Hi All,
Centos 5.5
httpd 2.2.3
mod_ssl 2.2.3
joomla 1.5.18
I have created a Joomla! website on a subdomin that I host. The site has a mangement section (
http://sub-domain.website/administrator/) and I am trying to secure the administrator section only using SSL/https.
So far I created the self-signed certificate and installed mod_ssl. I have added a *:443 virtual hosts in my httpd conf like the following:
<VirtualHost *:443>
SSLEngine on
SSLCertificateFile /dir/.../ca.crt
SSLCertificateKeyFile /dir/.../ca.key
<Directory /var/www/html/sub-domain/website/administrator>
AddHandler php-script php
AddType text/html php
SSLRequireSSL
</Directory>
DocumentRoot /var/www/html/sub-domain/website/administrator
ServerName sub-domain.website.com
</VirtualHost>
The http version of the adminstrator (
http://sub-domain.website.com/administator) works fine. ( ill try do a rewrite to https later).
However, when surfing to the https version (
https://sub-domain.website.com/adminstrator) I get the confirm security exception for https (looks like ssl is working) and then after accepting I get a 404 page not found error....
This is really confusing me because the page exists, it works for http and https is just another protocol. Its almost like ssl does not have permission to access those files... Is there something im missing in ssl.conf or http.conf?
I am not entirely sure I am going about this the right way. If anyone has any suggestions, areas I could look at , or point me in the write direction, that would be greatly appreciated
I had a quick search through the joomla forums and found lots of errors, but not really any instructions. I have done some google searches and there seems to be about 10 different ways to skin the cat.
Anyone have any experince doing this with apache/httpd/mod_ssl?
If you require any further information. please let me know.
cheers,
Joshwaaa