[erlang-questions] httpd 13B - removed ssl_certificate_key_file option from configuration?
karol skocik
karol.skocik@REDACTED
Wed Apr 22 14:44:59 CEST 2009
Hi,
while testing the possibility to upgrade to 13B today, I have found
that our SSL server is not working - all inets SSL connections connect
to the server but nothing is received, the log shows this:
[22/Apr/2009:14:10:51 +0200] server crash for 192.168.1.100, reason:
"Error reading request:The client did not send the whole request
before theserver side timeout"
For local testing I use to add exception in firefox, but firefox can't
receive the certificate from the SSL server.
I can see in the 13B manual of httpd here: http://erlang.org/doc/man/httpd.html
that the ssl_certificate_key_file option is not mentioned there.
Our previously working httpd_ssl.config looks like this:
[{bind_address, {0, 0, 0, 0}},
{port, 9234},
{server_name, "localhost"},
{server_root, "priv/log/httpd"},
{document_root, "priv/htdocs/"},
{com_type, ssl},
{ssl_certificate_file, "priv/cert/site.crt"},
{http://erlang.org/doc/man/httpd.html, "priv/cert/site.key"},
{ssl_verify_client, 1},
{ssl_verify_depth, 2},
{ssl_ciphers, "DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:CAMELLIA256-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DES-CBC3-SHA:DES-CBC3-MD5:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:AES128-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:CAMELLIA128-SHA:IDEA-CBC-SHA:IDEA-CBC-MD5:RC2-CBC-MD5:RC4-SHA:RC4-MD5:RC4-MD5:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:DES-CBC-SHA:DES-CBC-MD5:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA:EXP-DES-CBC-SHA:EXP-RC2-CBC-MD5:EXP-RC2-CBC-MD5:EXP-RC4-MD5:EXP-RC4-MD5"},
{modules, [mod_disp_ssl, mod_get, mod_log]},
{directory_index, ["index.html"]},
{error_log, "httpd_ssl_error.log"},
{security_log, "httpd_ssl_security.log"},
{transfer_log, "httpd_ssl_transfer.log"}].
Anybody got any idea what's wrong, and how to fix that?
Thanks,
Karol
More information about the erlang-questions
mailing list