Novell LINUX ENTERPRISE SERVER 11 - ADMINISTRATION Administration Manual page 420

27.6.2 Configuring Apache with SSL
The default port for SSL and TLS requests on the Web server side is 443. There is no
conflict between a "regular" Apache listening on port 80 and an SSL/TLS-enabled
Apache listening on port 443. In fact, HTTP and HTTPS can be run with the same
Apache instance. Usually separate virtual hosts are used to dispatch requests to port 80
and port 443 to separate virtual servers.
IMPORTANT: Firewall Configuration
Do not forget to open the firewall for SSL-enabled Apache on port 443. This
can be done with YaST as described in Section "Configuring the Firewall with
YaST" (Chapter 15, Masquerading and Firewalls, ↑Security Guide).
To use SSL, it must be activated in the global server configuration. Open /etc/
sysconfig/apache2 in an editor and search for APACHE_MODULES. Add "ssl"
to the list of modules if it is not already present (mod_ssl is activated by default). Next,
search for APACHE_SERVER_FLAGS and add "SSL". If you have chosen to encrypt
your server certificate with a password, you should also increase the value for
APACHE_TIMEOUT, so you have enough time to enter the passphrase when Apache
starts. Restart the server to make these changes active. A reload is not sufficient.
The virtual host configuration directory contains a template /etc/apache2/vhosts
.d/vhost-ssl.template with SSL-specific directives that are extensively docu-
mented. Refer to
host configuration.
To get started, copy the template to /etc/apache2/vhosts.d/mySSL-host
.conf and edit it. Adjusting the values for the following directives should be sufficient:
• DocumentRoot
• ServerName
• ServerAdmin
• ErrorLog
• TransferLog
406 Administration Guide
Section "Virtual Host Configuration" (page 376) for the general virtual