RootForum Community

z.B. das SSL-Modul überhaupt ordentlich geladen?

anfangen würd ich mit den berechtigungen der index.php und vom fcgi-starter

myserv:/etc/apache2 # vi confixx_mhost.conf
# a backup of the file.
#
# If you need to modify this file, you can insert some custom "Include"
# directives. E.g.
# Include /path/to/your/file
# Includes inserted directly after <VirtualHost> tag would keep their
# location inchanged after the file is updated. Other includes would
# be moved to be inserted before the </VirtualHost> tag.
##########################################################################

php_admin_value open_base_dir /srv/www/htdocs
php_admin_value include_path .


NameVirtualHost <ip-address>:80
<VirtualHost <ip-address>:80>
DocumentRoot /srv/www/confixx/html/gesperrt
php_admin_value open_basedir /srv/www/confixx/html/gesperrt
php_admin_value file_uploads 0
</VirtualHost>

NameVirtualHost <ip-address>:443
<VirtualHost <ip-address>:443>
DocumentRoot /srv/www/confixx/html/gesperrt

<IfModule mod_ssl.c>

SSLEngine on
SSLCertificateKeyFile /etc/apache2/ssl.key/<myserv>.key
SSLCertificateFile /etc/apache2/ssl.crt/<myserv>.crt


SetEnvIf User-Agent ".*MSIE.*"
nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0

<Files ~ ".(cgi|shtml|phtml|php3?)$">
SSLOptions +StdEnvVars
</Files>

<Directory "/srv/www/confixx/html/cgi-bin">
SSLOptions +StdEnvVars
</Directory>

</IfModule>
</VirtualHost>

Include /etc/apache2/confixx_vhost.conf
# ^- It is imperative that this entry remain at the end of the file
## /CONFIXX

#NameVirtualHost <ip-address>:80
UseCanonicalName Off
php_admin_flag safe_mode On
php_admin_value safe_mode_exec_dir /srv/www/empty/
LogFormat "%V:#:%h %l %u %t "%r" %s %b "%{Referer}i" "%{User-agent}i"" confixx
LogFormat "%h %l %u %t "%r" %s %b "%{Referer}i" "%{User-agent}i"" confixx2
CustomLog /var/log/apache2/confixx/stdlog_access confixx2

<Directory "/srv/www">
<Files ~ "^.ht">
deny from all
</Files>
AllowOverride None
AllowOverride Indexes AuthConfig Limit FileInfo
Options None
Options +FollowSymLinks +Includes
</Directory>

<Directory "/srv/www/web1/html">
Options -FollowSymLinks -SymLinksIfOwnerMatch
DirectoryIndex index.html index.htm index.php index.php3 index.php4 index.wml
<IfModule mod_access.c>
Allow from all
</IfModule>
<Files ~ ".shtml$">
deny from all
</Files>
<Files ~ ".inc$">
order allow,deny<Directory "/srv/www/web2/html">
Options -FollowSymLinks -SymLinksIfOwnerMatch
DirectoryIndex index.html index.htm index.php index.php3 index.php4 index.wml
<IfModule mod_access.c>
Allow from all
</IfModule>
<Files ~ ".shtml$">
deny from all
</Files>
<Files ~ ".inc$">
order allow,deny
deny from all
</Files>
</Directory>

<Directory "/srv/www/web3/html">
Options -FollowSymLinks -SymLinksIfOwnerMatch
DirectoryIndex index.html index.htm index.php index.php3 index.php4 index.wml
<IfModule mod_access.c>
Allow from all
</IfModule>
<Files ~ ".shtml$">
deny from all
</Files>
<Files ~ ".inc$">
order allow,deny
deny from all
</Files>
</Directory>

<Directory "/srv/www/confixx/html">
Options +FollowSymLinks
DirectoryIndex index.php index.htm index.html

AllowOverride all

<IfModule mod_access.c>
Allow from all
</IfModule>

<IfModule mod_rewrite.c>

RewriteEngine On

RewriteRule ^reseller/res[0-9]+/(.*)$ reseller/$1 [L]

RewriteRule ^user/[a-zA-Z][-a-zA-Z0-9_]{0,4}[0-9]+/(.*)$ user/$1 [L]

RewriteRule ^ftplogin/[a-zA-Z][-a-zA-Z0-9_]{0,4}[0-9]+/(.*)$ ftplogin/$1 [L]
RewriteRule ^ftplogin/[a-zA-Z][-a-zA-Z0-9_]{0,4}[0-9]+f[0-9]+/(.*)$ ftplogin/$1 [L]

RewriteRule ^poplogin/[a-zA-Z][-a-zA-Z0-9_]{0,4}[0-9]+p[0-9]+/(.*)$ poplogin/$1 [L]

</IfModule>

AddDefaultCharset off

<Files ~ ".shtml$">
deny from all
</Files>
<Files ~ ".inc$">
order allow,deny
deny from all
</Files>
</Directory>

# Default - gesperrt
<VirtualHost <ip-address>:80>
SuexecUserGroup confixx confixx
DocumentRoot /srv/www/confixx/html/gesperrt
</VirtualHost>

<VirtualHost <ip-address>:80>
ServerAdmin webmaster@<myserv>
ServerName http://www.
ServerAlias <myserv>.de

DocumentRoot /srv/www/web1/html
SuexecUserGroup web1 web1
ScriptAlias /cgi-bin/ /srv/www/web1/html/cgi-bin/
CustomLog /srv/www/web1/log/access_log confixx2
php_admin_value open_basedir /srv/www/web1/html/:/srv/www/web1/phptmp/:/srv/www/web1/files/:/srv/www/web1/atd/
php_admin_value file_uploads 1
php_admin_value upload_tmp_dir /srv/www/web1/phptmp/
</VirtualHost>

<VirtualHost <ip-address>:80>
ServerAdmin webmaster@<myserv>.de
ServerName http://www.
ServerAlias <myserv>.de

DocumentRoot /srv/www/web2/html
SuexecUserGroup web2 web2
ScriptAlias /cgi-bin/ /srv/www/web2/html/cgi-bin/
CustomLog /srv/www/web2/log/access_log confixx2
php_admin_value open_basedir /srv/www/web2/html/:/srv/www/web2/phptmp/:/srv/www/web2/files/:/srv/www/web2/atd/
php_admin_value file_uploads 1
php_admin_value upload_tmp_dir /srv/www/web2/phptmp/
php_admin_value safe_mode off
</VirtualHost>

<VirtualHost <ip-address>:443>
ServerAdmin webmaster@<myserv>.de
ServerName ssl.<myserv>.de

DocumentRoot /srv/www/web2/html/ssl
SuexecUserGroup web2 web2
ScriptAlias /cgi-bin/ /srv/www/web2/html/cgi-bin/
CustomLog /srv/www/web2/log/access_log confixx2
php_admin_value open_basedir /srv/www/web2/html/:/srv/www/web2/phptmp/:/srv/www/web2/files/:/srv/www/web2/atd/
php_admin_value file_uploads 0

<IfModule mod_dir.c>
DirectoryIndex index.html index.htm index.shtml index.cgi index.php
</IfModule>

<IfModule mod_ssl.c>

SSLEngine on
SSLCertificateKeyFile /etc/apache2/ssl.key/<myserv>.key
SSLCertificateFile /etc/apache2/ssl.crt/<myserv>.crt


SetEnvIf User-Agent ".*MSIE.*"
nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0

<Files ~ ".(cgi|shtml|phtml|php3?)$">
SSLOptions +StdEnvVars
</Files>

<Directory "/srv/www/web2/html/cgi-bin">
SSLOptions +StdEnvVars
</Directory>

</IfModule>


CustomLog /var/log/apache2/<myserv>.ssl.log "%h %l %u %t "%r" %s %b "%{Referer}i" "%{User-agent}i""
ErrorLog /var/log/apache2/<myserv>.de_error.ssl.log
</VirtualHost>

#
# Listen: Allows you to bind Apache to specific IP addresses and/or
# ports, instead of the default. See also the <VirtualHost>
# directive.
#
# Change this to Listen on specific IP addresses as shown below to
# prevent Apache from glomming onto all bound IP addresses (0.0.0.0)
#
#Listen 12.34.56.78:80

Listen 80

<IfDefine SSL>
Listen 443
</IfDefine>

<myserv>:/etc/apache2 # netstat -l
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 *:www-http *:* LISTEN
tcp 0 0 *:ftp *:* LISTEN
tcp 0 0 *:ssh *:* LISTEN
tcp 0 0 *:smtp *:* LISTEN
tcp 0 0 *:https *:* LISTEN
tcp 0 0 *:pop3 *:* LISTEN
Active UNIX domain sockets (only servers)
Proto RefCnt Flags Type State I-Node Path
unix 2 [ ACC ] STREAM LISTENING 182328974 /var/lib/mysql/mysql.sock
unix 2 [ ACC ] STREAM LISTENING 207451623 /var/run/sendmail/control
<myserv>:/etc/apache2 #

hemzet wrote: NameVirtualHost <ip-address>:443
<VirtualHost <ip-address>:443>
DocumentRoot /srv/www/confixx/html/gesperrt

Rest erstmal nicht weiter angesehen weil das eindeutiger Fehler ist.

Listen 443