Category: Kev’s Blog

I followed this site to get the basics up and running, in particular how to generate self-signed certificates: Raible’s Wiki: ApacheSSL

The actual configuration of my Virtual Hosts in the httpd.conf file was more trial and error. There is plenty of info about not mixing name and ip based Vitual Hosts, but I couldn’t find a good working example. It turns out that this configuration works fine:

<code>
NameVirtualHost x.x.x.x:80

#Use SSL for this Virtual Host
&lt;VirtualHost x.x.x.x:443&gt;
   SSLEngine On
   SSLCertificateFile /path_to/server.crt
    SSLCertificateKeyFile /path_to/server.key
    DocumentRoot /doc_root_for_ssl_protected_files
    ServerName server.name.com
&lt;/VirtualHost&gt;

&lt;VirtualHost x.x.x.x:80&gt;
    DocumentRoot /doc_root_for_files_on_port_80/
    ServerName otherserver.server.com
    DirectoryIndex index.jsp index.html
&lt;/VirtualHost&gt;


&lt;VirtualHost x.x.x.x:80&gt;
    DocumentRoot /doc_root_for_other_files_on_port_80/
    ServerName otherserver2.server.com
    DirectoryIndex index.jsp index.html
&lt;/VirtualHost&gt;

#ssl config
SSLMutex sem
SSLRandomSeed startup builtin
SSLSessionCache none

ErrorLog logs/ssl.log

</code>

I have been trying to deploy SquirrelMail to my webserver, which is currently set up as Apache 2.0.40 and mod_jk2 to Tomcat 4.1.24 on JBoss3.2.1.

When I try and access any page in SquirelMail other than the log on page, I get a blank page come back, with no errors.

Looking in the Apache error_log (/var/log/httpd/error_log) shows a few PHP errors:

<code>PHP Fatal error:  Allowed memory size of 8388608 bytes exhausted (tried to allocate 4097 bytes) in
 /usr/share/squirrelmail/functions/imap_general.php on line 48</code>

This memory setting is in the /etc/php.ini file. Increasing this from 8M to 64M, and the max_execution_time from 30 to 120 fixed the memory and timeout problems.

The /var/log/messages file also showed the following error:

<code>Nov  7 11:17:52 localhost xinetd[20446]: libwrap refused connection to imap from 127.0.0.1
</code>

Adding imapd: 127.0.0.1 to /etc/hosts.allow fixed this.