Comments on: Install and Configure Apache2 with PHP5 and SSL Support in Debian Etch

By: Elisa

Elisa — Tue, 27 Sep 2011 15:52:04 +0000

Thanks a million for this article .

By: Jorn

Jorn — Wed, 08 Jun 2011 07:32:55 +0000

Refer the command line:

#openssl req $@ -new -x509 -days 365 -nodes -out /etc/apache2/apache.pem -keyout /etc/apache2/apache.pem

It states that the certificate and the private key is to be written to the same file. Is this the case ?

By: premiero

premiero — Wed, 18 May 2011 19:25:23 +0000

You don’t need to edit any files to have support of ssl. Just input

a2ensite default-ssl

command nad you are done.

By: jake

jake — Sun, 06 Mar 2011 16:25:02 +0000

sorry, but these hints are totally outdated and should be corrected.

read /usr/share/doc/apache2.2-common/README.Debian.gz instead and follow those few steps. it’s very easy.

By: Deven Bhatt

Deven Bhatt — Tue, 29 Jun 2010 06:08:20 +0000

I get the error given below in Firefox despite following steps given above.

(Error code: sec_error_untrusted_issuer)

I am using Ubuntu 8.04 with Apache2 and php5. I do not get this error in Internet Explorer.

By: Pavol

Pavol — Mon, 14 Jun 2010 12:50:04 +0000

I have installed Debian and apache server and php.
When I am connecting to apache server shows following:
Warning: Unknown: failed to open stream: Permission denied in Unknown on line 0

Fatal error: Unknown: Failed opening required ‘/var/www/index.php’ (include_path=’.:/usr/share/php5′) in Unknown on line 0

Where is problem ?I am beginner.
Can we help me please ?
Thanks a lot
Pavol

By: zeigerpuppy

zeigerpuppy — Wed, 03 Mar 2010 13:35:37 +0000

I am having a problem with ubuntu dapper php5 and apache2 ssl. php pages work fine over http but I get a blank page with https, no error message in logs.
Other https pages seem fine. Any ideas?

By: robert langdon

robert langdon — Thu, 04 Feb 2010 14:36:26 +0000

Thanks Man.
I was working on the same problem since last 4 days. But cant derive the solution. But your post has done it.
Nice work..
Keep it up.

By: Duir

Duir — Tue, 02 Feb 2010 13:21:18 +0000

Sorry, the command above should have been:

ln -s ../sites-available/default-ssl 001-default-ssl

, and the tag I was referring to was (got eaten up by this editor):

By: Duir

Duir — Tue, 02 Feb 2010 13:16:31 +0000

My installation of Apache with SSL had the VirtualHosts configuration for HTTP and HTTPS split in two files: /etc/apache2/sites-available/default (80) and /etc/apache2/sites-available/default-ssl (443).

I actually didn’t have to do anything with the ports.conf, because the “Listen 443″ was already included within the “” tag condition. Adding the standalone “Listen 443″ (outside this tag) actually resulted in error.

So after I completed all the configuration and verified that apache listens on both the 80 and 443 ports (using “telnet localhost 80″ and “… 443″) I still couldn’t connect to https://... from the outside world. I kept getting the “Invalid method in request” in my error.log.

The solution was extremely simple… I had to make a symbolic link from the /etc/apache2/sites-enabled directory to the default-ssl file in ../sites-available via the command:

ln -s 001-default-ssl ../sites-available/default-ssl

, where the “001-default-ssl” was merely chosen - use can use whatever other name you wish.

I hope this will help. I am pretty unskilled apache administrator, so if this was clear to everyone around here, sorry

By: Sihker

Sihker — Sun, 10 Jan 2010 10:13:21 +0000

Thanks for the tutorial. The half hour, that I gained using this, I lost with “SSL received a record that exceeded the maximum permissible length.”
Turns out one needs to
sudo a2ensite default-ssl sudo /etc/init.d/apache2 reload
to enforce the new configuration.

By: David

David — Thu, 10 Sep 2009 20:43:12 +0000

The command has to be:

openssl req $@ -new -x509 -days 365 -nodes -out /etc/apache2/ssl/apache.pem -keyout /etc/apache2/apache.pem

You missed the “ssl” in the first path.

By: matey

matey — Thu, 20 Aug 2009 13:36:16 +0000

Are you running it as root ?
in the terminal do;
sudo /etc/init.d/apache2 restart

By: Yogi

Yogi — Wed, 19 Aug 2009 18:56:50 +0000

Hi,

I followed through your instruction, everything worked fine but when i run this command /etc/apache2/ports.conf it shows -bash : /etc/apache2/ports.conf : permission denied and also for this command too /etc/apache2/sites-available/default.

Please help me i am new to Debian…

Thanks

By: Michael Brown

Michael Brown — Mon, 20 Jul 2009 23:02:14 +0000

to fix ssl_error_rx_record_too_long
I removed all
NameVirtualHost *
from other site definitions,
and addedd :80 or :443 to the virtual host

By: grzech

grzech — Thu, 07 May 2009 16:21:10 +0000

It works, it was easy. Thank you very much.

By: Matey

Matey — Tue, 10 Mar 2009 17:45:57 +0000

# cartoonist Says:
February 24th, 2009 at 8:37 am

SOLVED! I unistalled all apache and libapr related package (apt-get purge) and then reinstall by:
#apt-get install apache2
Then Everything is OK!!

Hey Thanks for taking the time and posting the Solution!
I wished everyone did that.

By: Matey

Matey — Wed, 04 Mar 2009 11:04:14 +0000

khairul
That is not really an error.
Your system is working just fine it seems.
If this is supposed to be a part of a web server and/or a domain then that is an error message otherwise if you are on a local network or not a web related server then its OK.(its looking for .com .org etc.)
I am no expert but for what I have seen the web configurations are scattered around but look into the folders called sites-available , sites-enabled etc. under /etc/apache2/…that is a good start

BTW apache2 requires a -k to start I think?!

By: khairul

khairul — Tue, 03 Mar 2009 21:03:12 +0000

I have followed your instruction but i get some error

#tail -f /var/log/apache2/error.log

[Wed Mar 04 02:20:28 2009] [notice] Graceful restart requested, doing restart
apache2: Could not reliably determine the server’s fully qualified domain name, using 221.120.101.237 for ServerName
[Wed Mar 04 02:20:28 2009] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Mar 04 02:20:28 2009] [warn] RSA server certificate CommonName (CN) `Khairul’ does NOT match server name!?
[Wed Mar 04 02:20:28 2009] [notice] Apache/2.2.3 (Debian) PHP/5.2.0-8+etch13 mod_ssl/2.2.3 OpenSSL/0.9.8c configured -- resuming normal operations
[Wed Mar 04 02:34:57 2009] [notice] Graceful restart requested, doing restart
apache2: Could not reliably determine the server’s fully qualified domain name, using 221.120.101.237 for ServerName
[Wed Mar 04 02:34:57 2009] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Mar 04 02:34:57 2009] [warn] RSA server certificate CommonName (CN) `Khairul’ does NOT match server name!?
[Wed Mar 04 02:34:57 2009] [notice] Apache/2.2.3 (Debian) PHP/5.2.0-8+etch13 mod_ssl/2.2.3 OpenSSL/0.9.8c configured -- resuming normal operations

By: cartoonist

cartoonist — Tue, 24 Feb 2009 08:37:32 +0000

SOLVED! I unistalled all apache and libapr related package (apt-get purge) and then reinstall by:
#apt-get install apache2
Then Everything is OK!!