[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Bug#269499: apache-ssl: SSL log directives don't work?



On Thu, 2004-09-02 at 06:41 +0200, Fabio Massimo Di Nitto wrote:
> please attach you config files.

See attached. conf.d only contains the configlet for gallery.

I am looking at the contents of the ssl.log file, which contains:
[31/Aug/2004:17:52:43 -0400] + + +

ssl.log is defined as:
CustomLog /var/log/apache-ssl/ssl.log "%t %{version}c %{cipher}c %
{clientcert}c"

BTW. I removed "{ 'c', log_connection_status, 0 }" from the
log_item_keys array in mod_log_config.c and I am now getting the logs
that I expect.

Thanks,

Raf.
##
## httpd.conf -- Apache HTTP server configuration file
##

ServerType standalone
ServerRoot /etc/apache-ssl
LockFile /var/lock/apache-ssl.lock
PidFile /var/run/apache-ssl.pid
ScoreBoardFile /var/run/apache-ssl.scoreboard

Timeout 300
KeepAlive On
MaxKeepAliveRequests 100
KeepAliveTimeout 15

MinSpareServers 5
MaxSpareServers 10
StartServers 5
MaxClients 150
MaxRequestsPerChild 100

Listen 563
Port 563
#BindAddress *

Include /etc/apache-ssl/modules.conf

User www-data
Group www-data
ServerAdmin web@noduck.net

ServerName xxxx.xxxx

#SSLNoV2
SSLRandomFile file /dev/urandom 1024
SSLRandomFilePerConnection file /dev/urandom 1024
SSLEnable
SSLCacheServerPath /usr/lib/apache-ssl/gcache
SSLCacheServerPort /var/run/gcache_port
SSLSessionCacheTimeout 15
SSLCACertificatePath /etc/apache-ssl/ssl
SSLCACertificateFile /etc/apache-ssl/ssl/cacert.pem
SSLCertificateFile /etc/apache-ssl/ssl/cert.pem
SSLCertificateKeyFile /etc/apache-ssl/ssl/key.pem

SSLVerifyClient 2
SSLVerifyDepth 2
#SSLFakeBasicAuth

#SSLUseCRL
#SSLCRLCheckAll
SSLRequiredCiphers RC4-MD5:RC4-SHA:IDEA-CBC-MD5:DES-CBC3-SHA

DocumentRoot /home/www
<Directory />
#    Options SymLinksIfOwnerMatch
    AllowOverride All
</Directory>

<Directory /home/www/>
#    Options Indexes Includes FollowSymLinks MultiViews
    AllowOverride All
    Order allow,deny
    Allow from all
</Directory>

<IfModule mod_dir.c>
    DirectoryIndex index.html index.htm index.shtml index.php
</IfModule>

AccessFileName .htaccess
<Files ~ "^\.ht">
    Order allow,deny
    Deny from all
</Files>

UseCanonicalName Off
TypesConfig /etc/mime.types
DefaultType text/plain

HostnameLookups Off
ErrorLog /var/log/apache-ssl/error.log
LogLevel warn
LogFormat "%h %l \"%u\" %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" \"%{forensic-id}n\" %T %v" full
LogFormat "%h %l \"%u\" %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" \"%{forensic-id}n\" %P %T" debug
LogFormat "%h %l \"%u\" %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" \"%{forensic-id}n\" \"%{clientcert}c\"" combined
LogFormat "%h %l \"%u\" %t \"%r\" %>s %b \"%{forensic-id}n"" forensic
LogFormat "%h %l \"%u\" %t \"%r\" %>s %b" common
LogFormat "%{Referer}i -> %U" referer
LogFormat "%{User-agent}i" agent
CustomLog /var/log/apache-ssl/access.log combined

ServerSignature Off
ServerTokens Prod

<IfModule mod_mime.c>
    AddEncoding x-compress Z
    AddEncoding x-gzip gz tgz
    AddType application/x-tar .tgz
    AddType image/bmp .bmp
    AddType text/x-hdml .hdml
</IfModule>

<IfModule mod_bandwidth.c>
#	BandWidthDataDir /var/lib/apache/mod-bandwidth/
	BandWidthModule On
	BandWidth 172.18.43.4 0
	BandWidth all 40960
	LargeFileLimit 25 20480
	LargeFileLimit 250 10240
</IfModule>

AddDefaultCharset on

CustomLog /var/log/apache-ssl/ssl.log "%t %{version}c %{cipher}c %{clientcert}c"

Include /etc/apache-ssl/conf.d
# Autogenerated file - do not edit!
# This file is maintained by the apache-ssl package.
# To update it, run the command:
#    /usr/sbin/apache-modconf apache-ssl
ClearModuleList
AddModule mod_so.c
AddModule mod_macro.c
LoadModule config_log_module /usr/lib/apache/1.3/mod_log_config_ssl.so
LoadModule agent_log_module /usr/lib/apache/1.3/mod_log_agent.so
LoadModule referer_log_module /usr/lib/apache/1.3/mod_log_referer.so
LoadModule mime_module /usr/lib/apache/1.3/mod_mime_ssl.so
LoadModule dir_module /usr/lib/apache/1.3/mod_dir.so
LoadModule alias_module /usr/lib/apache/1.3/mod_alias.so
LoadModule access_module /usr/lib/apache/1.3/mod_access.so
LoadModule expires_module /usr/lib/apache/1.3/mod_expires.so
LoadModule apache_ssl_module /usr/lib/apache/1.3/libssl.so
LoadModule auth_module /usr/lib/apache/1.3/mod_auth_ssl.so
LoadModule bandwidth_module /usr/lib/apache/1.3/mod_bandwidth.so
LoadModule php4_module /usr/lib/apache/1.3/libphp4.so

Reply to: