LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 02-17-2014, 04:58 PM   #1
mtlhd
Member
 
Registered: Sep 2007
Location: Ohio
Distribution: Raspbian, Debian, CentOS, Ubuntu
Posts: 131

Rep: Reputation: 18
Unhappy SSL timing out to outside world - works on LAN. (RHEL,APACHE)


Hello all,

For the life of me I can not figure out where I have gone wrong in this setup.
I installed the certs from the providers like I was instructed.
My server serves SSL on the LAN with no issue or warning, but outside it times out.
Web services that check for SSL certs told me I did not have one at all.

I do know that port 443 is open.

here are my configs:

httpd.conf:
Code:
<VirtualHost *:80>
        ServerName sub.domain.com
        Redirect permanent / https://sub.domain.com
</VirtualHost>
the ssl.conf is included at the foot of the httpd.conf
Code:
LoadModule ssl_module modules/mod_ssl.so

Listen 443

AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl    .crl

SSLPassPhraseDialog  builtin

SSLSessionCache         shmcb:/var/cache/mod_ssl/scache(512000)
SSLSessionCacheTimeout  300

SSLMutex default

SSLRandomSeed startup file:/dev/urandom  256
SSLRandomSeed connect builtin

SSLCryptoDevice builtin

<VirtualHost sub.domain.com:443>

DocumentRoot "/path/to/domain/"
ServerName sub.domain.com:443

SSLEngine on

SSLProtocol all -SSLv2

SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW

SSLCertificateFile /path/to/crt
SSLCertificateKeyFile /path/to/key
SSLCertificateChainFile /path/to/intermediate

</VirtualHost>
Am I missing something?

Thanks in advance.

-mtlhd

Last edited by mtlhd; 02-17-2014 at 05:01 PM.
 
Old 02-17-2014, 06:47 PM   #2
gotfw
Member
 
Registered: Jan 2007
Posts: 416

Rep: Reputation: 70
Maybe try doing a reverse lookup on your sub.domain.com ip address and changing your config to either

111.222.333.444:80/443

or

sub.comain.com:80/443

Whatever your server cert returns.

Been a while since I had my head into apache conf's but maybe worth looking at.

P.S.; I am presuming you've already ensured that there is not a firewall ruleset somewhere that's blocking your connections.

Last edited by gotfw; 02-17-2014 at 06:49 PM.
 
1 members found this post helpful.
Old 02-18-2014, 10:07 AM   #3
mtlhd
Member
 
Registered: Sep 2007
Location: Ohio
Distribution: Raspbian, Debian, CentOS, Ubuntu
Posts: 131

Original Poster
Rep: Reputation: 18
horrible...

Thank you for the reply,

after much research, much to my dismay, I discovered the port was indeed closed in the firewall. I was told it was open but that's what I get for assuming the info was correct.
Sorry to waste time!

-mtlhd
 
Old 02-18-2014, 10:23 AM   #4
gotfw
Member
 
Registered: Jan 2007
Posts: 416

Rep: Reputation: 70
Np. Glad you got it sorted.
 
  


Reply

Tags
apache, rhel, ssl, timeout


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] ssl.conf and multiple ssl certificastes on Apache kaoticsnow Linux - Server 22 04-08-2010 11:52 PM
SSL works on LAN, not WAN? belorion Linux - Software 2 08-08-2004 04:33 PM
Apache/SSL - works with Windows client but not Linux client RickHDYoung Linux - Security 1 07-01-2004 04:02 PM
using apache in redhat 9, works through lan but... ilyash Linux - Software 6 10-21-2003 09:34 PM
Apache works on local machine, not LAN lanzdale Linux - Software 3 09-02-2003 09:16 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 09:43 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration