I want https for squirrelmail
I have apache 2 set up
I have setup the keys
In httpd.conf I am bit confused from all the documentation out there how I get certificate exchange to take place. Can anyone give me code for this??

I have

#SSLEngine on
#SSLCertificateFile /etc/httpd/conf/ssl.crt/server.crt
#SSLCertificateKeyFile /etc/httpd/conf/ssl.key/server.key

but not sure where to place it in the file.

on restarting the httpd service

Stopping httpd: [FAILED]
Starting httpd: Syntax error on line 1049 of /etc/httpd/conf/httpd.conf:
Invalid command 'SSLEngine', perhaps mis-spelled or defined by a module not included in the server configuration


Regards

See: http://www.squirrelmail.org/docs/adm...n-8.html#ss8.3

You can place all your SSL directives in your main httpd.conf file, or in a separate httpd-ssl.conf file, which you include in your httpd.conf file (to reduce clutter). Eg:

httpd.conf:
....
# Secure (SSL/TLS) connections
# simple mod_rewrite example
Include etc/httpd/httpd-ssl.conf

I have a regular http virtual host which re-directs to https:

httpd-vhosts.conf:
...
<VirtualHost *:80>
...
RewriteEngine on
RewriteCond %{HTTPS} !=on
RewriteRule .* https://%{HTTP_HOST}:443%{REQUEST_URI} [QSA,R=permanent,L]
...
</VirtualHost>

but you can use any of the methods suggested in the URL above.

The exchange happens automatically when a client connects to the HTTPS port - that's why there is a separate listener port (443 vs. 80). This happens behind the scenes once you have the HTTPS listener configured.

If SSLEngine is found to be invalid, check to be sure you have an SSL-compiled http daemon.