Проблема с апачем при работе по HTTP (80) и HTTPS (443)

[Dark_Sarmat]

ОС Debian 4
Апач 2,2,3

Проблема в следующем, был прикручен мод SSL. Настройки дефолтовые. Но апач постоянно при запуске материться вот так:

Forcing reload of web server (apache2)...[Thu Sep 11 11:27:50 2008] [error] VirtualHost 192.168.125.3:443 -- mixing * ports and non-* ports with a NameVirtualHost address is not supported, proceeding with undefined results
waiting [Thu Sep 11 11:27:53 2008] [error] VirtualHost 192.168.125.3:443 -- mixing * ports and non-* ports with a NameVirtualHost address is not supported, proceeding with undefined results
.

Дальше, проблема такая перестал работать mod_rewrite хотя он подключен
Из всех сконфигурированных хостов работает только default и Host 1 т.е. host 1 на порту 443 а default на 80. Если зайти по адресу прописанному в HOST2 то попадаеш на default а при открытии сайта HOST3 то вообще выбивает 403 ошибку и все.

Forbidden

You don't have permission to access / on this server.
Apache Server at independent.lan Port 80

Помогите разрулить эти пропроблемы.

Выкладываю конфиги:

Виртуальные хочты:
default

Код: Выделить всё

#ServerName server1.independent.lan
#Listen 192.168.125.3
NameVirtualHost 192.168.125.3
<VirtualHost 192.168.125.3>
	ServerAdmin webmaster@localhost
	
	DocumentRoot /var/www/
	<Directory />
		Options FollowSymLinks
		AllowOverride None
	</Directory>
	<Directory /var/www/>
		Options Indexes FollowSymLinks MultiViews
	AllowOverride None
		Order allow,deny
		allow from all
		# This directive allows us to have apache2's default start page
                # in /apache2-default/, but still have / go to the right place
#                RedirectMatch ^/$ /apache2-default/
	</Directory>

	ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
	<Directory "/usr/lib/cgi-bin">
		AllowOverride None
		Options ExecCGI -MultiViews +SymLinksIfOwnerMatch
		Order allow,deny
		Allow from all
	</Directory>

	ErrorLog /var/log/apache2/error.log

	# Possible values include: debug, info, notice, warn, error, crit,
	# alert, emerg.
	LogLevel warn

	CustomLog /var/log/apache2/access.log combined
	ServerSignature On

#    Alias /doc/ "/usr/share/doc/"
#    <Directory "/usr/share/doc/">
#        Options Indexes MultiViews FollowSymLinks
#        AllowOverride None
#        Order deny,allow
#        Deny from all
#        Allow from 127.0.0.0/255.0.0.0 ::1/128
#    </Directory>

</VirtualHost>

HOST1

Код: Выделить всё

<VirtualHost 192.168.125.3:443>
DocumentRoot "/usr/abills/cgi-bin"
ServerName billing.independent.lan:443
#ServerAdmin admin@example.com
ErrorLog /usr/abills/var/log/abills-error.log
TransferLog /usr/abills/var/log/abills-access.log 
CustomLog /usr/abills/var/log/abills-access_log common

<IfModule ssl_module>
  #   SSL Engine Switch:
  #   Enable/Disable SSL for this virtual host.
  SSLEngine on
  SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
  SSLCertificateFile /usr/abills/Certs/server.crt
  SSLCertificateKeyFile /usr/abills/Certs/server.key
  <FilesMatch "\.(cgi)$">
    SSLOptions +StdEnvVars
  </FilesMatch>
  BrowserMatch ".*MSIE.*" \
         nokeepalive ssl-unclean-shutdown \
         downgrade-1.0 force-response-1.0

  CustomLog /var/log/abills-ssl_request.log \
          "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</IfModule>


# User interface
<Directory "/usr/abills/cgi-bin">
  <IfModule ssl_module>  
    SSLOptions +StdEnvVars
  </IfModule> 

  <IfModule mod_rewrite.c>
    RewriteEngine on
    RewriteCond %{HTTP:Authorization} ^(.*)
    RewriteRule ^(.*) - [E=HTTP_CGI_AUTHORIZATION:%1]
    Options Indexes ExecCGI SymLinksIfOwnerMatch
  </IfModule>

  AddHandler cgi-script .cgi
  Options Indexes ExecCGI FollowSymLinks
  AllowOverride none
  DirectoryIndex index.cgi
  Order allow,deny
  Allow from all

  <Files ~ "\.(db|log)$">
    Order allow,deny
    Deny from all
  </Files>

#For hotspot solution
ErrorDocument 404 "/abills/"
directoryIndex "/abills" index.cgi

</Directory>

#Admin interface
<Directory "/usr/abills/cgi-bin/admin">
  <IfModule ssl_module>
    SSLOptions +StdEnvVars
  </IfModule>
  
  AddHandler cgi-script .cgi
  Options Indexes ExecCGI FollowSymLinks
  AllowOverride none
  DirectoryIndex index.cgi
  order deny,allow
  allow from all
</Directory>

</VirtualHost>

HOST2

Код: Выделить всё

ServerName server1.control.lan
<VirtualHost 192.168.125.3>
ServerAdmin support@independent-lan.com
#
#<IfModule mod_rewrite.c>
#RewriteEngine on
#RewriteCond %{HTTP:Authorization} ^(.*)
#</IfModule>

DocumentRoot /server/hosting/cs1.lan/www/
#ServerAlias *.server1.control.lan:80
<Directory "/server/hosting/cs1.lan/www/">
#AllowOverride None
Order allow,deny
Allow from all
Options +Indexes
</Directory>

ScriptAlias /cgi-bin/ /server/hosting/cs1.lan/cgi-bin/
<Directory "/server/hosting/cs1.lan/cgi-bin/">
AllowOverride None
#Options ExecCGI -MultiViews +SymLinksIfOwnerMatch
Order allow,deny
Allow from all
</Directory>

ErrorLog /server/hosting/cs1.lan/error.log

</VirtualHost>

HOST3

Код: Выделить всё

<VirtualHost 192.168.125.3>
ServerAdmin support@independent-lan.com
DocumentRoot /server/hosting/independent.lan/www/
ServerName independent.lan
ServerAlias *.independent.lan
<Directory "/server/hosting/independent.lan/www/">
#AllowOverride None
Order allow,deny
Allow from all
Options +Indexes
</Directory>

ScriptAlias /cgi-bin/ /server/hosting/independent.lan/cgi-bin/
<Directory "/server/hosting/independent.lan/cgi-bin/">
AllowOverride None
#Options ExecCGI -MultiViews +SymLinksIfOwnerMatch
Order allow,deny
Allow from all
</Directory>

ErrorLog /server/hosting/independent.lan/error.log

</VirtualHost>

ports.conf

Код: Выделить всё

Listen 192.168.125.3:80
Listen 192.168.125.3:443
Listen 127.0.0.1:80

[IceMan]

Код: Выделить всё

<VirtualHost 192.168.125.3>
<VirtualHost 192.168.125.3:443>

Нужно

Код: Выделить всё

<VirtualHost 192.168.125.3:80>
...
Listen 80
Listen 443

Часть этого уже может быть прописана в настройках mod_ssl.

[Dark_Sarmat]

что именно может быть там прописано?

у меня вот что в конфиге:

Код: Выделить всё

<IfModule mod_ssl.c>
#
# Pseudo Random Number Generator (PRNG):
# Configure one or more sources to seed the PRNG of the SSL library.
# The seed data should be of good random quality.
# WARNING! On some platforms /dev/random blocks if not enough entropy
# is available. This means you then cannot use the /dev/random device
# because it would lead to very long connection times (as long as
# it requires to make more entropy available). But usually those
# platforms additionally provide a /dev/urandom device which doesn't
# block. So, if available, use this one instead. Read the mod_ssl User
# Manual for more details.
#
SSLRandomSeed startup builtin
SSLRandomSeed startup file:/dev/urandom 512
SSLRandomSeed connect builtin
SSLRandomSeed connect file:/dev/urandom 512

##
##  SSL Global Context
##
##  All SSL configuration in this context applies both to
##  the main server and all SSL-enabled virtual hosts.
##

#
#   Some MIME-types for downloading Certificates and CRLs
#
AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl    .crl

#   Pass Phrase Dialog:
#   Configure the pass phrase gathering process.
#   The filtering dialog program (`builtin' is a internal
#   terminal dialog) has to provide the pass phrase on stdout.
SSLPassPhraseDialog  builtin

#   Inter-Process Session Cache:
#   Configure the SSL Session Cache: First the mechanism 
#   to use and second the expiring timeout (in seconds).
#SSLSessionCache         dbm:/var/run/apache2/ssl_scache
SSLSessionCache        shmcb:/var/run/apache2/ssl_scache(512000)
SSLSessionCacheTimeout  300

#   Semaphore:
#   Configure the path to the mutual exclusion semaphore the
#   SSL engine uses internally for inter-process synchronization. 
SSLMutex  file:/var/run/apache2/ssl_mutex
</IfModule>

<VirtualHost 192.168.125.3:80>
...
Listen 80
Listen 443

Не катит апач ругается. ему или VirtualHost 192.168.125.3:80 или вообще никак.

[IceMan]

Не катит апач ругается. ему или VirtualHost 192.168.125.3:80 или вообще никак.

Как ругается? Матом что ли?

[Dark_Sarmat]

Все, уже разрулил. Правда сам не понял как

[anton]

Все, уже разрулил. Правда сам не понял как

в следующий раз можеш воспользоваться еще и уровнем логгирования DEBUG

[MblKiTA]

Не поддерживает apache NameVirualHost для ssl.

Name-based virtual hosting cannot be used with SSL secure servers because of the nature of the SSL protocol.
http://httpd.apache.org/docs/1.3/vhosts/name-based.html

[Dark_Sarmat]

а ты попробуй апач посвежее поставить

[Llama]

Dark_Sarmat, со времен apache 1.3 никаких изменений в спеки https на этот счет не вносилось. Один IP-адрес == один https-сайт.

[IceMan]

Это можно частично обойти используя mod_gnutls. Работает со многими современными бродилками.