Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

I have a LAMP stack running. My the web root is /var/www.

So if I go to http://linux-server/some/page.php It renders the page located at /var/www/some/page.php

If I use https I get page not found.

I would like to enable SSL for all pages, so I can view any of these pages using either http or https.

How can I do that?

share|improve this question
add comment

4 Answers

up vote 5 down vote accepted

/etc/apache2/sites-available/default-ssl has the configuration for an http server. It can be enabled with the command sudo a2ensite default-ssl.

You will also need to enable mod ssl. This can be done with the command sudo a2enmod ssl. This will point you to /usr/share/doc/apache2.2-common/README.Debian.gz for directions on configuring SSL and generting a self-signed certificate. it can be viewed with the command zless /usr/share/doc/apache2.2-common/README.Debian.gz

Once you have the certificates installed, you can restart apache with the command sudo /etc/init.d/apache2 restart.

share|improve this answer
    
Got it working for the default host name but couldn't get it to work with multiple host names. –  JD Isaacks Feb 7 '11 at 15:30
    
Scratch that, got it. –  JD Isaacks Feb 7 '11 at 16:03
    
For 13.10 you don't need to generate & install self-signed certificates. After enabling mod_ssl and default-ssl, there is already an "Ubuntu" certificate. –  Halil Özgür Oct 30 '13 at 12:15
    
@HalilÖzgür I have found Apache2 has always had a default certificate. The default self-signed certificate often doesn't match the name being published in DNS. In that case, a new certificate will need to be installed. Users who want a CA signed certificate will need to install and configure it. –  BillThor Oct 30 '13 at 12:30
    
@BillThor I thought the question is about local test servers or self-signed certificates, where "invalid certificate" warnings can be ignored. –  Halil Özgür Oct 30 '13 at 15:14
show 1 more comment

You can add it within apache or add it with a proxy (like nginx). I prefer setting up an SSL proxy locally or remotely in the first place. This way if I need to install a WAF or IDS later, there are less modifications required.

share|improve this answer
add comment

Here's a decent primer from Paul Bramscher: http://www.tc.umn.edu/~brams006/selfsign_ubuntu.html

In short, you need to set up SSL -- either get a real cert (Verisign, from a company CA, etc.) or create a self-signed one (as in the linked document). Then enable SSL in apache, and set any redirect rules.

share|improve this answer
    
@JohnIsaacks If you have any specific issues or questions after going through this, please update your question. –  belacqua Feb 4 '11 at 18:58
add comment

Before you can enable SSL, your server must have a server certificate installed on it. Typically, this is done through a public certification authority such as GeoTrust. IIS provides a wizard to walk you through the steps. The first step in the process is to generate a request for a certificate through the IIS management console.

You can find the Internet Services management console by navigating to Control Panel | Administrative Tools | Internet Services Manager. this link helps to Enable SSL on Internet Information Server

share|improve this answer
1  
I think there is a bit of confusion on this post, no? –  Bruno Pereira Jan 24 '12 at 12:45
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.