On 5 Dec 2019, at 15:22, Rob Crittenden <rcritten(a)redhat.com>
wrote:
Vinícius Ferrão via FreeIPA-users wrote:
> Hello,
>
> Is it supported to install mod_ssl on the same machine of FreeIPA? I’m asking this
because FreeIPA ships by default mod_nss and this may lead to conflicting issues inside
/etc/httpd/conf.d. For example:
>
> [root@headnode conf.d]# grep -iR virtualhost
> nss.conf:<VirtualHost _default_:443>
> nss.conf:</VirtualHost>
> ssl.conf:<VirtualHost _default_:443>
> ssl.conf:</VirtualHost>
>
> Both add a default virtual host to 443.
>
> What’s the correct procedure? Don’t use mod_ssl at all?
They can co-exist but they can't share ports.
We do not recommend running other services on an IPA server.
Thanks for rescuing out again Rob.
So I need to custom tailor the ssl.conf and keep the nss.conf as default right?
I can learn the right way and use nss.conf instead, I think it will keep the sanity of the
configuration files.
Just for curiosity, it’s the web interface of a monitoring system. Just that.
rob