[erlang-questions] httpd 13B - removed ssl_certificate_key_file option from configuration?

karol skocik karol.skocik@REDACTED
Wed Apr 22 14:44:59 CEST 2009


Hi,
  while testing the possibility to upgrade to 13B today, I have found
that our SSL server is not working - all inets SSL connections connect
to the server but nothing is received, the log shows this:

 [22/Apr/2009:14:10:51 +0200] server crash for 192.168.1.100, reason:
"Error reading request:The client did not send the whole request
before theserver side timeout"

For local testing I use to add exception in firefox, but firefox can't
receive the certificate from the SSL server.
I can see in the 13B manual of httpd here: http://erlang.org/doc/man/httpd.html
that the ssl_certificate_key_file option is not mentioned there.

Our previously working httpd_ssl.config looks like this:

[{bind_address, {0, 0, 0, 0}},
 {port, 9234},
 {server_name, "localhost"},
 {server_root, "priv/log/httpd"},
 {document_root, "priv/htdocs/"},
 {com_type, ssl},
 {ssl_certificate_file, "priv/cert/site.crt"},
 {http://erlang.org/doc/man/httpd.html, "priv/cert/site.key"},
 {ssl_verify_client, 1},
 {ssl_verify_depth, 2},
 {ssl_ciphers, "DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:CAMELLIA256-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DES-CBC3-SHA:DES-CBC3-MD5:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:AES128-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:CAMELLIA128-SHA:IDEA-CBC-SHA:IDEA-CBC-MD5:RC2-CBC-MD5:RC4-SHA:RC4-MD5:RC4-MD5:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:DES-CBC-SHA:DES-CBC-MD5:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA:EXP-DES-CBC-SHA:EXP-RC2-CBC-MD5:EXP-RC2-CBC-MD5:EXP-RC4-MD5:EXP-RC4-MD5"},
 {modules, [mod_disp_ssl, mod_get, mod_log]},
 {directory_index, ["index.html"]},
 {error_log, "httpd_ssl_error.log"},
 {security_log, "httpd_ssl_security.log"},
 {transfer_log, "httpd_ssl_transfer.log"}].

Anybody got any idea what's wrong, and how to fix that?

Thanks,
  Karol



More information about the erlang-questions mailing list