Server :: Start Https On FC10?
Jan 12, 2010How to start https on FC10?[root@smartgateway conf]# openssl versionOpenSSL 0.9.8g 19 Oct 2007
View 1 RepliesHow to start https on FC10?[root@smartgateway conf]# openssl versionOpenSSL 0.9.8g 19 Oct 2007
View 1 RepliesI am new to Fedora 10 and encountered the following problem. I installed FC10 on an external eSATA hard drive (sdb) on my laptop which already has some other Linux distros on sda. I used a DVD that came with the Fedora 10 Bible, so I can assume that the DVD had no problems. The installation went OK and I got no error messages. I added the following lines to the menu.lst file of the distro that I use to boot all my distros.
title Fedora 10
root (hd1,1)
kernel /boot/vmlinuz-2.6.27.15-170.2.24.fc10.i686 ro root=/dev/sdb2 rhgb quiet
initrd /boot/initrd-2.6.27.15-170.2.24.fc10.i686.img
When I boot Fedora, the blue bar at the bottom of the screen goes half-way, then gives me the error message: "mount: could not find filesystem '/dev/root' "
My laptop is dual-boot with Windows XP and FC10 co-existing. Yesterday, I wanna re-install FC10, so I formated(deleted) all linux partitions in Windows XP. Disaster happened when i rebooted computer: the computer cannot startup at all?Now, I don't know how to deal with it. I wanna know: what can i do to start up the computer into Windows? In my opinion, computer should work well without one system in dual-boot mode. If you format C: drive on which windows are installed, for instance, the computer can boot into FC10 normally. Why it die deleting FC10?
View 1 Replies View RelatedI have fedora 10 installed and when my monitor is turned off the X session fails to start because it can not probe for settings. Is there a way to hard code the settings for x instead of letting them assign dynamically on boot?
View 1 Replies View RelatedI'm having a problem getting BIND to start after doing the FC10->FC11 upgrade. Others have been reporting some bad symbolic links, but this isn't that problem. I've searched the forums here, but I don't see anything like this anywhere.
Here's what I see:
Code:
[root@atomu etc]# /etc/init.d/named start
Starting named: [FAILED]
So, no error message. Logs read as follows:
Code:
Jul 8 00:38:00 atomu named[2414]: starting BIND 9.6.1-RedHat-9.6.1-2.fc11 -u named
Jul 8 00:38:00 atomu named[2414]: built with '--build=x86_64-redhat-linux-gnu' '--host=x86_64-redhat-linux-gnu' '--target=x86_64-redhat-linux-gnu' '--program-prefix=' '--prefix=/usr' '--exec-prefix=/usr' '--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc'
[code]....
After setup Openldap server with TLS/SSL use ldaps, I install phpldapadmin and have an issue LDAP Server is configured and running. make some ldapsearch and it oki. I couldn't use https to browse LDAP server when I use http and I can't connect Could not start TLS. check your LDAP server configuration. This is my config
[Code]....
I have set up certain portions of my web site to be forced https:// How do I force, non https:// protocols. I know this sounds confusing, so let me give you an example.
[Code]...
I have a debian box running Apache2 and PHP5.2.6 lenny.
When a request is made via https, php displays the content fine. If the request is made over HTTP the file is offered for download, rather than displaying it.
I know its probably something trivial but I've never seen this issue.
The plot thickens, I can display PHP over HTTP in some directories but not others (which offer the file for download)?
We have a apache server which have a ssl certificate like www.abc.com. We hosting a website is a online giving shop which need ssl cetificate in https. website of this is www.123.com, it will redirect tow this website owner don't want to show What can I do to achieve this ? Can I use rewrite function in apache to achieve this? How? or we need to buy any other ssl certificate for www.123.com? How can I install multiple sslcertificate in one apache server?
View 4 Replies View RelatedI want to ENABLE SSL on a PORT 2222 :
Now this works fine. But I also want the HTTP URL to work and redirect it to HTTPS.
When I visit http://IP:2222 I get :
Quote:
Bad Request
Your browser sent a request that this server could not understand.
Reason: You're speaking plain HTTP to an SSL-enabled server port.
Instead use the HTTPS scheme to access this URL, please.
Hint: [url]
How should I make this request of [url] CT to [url]
I'm using a box running CentOS 5.5 powered with Apache2. In this machine I hosted several domains and sub domains, managed by Apache's virtual host.
Due to security issue, one sub domain needs to be able to be accessed either using http or https.
My question is: Is it possible to set a sub domain to be able to be reached using both http and https? If it's possible, how to make it happens?
Is it possible to pickup the whole https URI with a sniffer?
IE. [url]
For example, Is there a way to get the sniffer to pick up id=39238?
I have been testing with wireshark, and it only seems to be picking up domain.com.
I'm installing Liferay as a WAR on Tomcat 6 on a new Ubuntu server.I want my portal accessible only via HTTPS, that's why I've enabled it via Apache.My config :Apache 2 (/etc/apache2/sites-enabled/001-https)
Code:
<VirtualHost my.domain.com:443>
ServerAdmin admin@domain.com
[code]....
I have a centos server (5.3). I installed WebMin to assist with some of the administration details. In any event, I got it installed but I cannot access it (it requires a secure connection).
I checked out the server and it does not respond to a HTTPS:// request. When I telnet into port 80, it responds but it does not respond on port 443. MOD_SSL is installed and there is an ssl.conf (unmodified).
i'm attemping to re-route incoming traffic of https to one of my servers. (a windows xp with subversion on it)
problem is if i do that ALL https traffic from other pc's is stopped. meaning i can't get any reply from any url with https;
I am trying to configure local https server but I get this message: "ssl_error_handshake_failure_alert"
I configured my apache and make cert and key files from this article, following section 1B: [url]
I try to add server.crt and ca.crt files in firefox, but it didn't help. I googled and didn't find any information. I try also with 1024bit key.
I am running Ubuntu 10.4 with Apache2, SVN and SSL. Both HTTP and HTTPS are working correctly with my website. Although the SVN setup I have is not working. This configuration gives me a 403 error.
Code:
<Location /svn>
DAV svn
SVNParentPath /srv/svn/repos
SVNListParentPath On
[Code]...
This issue is driving me up the walls. If there is any additional information, I will be more than happy to provide it.
A while back, I put a site up under a LAMP setup, and followed a guide from ubuntuforums that I googled to set up SSL encryption for the site.
That site works great, but since then, I've added some other sites to the same LAMP server. They load fine as well, but if I type in https:// before going to the latter sites, the browser attempts to redirect to the first, and warns that it is a fraudulent certificate, and that I'm at risk by going to the site.
Obviously, it isn't an attack site, the certificate is just set up for only one domain. How do I prevent my non-SSL sites from redirecting to the SSL-encrypted site?
I am trying to configure test site with https mod_ssl for a few days with no success.
Now I got this message:
And this is second day I can't move on. I try to config https site on my localhost in order to test functionality and etc.
I get this as output in curl
Code:
My Problem is: I want to stop gmail access without blocking https. Yes in my squid proxy normal [URL].. is not accessible. But gmail recently started https service by which user can still get access to gmail. I DONT WANT TO STOP https CAUSE ITS BEING USING BY OTHER PROGRAMS.
View 1 Replies View RelatedWe have 2 HTTP Load balancer with HAproxy and heartbeat. There are 4 nodes in this cluster. It's doing round robin load balancing. The HTTP cluster working fine. We are having problem with our portal because it uses SSO. We need sticky connection support in our HAproxy. Also we need load balancing for HTTPS traffic. Here's our HAproxy conf file.
[Code]....
I have a lab of 10 computers with ips from 192.168.1.120 to 192.168.1.130 the server's Ip is 192.168.1.116When I am on client computer I type the server's Ip address on the browser and it works. All i want is that instead of entering my servers Ip I could just enter an address like: example.lan
View 3 Replies View RelatedFor one project I use a web hosting service. I wanted the entire site to be https, so I bought a service from them in which they automatically install a trusted cert so people can access the site through https protocol. Since http is still available, though, I need to do automatic rewrites or something to change http into https requests. (I don't have access to their Apache server configuration files or anything like that.)I found on the net this code to add to my .htaccess file:
Code:
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}
[code]....
For some years now I have been able to use openssl (apache-mod_ssl) to process encrypted traffic because I had, in effect, only one host - the main server - as the sole entry in our ssl_vhost.conf file.
Now we are working toward serving a couple of more secure sites for closely related organizations, but with their own distinct identities. This, in the past, would have meant additional static IPs with matching nic cards for starters. But my understanding is that since 2007/8 we have been able to use gnutls (apache-mod_gnutls) which gets around the old problem of Apache not being able to direct name-based traffic because that would not yet have been decoded. This is referred to as SNI - Server Name Indication.
Here my confusion begins. Is there an overlap between SSL and TLS? For instance, I would have generated RSA keys and a self-signed certificate with the genrsa command. Is this sufficient for gnutls or does it need to generate its own keys and certificates? I realize gnutls is relatively a new kid on the block but it is appealing and I'd like to give it a try.
I am working with the Mandriva/Mageia cooker with an x86_64 architecture so all packages are up-to-the-minute.
How to best manage both http and https pages on the same apache-server without conflicts. For example, if i have both 000-default.conf and 000-default-ssl.conf pointing to mydomain.com, and don't want users who visit mydomain.com without specifically type the https-prefix to be redirected to the https-page - how to handle users using browserplugins such as https-everywhere etc?
Another option would be to create a subdomain ssl.mudomain.com and have users who want to reach the ssl site to have to type ssl. I have tested several things with https everywhere enabled in my own browser, and it seems really hard to make this working the way i want, in one way or another i always end up getting redirected to the ssl-site automatically.
The reason i need this to work is because i run one site that i don't care much about SSL, that is the "official" part of that site, and i also host some things for friends and family on the SSL-part. This would not have been a problem if it wasn't that i use self-signed certificates for my ssl-site and the major user become afraid when a certificate-warning pops up in their browser and therefor leave the site.
i need is to have http and https allowed, together with mail server (incoming and outgoing) and ftp, ftps and ssh. all other ports have to be closed.
View 3 Replies View RelatedI must say, the RPMfusion version of the Nvdia driver package work better with FC10 than they did under FC9 for me, which is to say: they work at all. Still get corrupted output after a few hours of work, but I imagine that's just the underlying weakness of the Nvidia driver bubbling up. Either way, now I have other problems:
First off, the Intel driver for my onboard video setup has stopped working entirely. The attempt to bring up X on the Intel setup gets me to the KDE login screen and locks the machine up hard (poweroff required). A look at the xorg.0.log shows that the server seems to be stuck in a loop trying to determine the valid video properties for the session.
Here's my xorg.conf, BTW. I have it setup to perform different configurations depending on which DefaultServerLayout line gets uncommented (lines 4 - 6). If anybody has a better way of doing this, I'm all ears. While we're on my xorg.conf, pleas view lines 64-67 and/or 75-77. This is my quickie way of changing drivers (again, all ears) which brings us to the next problem, neither the nv or nouveau drivers work with my system. Interestingly enough, both drivers tend to fail in the same relative spot in the process, I think. Please refer to line 207 of this xorg.0.log with the nv driver or line 140 of this xorg.0.log from the nouveau setup. Either way, both sessions die with the same message: (EE) Screen(s) found, but none have a usable configuration. Fatal server error: no screens found Gotta go, x session getting corrupt,,,
how to redirect all client http request to https request in squid
View 1 Replies View RelatedIm trying to run synergy on startup. This works fine on the client, but it wont start automatically on the server. I put this line in an entry in startup applications:
[code]...
but still no dice.
I have setup a CentOS 5.5 server as a DHCP server. That will be it's only task in a Cisco callmanger VoIP environment The DHCP server that comes with CentOS 5.5 is from ISC V3.0.5 -redhat.
The server (HP DL360) has two physical NIC's of which only NIC1 is used (ETH0)
ifconfig shows:
Code:
The interface has a fixed IP setup.
My dhcp.conf file looks like this:
Code:
When I start (try to) dhcpd via the service interface or via the prompt as
Code: service dhcpd start
I get an [FAILED] message and the following is in /var/log/messages
Code:
But when I start the DHCPD on the comamnd prompt in debug mode it looks as follows:
Code:
and /var/log/messages shows:
Code:
Why does the system ask a declaration for eth0 0.0.0.0?