Vinícius Ferrão wrote:
> On 5 Dec 2019, at 15:22, Rob Crittenden <rcritten(a)redhat.com> wrote:
>
> Vinícius Ferrão via FreeIPA-users wrote:
>> Hello,
>>
>> Is it supported to install mod_ssl on the same machine of FreeIPA? I’m asking
this because FreeIPA ships by default mod_nss and this may lead to conflicting issues
inside /etc/httpd/conf.d. For example:
>>
>> [root@headnode conf.d]# grep -iR virtualhost
>> nss.conf:<VirtualHost _default_:443>
>> nss.conf:</VirtualHost>
>> ssl.conf:<VirtualHost _default_:443>
>> ssl.conf:</VirtualHost>
>>
>> Both add a default virtual host to 443.
>>
>> What’s the correct procedure? Don’t use mod_ssl at all?
>
> They can co-exist but they can't share ports.
>
> We do not recommend running other services on an IPA server.
Thanks for rescuing out again Rob.
So I need to custom tailor the ssl.conf and keep the nss.conf as default right?
I can learn the right way and use nss.conf instead, I think it will keep the sanity of
the configuration files.
For many configuration options it is SSL<thing> -> NSS<thing> with the
exception of the certs, but those are already configured so it may be
pretty straightforward.
Just for curiosity, it’s the web interface of a monitoring system. Just that.
Ok.
rob
>
> rob
>