[Debian-sf-users] Re: sourceforge for debian - woody/testing: problem with apache-ssl

[Roland Mas]

[Cc:ing to the debian-sf-users mailing-list, please reply there]

Shawn Potter (2002-05-30 16:52:10 -0700) :

> Hello Roland,
>
> I am stuck with a problem installing the latest sourceforge for debian 
> (2.5-29) in the woody/testing area of debian.
>
> Everything has installed, my problem is a with apache-ssl and the: 
>
>   ### Next line inserted by Sourceforge install
>   Include /etc/sourceforge/sf-httpd.conf
>
> lines in the apache-ssl config file.
>
> apache-ssl will start if I comment out the Include, however, if I try to run 
> apache-ssl it produces no error simply a:
>
>   cockroach:~# /etc/init.d/apache-ssl start
>   Starting web server: apache-sslReading key for server  
> cockroach.invoqsystems.com:443
>   failed

Hm.  You *did* generate (or otherwise get) an SSL certificate on your
server, right?  I'm not totally familiar with how apache-ssl (as
opposed to apache + libapache-mod-ssl) works, but you still need a
certificate, and that error message seems to indicate there is an
error while loading it.

> so obviously something is just not making apache-ssl happy with the
> sourceforge config additions.

  Do you have working SSL if you uninstall Sourceforge?  If you have,
then it's most probably a problem in Sourceforge, but otherwise I'd
just suspect the key problem mentioned higher.

  I'll leave the rest of your message untouched, so that other people
in the debian-sf-users mailing-list can have a look at it.  I suggest
you subscribe to it too, so that you can follow the discussions (see
<URI:http://mail.freesoftware.fsf.org/mailman/listinfo/debian-sf-users>
for details.

> regular apache is running fine with the same include, so the initial
> page of sourceforge gets served via http - of course I can't get
> past that since apache-ssl is not there for me to log in.
>
> Further investigation looking at the error log for apache-ssl yields
> the following error:
>
> [Thu May 30 16:39:11 2002] [crit] Attempt to reinitialise SSL for server 
> cockroach.invoqsystems.com
>
> So I validated all of the modules that are loading and I commented
> out all of the lines of the include, uncommenting until apache-ssl
> had an error.
>
> This revealed that the reinitialise error was being caused by any
> <VirtualServer> entry.  Validated by removing the include and trying
> to launch apache-ssl with a <VirtualServer> entry in the actual
> apache-ssh config file. Same reinitialise problem.
>
> Any ideas how I fix apache-ssl to accept <VirtualServer> entries???
>
> Thanks in advance,
>
> Shawn Potter
>
> PS: I have installed debian 3 times, once the wrong version (potato), once 
> via 
> the woody directories via the net (problem as described) and once from an 8 
> disc set of the unofficial woody - which caused other problems so I ended up 
> pointing to the testing stuff on the net - both successful source forge 
> installs fail with apache-ssl not liking the config file.
>
>
> modules loaded by apache-ssl:
>
>
> #
> # Dynamic Shared Object (DSO) Support
> #
> # To be able to use the functionality of a module which was built as a DSO you
> # have to place corresponding `LoadModule' lines at this location so the
> # directives contained in it are actually available _before_ they are used.
> # Please read the file README.DSO in the Apache 1.3 distribution for more
> # details about the DSO mechanism and run `apache -l' for the list of already
> # built-in (statically linked and thus always available) modules in your 
> apache
> # binary.
> #
> # Please keep this LoadModule: line here, it is needed for installation.
> LoadModule vhost_alias_module /usr/lib/apache/1.3/mod_vhost_alias.so
> LoadModule env_module /usr/lib/apache/1.3/mod_env.so
> LoadModule config_log_module /usr/lib/apache/1.3/mod_log_config_ssl.so
> LoadModule mime_magic_module /usr/lib/apache/1.3/mod_mime_magic.so
> LoadModule mime_module /usr/lib/apache/1.3/mod_mime_ssl.so
> LoadModule negotiation_module /usr/lib/apache/1.3/mod_negotiation.so
> LoadModule status_module /usr/lib/apache/1.3/mod_status.so
> # LoadModule info_module /usr/lib/apache/1.3/mod_info.so
> # LoadModule includes_module /usr/lib/apache/1.3/mod_include.so
> LoadModule autoindex_module /usr/lib/apache/1.3/mod_autoindex.so
> LoadModule dir_module /usr/lib/apache/1.3/mod_dir.so
> LoadModule cgi_module /usr/lib/apache/1.3/mod_cgi.so
> # LoadModule asis_module /usr/lib/apache/1.3/mod_asis.so
> # LoadModule imap_module /usr/lib/apache/1.3/mod_imap.so
> # LoadModule action_module /usr/lib/apache/1.3/mod_actions.so
> # LoadModule speling_module /usr/lib/apache/1.3/mod_speling.so
> LoadModule userdir_module /usr/lib/apache/1.3/mod_userdir.so
> LoadModule alias_module /usr/lib/apache/1.3/mod_alias.so
> LoadModule rewrite_module /usr/lib/apache/1.3/mod_rewrite.so
> LoadModule access_module /usr/lib/apache/1.3/mod_access.so
> LoadModule auth_module /usr/lib/apache/1.3/mod_auth_ssl.so
> # LoadModule anon_auth_module /usr/lib/apache/1.3/mod_auth_anon.so
> # LoadModule dbm_auth_module /usr/lib/apache/1.3/mod_auth_dbm.so
> # LoadModule db_auth_module /usr/lib/apache/1.3/mod_auth_db.so
> # LoadModule proxy_module /usr/lib/apache/1.3/libproxy.so
> # LoadModule digest_module /usr/lib/apache/1.3/mod_digest.so
> # LoadModule cern_meta_module /usr/lib/apache/1.3/mod_cern_meta.so
> LoadModule expires_module /usr/lib/apache/1.3/mod_expires.so
> # LoadModule headers_module /usr/lib/apache/1.3/mod_headers.so
> # LoadModule usertrack_module /usr/lib/apache/1.3/mod_usertrack.so
> LoadModule unique_id_module /usr/lib/apache/1.3/mod_unique_id.so
> LoadModule setenvif_module /usr/lib/apache/1.3/mod_setenvif.so
> # LoadModule sys_auth_module /usr/lib/apache/1.3/mod_auth_sys.so
> # LoadModule put_module /usr/lib/apache/1.3/mod_put.so
> # LoadModule throttle_module /usr/lib/apache/1.3/mod_throttle.so
> LoadModule apache_ssl_module /usr/lib/apache/1.3/libssl.so
> # LoadModule allowdev_module /usr/lib/apache/1.3/mod_allowdev.so
> # LoadModule eaccess_module /usr/lib/apache/1.3/mod_eaccess.so
> LoadModule php4_module /usr/lib/apache/1.3/libphp4.so
> # LoadModule roaming_module /usr/lib/apache/1.3/mod_roaming.so
>
>
> contents of /etc/sourceforge/sf-httpd.conf:
>
> # This file is auto-generated -- Do not edit
> # Edit /etc/sourceforge/sourceforge.conf
> # and run sourceforge-config
>
> <Directory /usr/lib/sourceforge/www>
>   Options Indexes FollowSymlinks
>   AllowOverride All
>   order allow,deny
>   allow from all
>   php_admin_value include_path "/usr/lib/sourceforge/www/include:."
> </Directory>
>
> <Files .htaccess>
>   order allow,deny
>   deny from all
> </Files>
>
> <IfModule mod_ssl.c>
>   Listen 80
>   Listen 443
> </IfModule>
>
> NameVirtualHost 192.168.168.101
>
> <VirtualHost 192.168.168.101>
>   ServerName cockroach.invoqsystems.com
>   ServerAdmin address@hidden
>   DocumentRoot /usr/lib/sourceforge/www
>   DirectoryIndex index.html index.php
>   UserDir disabled
>
>   <Directory /usr/lib/sourceforge/www>
>     Include /etc/sourceforge/sf-httpd.secrets
>   </Directory>
>
>   # Debian Sourceforge without the DNS delegation
>   # Project home pages are in a virtual /www/<group> location
>   AliasMatch ^/www/([^/]*)/(.*) 
> /var/lib/sourceforge/chroot/home/groups/$1/htdocs/$2
>   ScriptAliasMatch ^/([^/]*)/cgi-bin/(.*) 
> /var/lib/sourceforge/chroot/home/groups/$1/cgi-bin/$2
>   <Directory /var/lib/sourceforge/chroot/home/groups>
>     Options Indexes FollowSymlinks
>       AllowOverride All
>       order allow,deny
>       allow from all
>     </Directory>
>
>   # This for cvsweb
>   ScriptAlias /cgi-bin/ /usr/lib/sourceforge/cgi-bin/
> </VirtualHost>
>
> <VirtualHost 192.168.168.101>
>   ServerName cvs.cockroach.invoqsystems.com
>   DocumentRoot /usr/lib/sourceforge/cvs
>   ScriptAlias /cgi-bin/ /usr/lib/sourceforge/cgi-bin/
>   Alias /cvstarballs/ /var/lib/sourceforge/cvstarballs/
> </VirtualHost>
>
> <VirtualHost 192.168.168.101>
>   ServerName download.cockroach.invoqsystems.com
>   DocumentRoot /var/lib/sourceforge/download
> </VirtualHost>
>
> <VirtualHost 192.168.168.101>
>   ServerName lists.cockroach.invoqsystems.com
>   AddHandler cgi-script .cgi
>
>   ScriptAlias /mailman/ /usr/lib/mailman/cgi-bin/
>
>   Alias /pipermail /var/lib/mailman/archives/public
>   <Directory /var/lib/mailman/archives/public>
>     AllowOverride Options
>     Options FollowSymLinks
>   </Directory>
>
>   Alias /doc/mailman/images /usr/share/doc/mailman/images
>   <Location /doc/mailman/images>
>     order allow,deny
>     allow from all
>   </Location>
>
>   RedirectMatch permanent ^/$ 
> http://lists.cockroach.invoqsystems.com/cgi-bin/mailman/listinfo
> </VirtualHost>
>
> <VirtualHost 192.168.168.101:443>
>   ServerName cockroach.invoqsystems.com
>   ServerAdmin address@hidden
>   DocumentRoot /usr/lib/sourceforge/www
>   DirectoryIndex index.html index.php
>   UserDir disabled
>
>   <IfModule mod_ssl.c>
>     SSLEngine on
>     SSLCertificateFile /etc/apache/ssl.crt/server.crt
>     SSLCertificateKeyFile /etc/apache/ssl.key/server.key
>     <Files ~ "\.(cgi|shtml)$">
>       SSLOptions +StdEnvVars
>     </Files>
>     <Directory "/usr/lib/cgi-bin">
>       SSLOptions +StdEnvVars
>     </Directory>
>     SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
>   </IfModule>
>
>   <Directory /usr/lib/sourceforge/www>
>     Include /etc/sourceforge/sf-httpd.secrets
>   </Directory>
>
>   # This for cvsweb
>   ScriptAlias /cgi-bin/ /usr/lib/sourceforge/cgi-bin/
> </VirtualHost>
>
> # This is magic for virtual hosting!
> UseCanonicalName Off
> # This example is so beautiful that I keep it
> # And can be used in a better way e.g. creating a cvs directory by group
> <VirtualHost 192.168.168.101>
>         ServerName cvs.cockroach.invoqsystems.com
>         ServerAlias cvs.*.cockroach.invoqsystems.com
>         DocumentRoot /var/lib/sourceforge/chroot/home/groups/
>         VirtualDocumentRoot /var/lib/sourceforge/chroot/home/groups/%2/htdocs
>         VirtualScriptAlias /var/lib/sourceforge/chroot/home/groups/%2/cgi-bin
>         # VirtualDocumentRoot /var/lib/sourceforge/chroot/home/groups/%2/cvs
>         # VirtualScriptAlias /var/lib/sourceforge/cgi-bin
>         <Directory /var/lib/sourceforge/chroot/home/groups>
>                 Options Indexes FollowSymlinks
>                 AllowOverride All
>                 order allow,deny
>                 allow from all
>         </Directory>
> </VirtualHost>
>
> #This may be used
> #ServerPath /sub1/
> #RewriteEngine On
> #RewriteRule ^(/sub1/.*) /www/subdomain$1
>
> <VirtualHost 192.168.168.101>
>         ServerName cockroach.invoqsystems.com
>         ServerAlias *.cockroach.invoqsystems.com
>         VirtualDocumentRoot /var/lib/sourceforge/chroot/home/groups/%1/htdocs
>         VirtualScriptAlias /var/lib/sourceforge/chroot/home/groups/%1/cgi-bin
>         <Directory /var/lib/sourceforge/chroot/home/groups>
>                Options Indexes FollowSymlinks
>                AllowOverride All
>                order allow,deny
>                allow from all
>        </Directory>
> </VirtualHost>

Roland.
-- 
Roland Mas

Mou ichido !  Hayaku !  Ookii koede !
  -- Atsuko Sasaki