LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 07-19-2010, 05:50 AM   #1
Joshwaaa
LQ Newbie
 
Registered: Oct 2004
Posts: 20

Rep: Reputation: 0
secure administrator login only - https/ssl - help plz


Hi All,

Centos 5.5
httpd 2.2.3
mod_ssl 2.2.3
joomla 1.5.18

I have created a Joomla! website on a subdomin that I host. The site has a mangement section (http://sub-domain.website/administrator/) and I am trying to secure the administrator section only using SSL/https.

So far I created the self-signed certificate and installed mod_ssl. I have added a *:443 virtual hosts in my httpd conf like the following:

<VirtualHost *:443>
SSLEngine on
SSLCertificateFile /dir/.../ca.crt
SSLCertificateKeyFile /dir/.../ca.key
<Directory /var/www/html/sub-domain/website/administrator>
AddHandler php-script php
AddType text/html php
SSLRequireSSL
</Directory>
DocumentRoot /var/www/html/sub-domain/website/administrator
ServerName sub-domain.website.com
</VirtualHost>

The http version of the adminstrator (http://sub-domain.website.com/administator) works fine. ( ill try do a rewrite to https later).

However, when surfing to the https version (https://sub-domain.website.com/adminstrator) I get the confirm security exception for https (looks like ssl is working) and then after accepting I get a 404 page not found error....

This is really confusing me because the page exists, it works for http and https is just another protocol. Its almost like ssl does not have permission to access those files... Is there something im missing in ssl.conf or http.conf?

I am not entirely sure I am going about this the right way. If anyone has any suggestions, areas I could look at , or point me in the write direction, that would be greatly appreciated

I had a quick search through the joomla forums and found lots of errors, but not really any instructions. I have done some google searches and there seems to be about 10 different ways to skin the cat.

Anyone have any experince doing this with apache/httpd/mod_ssl?

If you require any further information. please let me know.

cheers,

Joshwaaa

Last edited by Joshwaaa; 07-19-2010 at 05:52 AM.
 
Old 07-19-2010, 07:35 AM   #2
bathory
LQ Guru
 
Registered: Jun 2004
Location: Piraeus
Distribution: Slackware
Posts: 13,043

Rep: Reputation: 1956Reputation: 1956Reputation: 1956Reputation: 1956Reputation: 1956Reputation: 1956Reputation: 1956Reputation: 1956Reputation: 1956Reputation: 1956Reputation: 1956
Hi,

The DocumentRoot for the SSL server is /var/www/html/sub-domain/website/administrator, according to the vhost configuration posted.
So when you request https://sub-domain.website.com/adminstrator, it looks for /var/www/html/sub-domain/website/administrator/administrator, that's why you get a 404 error.

Regards
 
1 members found this post helpful.
Old 07-21-2010, 04:02 AM   #3
Joshwaaa
LQ Newbie
 
Registered: Oct 2004
Posts: 20

Original Poster
Rep: Reputation: 0
Thanks Bathory, you are correct. It was looking for admin/admin...

I have correct the error and it is working great

Cheers,

Joshwaaa
 
Old 07-21-2010, 05:02 AM   #4
Jalindar
LQ Newbie
 
Registered: Feb 2010
Posts: 14

Rep: Reputation: 0
Tips for System Administrator

Please tell me important things, which every system administrator must know and basic security tips for (Redhat) server administration.

--Jalindar
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
SSL Certificate and PKI question, secure HTTPS connection, mail encription Rostfrei Linux - Security 2 07-28-2008 02:20 AM
Reset Sun Secure Global Desktop Administrator password ? txn Solaris / OpenSolaris 0 03-12-2008 02:53 PM
Setting up secure access to https helpme0904 Linux - Newbie 2 07-13-2005 04:08 PM
Secure email (SSL vs. secure authentication) jrdioko Linux - Newbie 2 11-28-2004 01:39 PM
Apache2, SSL, HTTPS... KneeLess Debian 3 09-02-2004 09:44 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 05:43 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration