Unable to start debugging on the web server - Chapter 6 . Securing Linux 227 # cd
Chapter 6 . Securing Linux 227 # cd /etc/hhtpd/conf/ssl.key # /usr/bin/openssl rsa -in server.key -out server.key Troubleshooting Your Certificates If you are having problems with your SSL certificate, here are some troubleshooting tips: . Only one SSL certificate per IP address is allowed. If you want to add more than one SSL-enabled Web site to your server, you must bind another IP address to the network interface. . Make sure the permission mask on the /etc/httpd/conf/ssl.* directories and their contents is 700 (rwx——). . Make sure you aren t blocking port 443 on your Web server. All https requests come in on port 443. If you are blocking it, you will not be able to get secure pages. . The certificate only lasts for one year, and then you must renew it with your certificate authority. Each CA has a different renewal procedure, so check your CA s Web site for details. . Make sure you have the mod_ssl package installed. You will not be able to serve any SSL-enabled traffic without it. Using the Secure Shell Package The Secure Shell package (SSH) provides shell services similar to the rsh, rcp, and rlogin commands, but encrypts the network traffic. It uses private-key cryptography, so it is ideal for use with Internet-connected computers. Starting the SSH Service If you have installed the openssh-server software package, the SSH server is automatically configured to start. The SSH daemon is started from the /etc/init.d/sshd startup script. To make sure the service is set up to start automatically, type the following (as root user) on a Fedora Core system: # chkconfig –list sshd sshd 0:off 1:off 2:on 3:on 4:on 5:on 6:off This result shows that the sshd service is set to run in system states 2, 3, 4, and 5, which means that whenever the system is up and connected to the network, the sshd service is running. If the service is off, you can turn it on so it comes up when you boot Linux by typing the following as root user: # chkconfig sshd on
We would like to recommend you tested and proved virtual web hosting services, which you will surely find to be of great quality.