Expand my Community achievements bar.

Don’t miss the AEM Skill Exchange in SF on Nov 14—hear from industry leaders, learn best practices, and enhance your AEM strategy with practical tips.
SOLVED

Dispatcher SSL configuration on Linux

Avatar

Level 2

Experts,
The SSL configuration instructions for dispatcher are not working and there must be something missing or incorrect.
Please help!
--------------------------------
Situation:
Dispatcher was configured and tested on port:80 - works fine. Now switching to SSL:

1) Downloaded dispatcher that supports SSL (dispatcher-apache2.4-linux-x86-64-ssl10-4.1.9.tar)

2) Replaced the dispatcher library and re-link the mod_dispatcher.so to point to the new dispatcher library

3) Linux OpenSSL is version 1.0 -> Relinked to older version to support dispatcher:

“ln -s libssl.so.10 libssl.so.0.9.8” and “ln -s libcrypto.so.10 libcrypto.so.0.9.8”

4) Generated self-signed certs <myserver>.crt and <myserver>.key

5) Updated httpd.conf:

Listen 443

<VirtualHost <myserver>:443>
  ServerName  <myserver>
  DocumentRoot /usr/share/httpd
  <Directory /usr/share/httpd>
    <IfModule disp_apache2.c>
      SetHandler dispatcher-handler
    </IfModule>
    AllowOverride None
  </Directory>
  SSLEngine on
  SSLCertificateFile /etc/httpd/ssl/<myserver>.crt
  SSLCertificateKeyFile /etc/httpd/ssl/<myserver>.key
</VirtualHost>

6) Error on restarting apache:

"Invalid command 'SSLEngine', perhaps misspelled or defined by a module not included in the server configuration"
---------------------------------------------------------------------------------
It seems like we need to load apache ssl module in addition to dispatcher ssl module, right?
Is "LoadModule ssl_module modules/mod_ssl.so" required?
Does anyone run Dispatcher on SSL on Linux? Can you share your httpd.conf settings?
Thanks a lot!

1 Accepted Solution

Avatar

Correct answer by
Level 8

Hi, are the tweaks that you mentioned not documented here?  http://docs.adobe.com/docs/en/dispatcher/disp-ssl.html

If not, if you tell me what you did I can see about adding the information to that page.

 

thanks,
scott

View solution in original post

8 Replies

Avatar

Level 10
If docs are not working; please file a ticket. A support agent will help here.      

Avatar

Employee Advisor

Hi,

It's likely that you don't have the SSL module loaded. Please add this statement to your httpd.conf:

LoadModule ssl_module modules/mod_ssl.so

kind regards,
Jörg

Avatar

Level 10
  On Monday  I will reach out to internal Adobe people to see if anyone has encountered  this.   

Avatar

Level 2

Well, I was hoping someone has Dispatcher-6.1 working on SSL on Linux. A httpd.conf sample would help!
PS: Dispatcher's README.txt is dated 2013! :-)

Avatar

Level 2

Thanks! It seems like the "mod_ssl.so" is implicitly loaded by "mod_dispatcher.so" and no explicit directive is required.
Just make sure "mod_ssl.so" is in the modules directory. I got it working with a few tweaks.
It seems like the dispatcher documentation needs to be updated with more details about the SSL configuration.
Thanks, Alex

Avatar

Correct answer by
Level 8

Hi, are the tweaks that you mentioned not documented here?  http://docs.adobe.com/docs/en/dispatcher/disp-ssl.html

If not, if you tell me what you did I can see about adding the information to that page.

 

thanks,
scott

Avatar

Level 4

Hey Alex & Jörg

I have got ssl module loaded... ( Refere messages below) still I get the error - libssl.so.10: cannot open shared object file: No such file or directory


[Thu Mar 10 09:01:24.043065 2016] [ssl:debug] [pid 14833:tid 139951116785536] ssl_engine_init.c(893): AH02236: Configuring RSA server private key

[Thu Mar 10 09:01:24.043150 2016] [ssl:info] [pid 14833:tid 139951116785536] AH01876: mod_ssl/2.4.7 compiled against Server: Apache/2.4.7, Library: OpenSSL/1.0.1f [Thu Mar 10 09:01:24.043567 2016] [mpm_event:notice] [pid 14833:tid 139951116785536] AH00489: Apache/2.4.7 (Ubuntu) OpenSSL/1.0.1f configured -- resuming normal operations [Thu Mar 10 09:01:24.043587 2016] [mpm_event:info] [pid 14833:tid 139951116785536] AH00490: Server built: Jan 14 2016 17:45:23 [Thu Mar 10 09:01:24.043602 2016] [core:notice] [pid 14833:tid 139951116785536] AH00094: Command line: '/usr/sbin/apache2'

 

I am using

Linux - Ubunt 14 X64 , [Linux ubuntu 4.2.0-27-generic #32~14.04.1-Ubuntu SMP Fri Jan 22 15:32:26 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux]

Dispatcher version - dispatcher-apache2.4-linux-x86-64-ssl10-4.1.12/

Any pointer what could be causing this.

/Regards
Kanwal