

zeigerpuppy — Wed, 03 Mar 2010 13:35:37 +0000

I am having a problem with ubuntu dapper php5 and apache2 ssl. php pages work fine over http but I get a blank page with https, no error message in logs.
Other https pages seem fine. Any ideas?

By: robert langdon

robert langdon — Thu, 04 Feb 2010 14:36:26 +0000

Thanks Man.
I was working on the same problem since last 4 days. But cant derive the solution. But your post has done it.
Nice work..
Keep it up.

By: Duir

Duir — Tue, 02 Feb 2010 13:21:18 +0000

Sorry, the command above should have been:

ln -s ../sites-available/default-ssl 001-default-ssl

, and the tag I was referring to was (got eaten up by this editor):

By: Duir

Duir — Tue, 02 Feb 2010 13:16:31 +0000

My installation of Apache with SSL had the VirtualHosts configuration for HTTP and HTTPS split in two files: /etc/apache2/sites-available/default (80) and /etc/apache2/sites-available/default-ssl (443).

I actually didn’t have to do anything with the ports.conf, because the “Listen 443″ was already included within the “” tag condition. Adding the standalone “Listen 443″ (outside this tag) actually resulted in error.

So after I completed all the configuration and verified that apache listens on both the 80 and 443 ports (using “telnet localhost 80″ and “… 443″) I still couldn’t connect to https://... from the outside world. I kept getting the “Invalid method in request” in my error.log.

The solution was extremely simple… I had to make a symbolic link from the /etc/apache2/sites-enabled directory to the default-ssl file in ../sites-available via the command:

ln -s 001-default-ssl ../sites-available/default-ssl

, where the “001-default-ssl” was merely chosen - use can use whatever other name you wish.

I hope this will help. I am pretty unskilled apache administrator, so if this was clear to everyone around here, sorry

By: Sihker

Sihker — Sun, 10 Jan 2010 10:13:21 +0000

Thanks for the tutorial. The half hour, that I gained using this, I lost with “SSL received a record that exceeded the maximum permissible length.”
Turns out one needs to
sudo a2ensite default-ssl sudo /etc/init.d/apache2 reload
to enforce the new configuration.

By: David

David — Thu, 10 Sep 2009 20:43:12 +0000

The command has to be:

openssl req $@ -new -x509 -days 365 -nodes -out /etc/apache2/ssl/apache.pem -keyout /etc/apache2/apache.pem

You missed the “ssl” in the first path.

By: matey

matey — Thu, 20 Aug 2009 13:36:16 +0000

Are you running it as root ?
in the terminal do;
sudo /etc/init.d/apache2 restart

By: Yogi

Yogi — Wed, 19 Aug 2009 18:56:50 +0000

Hi,

I followed through your instruction, everything worked fine but when i run this command /etc/apache2/ports.conf it shows -bash : /etc/apache2/ports.conf : permission denied and also for this command too /etc/apache2/sites-available/default.

Please help me i am new to Debian…

Thanks

By: Michael Brown

Michael Brown — Mon, 20 Jul 2009 23:02:14 +0000

to fix ssl_error_rx_record_too_long
I removed all
NameVirtualHost *
from other site definitions,
and addedd :80 or :443 to the virtual host

By: grzech

grzech — Thu, 07 May 2009 16:21:10 +0000

It works, it was easy. Thank you very much.

By: Matey

Matey — Tue, 10 Mar 2009 17:45:57 +0000

# cartoonist Says:
February 24th, 2009 at 8:37 am

SOLVED! I unistalled all apache and libapr related package (apt-get purge) and then reinstall by:
#apt-get install apache2
Then Everything is OK!!

Hey Thanks for taking the time and posting the Solution!
I wished everyone did that.

By: Matey

Matey — Wed, 04 Mar 2009 11:04:14 +0000

khairul
That is not really an error.
Your system is working just fine it seems.
If this is supposed to be a part of a web server and/or a domain then that is an error message otherwise if you are on a local network or not a web related server then its OK.(its looking for .com .org etc.)
I am no expert but for what I have seen the web configurations are scattered around but look into the folders called sites-available , sites-enabled etc. under /etc/apache2/…that is a good start

BTW apache2 requires a -k to start I think?!

By: khairul

khairul — Tue, 03 Mar 2009 21:03:12 +0000

I have followed your instruction but i get some error

#tail -f /var/log/apache2/error.log

[Wed Mar 04 02:20:28 2009] [notice] Graceful restart requested, doing restart
apache2: Could not reliably determine the server’s fully qualified domain name, using 221.120.101.237 for ServerName
[Wed Mar 04 02:20:28 2009] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Mar 04 02:20:28 2009] [warn] RSA server certificate CommonName (CN) `Khairul’ does NOT match server name!?
[Wed Mar 04 02:20:28 2009] [notice] Apache/2.2.3 (Debian) PHP/5.2.0-8+etch13 mod_ssl/2.2.3 OpenSSL/0.9.8c configured -- resuming normal operations
[Wed Mar 04 02:34:57 2009] [notice] Graceful restart requested, doing restart
apache2: Could not reliably determine the server’s fully qualified domain name, using 221.120.101.237 for ServerName
[Wed Mar 04 02:34:57 2009] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Mar 04 02:34:57 2009] [warn] RSA server certificate CommonName (CN) `Khairul’ does NOT match server name!?
[Wed Mar 04 02:34:57 2009] [notice] Apache/2.2.3 (Debian) PHP/5.2.0-8+etch13 mod_ssl/2.2.3 OpenSSL/0.9.8c configured -- resuming normal operations

By: cartoonist

cartoonist — Tue, 24 Feb 2009 08:37:32 +0000

SOLVED! I unistalled all apache and libapr related package (apt-get purge) and then reinstall by:
#apt-get install apache2
Then Everything is OK!!

By: cartoonist

cartoonist — Thu, 19 Feb 2009 06:04:59 +0000

I have a problem with Apache 2!!
when i start apache2:
# /etc/init.d/apache2 start
Starting web server: apache2/usr/sbin/apache2: error while loading shared libraries: libapr-1.so.0: cannot open shared object file: No such file or directory
failed!

I’ve installed ‘libapr1′ but no change occures! (excuse me because of my bad english! it’s not my native language!)
help me please!

By: matey

matey — Mon, 16 Feb 2009 17:35:29 +0000

when I run the apache2 force restart thing mentioned above I get this error:

ERROR: APACHE_PID_FILE needs to be defined in /etc/apache2/envvars

But no matter how I define the PID file I still get more errors about that goofy envvar file?!
I wished some one would have taken the time to put a sample in there like most other conf. files do.

By: douglasmbiandou

douglasmbiandou — Sat, 24 Jan 2009 18:11:10 +0000

Thank you very much ! It works & helped me a lot.

By: Sameera Gayan

Sameera Gayan — Wed, 21 Jan 2009 14:02:06 +0000

Hi,
I got the same issue.
-------------------------------------------------------------------
An error occurred during a connection to localhost.

SSL received a record that exceeded the maximum permissible length.

(Error code: ssl_error_rx_record_too_long)
--------------------------------------------------------------------
Please help!!!

By: Dre

Dre — Wed, 03 Dec 2008 18:44:02 +0000

Now I am getting a connection issue when trying to connect via https…

--------------------------------------------------------------------
An error occurred during a connection to mars-webserver.local.lan.

SSL received a record that exceeded the maximum permissible length.

(Error code: ssl_error_rx_record_too_long)
--------------------------------------------------------------------
What can I to correct that ?

tia

By: Adhelle

Adhelle — Sun, 02 Nov 2008 13:22:46 +0000

hey,
i get an error

Starting web server (apache2)…(98)Address already in use: make_sock: could not bind to address 0.0.0.0:80
no listening sockets available, shutting down
Unable to open logs
failed!

help please? thanks ^^