Apache 2.2.0 with SSL on AIX 5.3



I have been unable to get Apache 2.2.0 with SSL running on AIX 5.3.
This is from "httpd -V"...

Server version: Apache/2.2.0
Server built: Mar 28 2006 11:28:41
Server's Module Magic Number: 20051115:0
Architecture: 32-bit
Server MPM: Prefork
threaded: no
forked: yes (variable process count)
Server compiled with....
-D APACHE_MPM_DIR="server/mpm/prefork"
-D APR_HAS_SENDFILE
-D APR_HAS_MMAP
-D APR_HAVE_IPV6 (IPv4-mapped addresses enabled)
-D APR_USE_SYSVSEM_SERIALIZE
-D APR_USE_PTHREAD_SERIALIZE
-D SINGLE_LISTEN_UNSERIALIZED_ACCEPT
-D APR_HAS_OTHER_CHILD
-D AP_HAVE_RELIABLE_PIPED_LOGS
-D DYNAMIC_MODULE_LIMIT=128
-D HTTPD_ROOT="/usr/local/apache2"
-D SUEXEC_BIN="/usr/local/apache2/bin/suexec"
-D DEFAULT_PIDLOG="logs/httpd.pid"
-D DEFAULT_SCOREBOARD="logs/apache_runtime_status"
-D DEFAULT_LOCKFILE="logs/accept.lock"
-D DEFAULT_ERRORLOG="logs/error_log"
-D AP_TYPES_CONFIG_FILE="conf/mime.types"
-D SERVER_CONFIG_FILE="conf/httpd.conf"

....I compiled with...

env CC=gcc CCC=g++ ./configure --enable-mods-shared=most
--enable-ssl=shared --with-ssl=/usr/local/ssl
--with-berkeley-db=/usr/local/BerkeleyDB.4.3

....then...

gmake
gmake install

....to build and install. When I run "apachectl start" with debug
logging I get...

[Tue Mar 28 13:33:42 2006] [info] Init: Seeding PRNG with 136 bytes of
entropy
[Tue Mar 28 13:33:42 2006] [info] Loading certificate & private key of
SSL-aware server
[Tue Mar 28 13:33:42 2006] [info] Init: Requesting pass phrase via
builtin terminal dialog
[Tue Mar 28 13:33:47 2006] [debug] ssl_engine_pphrase.c(475): encrypted
RSA private key - pass phrase requested
[Tue Mar 28 13:33:47 2006] [info] Init: Wiped out the queried pass
phrases from memory
[Tue Mar 28 13:33:47 2006] [info] Init: Generating temporary RSA
private keys (512/1024 bits)
[Tue Mar 28 13:33:47 2006] [info] Init: Generating temporary DH
parameters (512/1024 bits)
[Tue Mar 28 13:33:47 2006] [info] Init: Initializing (virtual) servers
for SSL
[Tue Mar 28 13:33:47 2006] [info] Configuring server for SSL protocol
[Tue Mar 28 13:33:47 2006] [debug] ssl_engine_init.c(405): Creating new
SSL context (protocols: SSLv2, SSLv3, TLSv1)
[Tue Mar 28 13:33:47 2006] [debug] ssl_engine_init.c(601): Configuring
permitted SSL ciphers
[ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL]
[Tue Mar 28 13:33:47 2006] [debug] ssl_engine_init.c(729): Configuring
RSA server certificate
[Tue Mar 28 13:33:47 2006] [warn] RSA server certificate is a CA
certificate (BasicConstraints: CA == TRUE !?)
[Tue Mar 28 13:33:47 2006] [warn] RSA server certificate CommonName
(CN) `myserver.com' does NOT match server name!?
[Tue Mar 28 13:33:47 2006] [debug] ssl_engine_init.c(768): Configuring
RSA server private key
[Tue Mar 28 13:33:47 2006] [info] Server: Apache/2.2.0, Interface:
mod_ssl/2.2.0, Library: OpenSSL/0.9.8a

....which looks okay, but Apache seems to crash and never starts
listening. I only get the following in the logs directory...

access_log error_log ssl_request_log

....the only modifications I made to the configuration files is to
change the listening port to 8080, because I have an older Apache
listening on 80, and uncommenting the line that imports the SSL
configuration file in the extras directory. Also, I created a key and
self-signed certificate with OpenSSL before running.

Any ideas why Apache is crashing silently? Is there another way to try
to determine the cause of the crash?

Thanks,
Bernie

.



Relevant Pages

  • RE: php4
    ... Mod_php4 only gets loaded if you define SSL. ... Of course I restarted apache after the install... ... # Based upon the NCSA server configuration files originally by Rob McCool. ... Not all browsers support this. ...
    (freebsd-newbies)
  • RE: php4
    ... Mod_php4 only gets loaded if you define SSL. ... Of course I restarted apache after the install... ... # Based upon the NCSA server configuration files originally by Rob McCool. ... Not all browsers support this. ...
    (freebsd-questions)
  • now SSL and ids ( was Re: ssh and ids )
    ... > How many simultaneous SSL sessions can be tracked? ... qualifies as a third party having access to the private key. ... communicate with the server in the clear. ... > best protection against covert channels is to stop the attacker before ...
    (Focus-IDS)
  • Trouble configuring SSL on apache 2.0.59 Win32
    ... I was running Apache 2.0.55 fine without mod_ssl or openssl but upgraded to ... I have apache running with server name localhost:80. ... I have generated my private key and self signed certificate using ...
    (comp.infosystems.www.servers.unix)
  • Re: apache question
    ... # Based upon the NCSA server configuration files originally by Rob McCool. ... # configuration directives that give the server its instructions. ... Directives that control the operation of the Apache server process as ...
    (alt.php)

Loading