It's a Red Hat 9 server running Apache 2.0.40 + mod_ssl that hosts several
name based virtual hosts. One of the sites supports both HTTP and HTTPS.
Apparently everything works fine: I get the expected browser warnings about
encryption when I enter or leave an HTTPS address. Also, my browser's
Security Information section claims the page is encrypted and provides all
info about the certificate.

However, when I load a dynamic page to review server variables I find that
SERVER_PORT=80 and SERVER_SIGNATURE="<address>Apache/2.0.40 Server at
www.fullhardware.com Port 80</address>", no matter what protocol I use (SSL
or non-SSL). Also, the HTTPS variable is missing.

I've been trying to troubleshoot this for months but I can't even manage to
tell where the problem is: Apache? mod_ssl? PHP?



<VirtualHost *:80>
ServerName site.com
DocumentRoot /home/site/htdocs/
CustomLog logs/site.com-access_log combined
ErrorLog logs/site.com-error_log
</VirtualHost>
<VirtualHost *:443>
ServerName site.com
DocumentRoot /home/site/htdocs/
CustomLog logs/site.com-access_log combined
ErrorLog logs/site.com-error_log

<IfDefine HAVE_SSL>
SSLEngine on
SSLCertificateFile /etc/httpd/conf/ssl.crt/server.crt
SSLCertificateKeyFile /etc/httpd/conf/ssl.key/server.key
</IfDefine>
</VirtualHost>



--
-- Álvaro G. Vicario - Burgos, Spain
--

[ Post a follow-up to this message ]