SSL not working

Discussion in 'General' started by sunray, Feb 11, 2008.

  1. sunray

    sunray New Member

    I am having some issues with the SSL. To install the certificate I followed the steps described here: http://www.litespeedtech.com/support/wiki/doku.php?id=litespeed_wiki:ssl_cert_install except that I am not able to set the CA Certificate Path / CA Certificate File since my cert is an SSL Web Server certificate which does not have an intermediate certificate. It is directly signed by the root certificate, Thawte Premium Server CA.

    After that I mapped the virtual host to that listener, restart the webserver but when I try to load a page starting by https I get "The page cannot be displayed". The listener is working properly because when I try to load, HTTP I go a message telling that I should trype HTTPS.

    Here are my settings:

    Listener Name ssl
    IP Address xx.xx.xx.xx
    Port 8089
    Binding Not Set
    Secure Yes
    Notes Not Set


    Private Key File Private Key File /usr/local/lsws/conf/cert/server.key
    Certificate File Certificate File /usr/local/lsws/conf/cert/server.crt
    Chained Certificate Chained Certificate No
    CA Certificate Path CA Certificate Path Not Set
    CA Certificate File CA Certificate File Not Set
    Client Verification Client Verification none
    Verify Depth Verify Depth 0
    Client Revocation Path Client Revocation Path Not Set
    Client Revocation File Client Revocation File Not Set

    Any help is much appreciated.
  2. sunray

    sunray New Member

    I d like to add this info:

    [root@www cert]# openssl s_client -connect xxxxxxxxxx:8089
    connect: Connection refused
  3. mistwang

    mistwang LiteSpeed Staff

    Please make sure SSLv3 and TLS has been checked in the protocol configuration. check server log to make sure all key file and certificate has been loaded successfully by the server.
  4. sunray

    sunray New Member

    Mistwang,

    Once I activated both SSLv3 and TLS it worked properly. Thank you very much.

Share This Page