ERROR IN questions-site-multipleinstance-ssl.conf

53 views
Skip to first unread message

ingenierofelipeurrego

unread,
Aug 2, 2013, 1:34:34 PM8/2/13
to open...@googlegroups.com
Hi please tell me how fix it

I have in /home/mooc/askbot-openmooc/apache2/questions-site-multipleinstance-ssl.conf, this:

NameVirtualHost *:443
NameVirtualHost *:80


# COURSES_DIR
WSGISocketPrefix /home/mooc/sockets/wsgi
WSGIScriptAliasMatch /([^/]+) /home/mooc/courses/$1/django.wsgi
# With python 2.6
WSGIDaemonProcess openmooc user=mooc group=mooc processes=1 threads=10

# with python 2.7
#WSGIDaemonProcess openmooc user=mooc group=mooca processes=2 threads=1
WSGIProcessGroup openmooc


<VirtualHost *:80>
    Redirect permanent / https://questions.felipeurrego.com/
</VirtualHost>

<VirtualHost *:443>
    SSLEngine on
    SSLCertificateFile /home/mooc/saml2/certs/server.crt
    SSLCertificateKeyFile /home/mooc/saml2/certs/server.key

    SSLOptions StrictRequire
    SSLProtocol all -SSLv2

    # COURSES_DIR/MEDIA_ROOT
    AliasMatch ^/([^/]+)/upfiles/(.*)$ /home/mooc/courses/$1/upfiles/$2

    # STATIC_ROOT
    Alias /m/ /home/mooc/static_root/

    Alias /robots.txt /home/mooc/static_root/robots.txt
    Alias /favicon.ico /home/mooc/static_root/mooc/media/images/favicon.ico

    # LogLevel debug

    # MEDIA_ROOT
    <Directory /home/mooc/static_root/>
        Options -Indexes
        Order deny,allow
        Allow from all
    </Directory>

    RewriteEngine on
    RewriteRule ^/$ https://example.com/ [R]
    RewriteRule ^/favicon.ico /home/mooc/static_root/mooc/media/favicon.ico
    RewriteRule ^/robots.txt /home/mooc/static_root/robots.txt
    RewriteRule ^/m/(.*) /home/mooc/static_root/$1
    RewriteRule ^/([^/]+)$ /$1/ [R]
    RewriteRule ^/([^/]+)/users/([^/]+)/edit/$ https://idp.example.com/simplesaml/module.php/userregistration/reviewUser.php [R]

    #RewriteEngine on
    #RewriteRule ^/$ https://example.com/ [R]
    #RewriteRule ^/([^/]+)$ /$1/ [R]

    # COURSES_DIR
    <DirectoryMatch /home/mooc/courses/([^/]+)/django.wsgi>
        Options ExecCGI
        SetHandler wsgi-script
        Order allow,deny
        Allow from all
    </DirectoryMatch>

    # COURSES_DIR
    <DirectoryMatch /home/mooc/courses/([^/]+)/upfiles>
        Options -Indexes
        Order allow,deny
        Allow from all
    </DirectoryMatch>
</VirtualHost>

But this show me


Tnks for help




Sixto Martin

unread,
Aug 2, 2013, 2:19:36 PM8/2/13
to open...@googlegroups.com
The certificates that you are using:

    SSLCertificateFile /home/mooc/saml2/certs/server.crt
    SSLCertificateKeyFile /home/mooc/saml2/certs/server.key

are self-signed certificates.

The browser did not recognize them. You need to get valid certificates for your domain.



2013/8/2 ingenierofelipeurrego <ingenierof...@gmail.com>




--
You received this message because you are subscribed to the Google Groups "OpenMOOC" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openmooc+u...@googlegroups.com.
To post to this group, send email to open...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/openmooc/8856de59-12cb-434a-b2c8-aa67fc71e7fb%40googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.
 
 



--
Sixto Pablo Martín García
Ingeniero Informático
Yaco Sistemas SL
Teléfono +34 954 50 00 57
C/Rioja 5-1ª Planta
41001 Sevilla

ingenierofelipeurrego

unread,
Aug 2, 2013, 6:52:36 PM8/2/13
to open...@googlegroups.com
Hi but those certificates are godady, view attach
Or rename this "questions.felipeurrego.com.crt"
server.crt
server.key

Sixto Martin

unread,
Aug 5, 2013, 4:56:09 AM8/5/13
to open...@googlegroups.com
You shared the secret key so that cert is now insecure.  Anyone can decrypt the messages.  [Never share the .key file, you should have learned that on the school].

P.S Check the cert detail in your browser and review the cert detail (maybe apache is using an old cert and you may restart your apache server).

ingenierofelipeurrego

unread,
Aug 5, 2013, 1:32:41 PM8/5/13
to open...@googlegroups.com
Hi, is just a full demo enviroment, about shared, always rekey, but about your PS, i service httpd restart and nothing happend

Tnks

ingenierofelipeurrego

unread,
Aug 5, 2013, 3:49:32 PM8/5/13
to open...@googlegroups.com
It show me take idp.felipeurrego.com, not questions.felipeurrego.com

Help

Tnks

El lunes, 5 de agosto de 2013 03:56:09 UTC-5, Sixto Martin escribió:

ingenierofelipeurrego

unread,
Aug 5, 2013, 4:22:04 PM8/5/13
to open...@googlegroups.com
i see my conf fine, but explorer not

How fix it

Tnks

Sixto Martin

unread,
Aug 5, 2013, 5:05:18 PM8/5/13
to open...@googlegroups.com


El 05/08/2013 22:22, "ingenierofelipeurrego" <ingenierof...@gmail.com> escribió:
>
> i see my conf fine, but explorer not
>
> How fix it
>

No idea why the browser is showing the wrong cert. Something should be wrong... maybe some cache issue?

>>>>>> Tnks for help
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> --
>>>>>> You received this message because you are subscribed to the Google Groups "OpenMOOC" group.
>>>>>> To unsubscribe from this group and stop receiving emails from it, send an email to openmooc+u...@googlegroups.com.
>>>>>> To post to this group, send email to open...@googlegroups.com.
>>>>>> To view this discussion on the web visit https://groups.google.com/d/msgid/openmooc/8856de59-12cb-434a-b2c8-aa67fc71e7fb%40googlegroups.com.
>>>>>> For more options, visit https://groups.google.com/groups/opt_out.
>>>>>>  
>>>>>>  
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> Sixto Pablo Martín García
>>>>> Ingeniero Informático
>>>>> Yaco Sistemas SL
>>>>> Teléfono +34 954 50 00 57
>>>>> C/Rioja 5-1ª Planta
>>>>> 41001 Sevilla
>
> --
> You received this message because you are subscribed to the Google Groups "OpenMOOC" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to openmooc+u...@googlegroups.com.
> To post to this group, send email to open...@googlegroups.com.

> To view this discussion on the web visit https://groups.google.com/d/msgid/openmooc/350e1058-4a35-46fc-bb15-32613c7791d1%40googlegroups.com.

ingenierofelipeurrego

unread,
Aug 5, 2013, 5:14:43 PM8/5/13
to open...@googlegroups.com
Hi again, you can tell me if /home/mooc/askbot-openmooc/apache2/questions-site-multipleinstance-ssl.conf fine, and path is correct or where put it

Tnks
Reply all
Reply to author
Forward
0 new messages