Also irgendwie will das hier noch nicht so richtig…
Egal welche Subdomain wir jetzt aufrufen, also benno. oder ox.es wird alles nach /ucs-overview/ aufgelöst.
Der Fehler in der apache error.log beim Aufruf von ox.domain.tld:
[Wed Dec 30 13:49:45 2015] [error] [client 123.123.123.123] File does not exist: /var/www/univention-management-console/languages.json, referer: https://mail.domain.tld/ucs-overview/
[Wed Dec 30 13:49:45 2015] [error] [client 123.123.123.123] File does not exist: /var/www/univention-management-console/saml, referer: https://mail..domain.tld/ucs-overview/
[Wed Dec 30 13:49:45 2015] [error] [client 123.123.123.123] File does not exist: /var/www/univention-management-console/univention-management-console, referer: https://mail..domain.tld/ucs-overview/
Aber ich glaube, dass da noch irgendwo der Wurm in der Konfiguration ist:
/etc/univention/templates/files/etc/apache2/sites-available/default.d/00start
[code]@%@UCRWARNING=# @%@
NameVirtualHost *:80
<VirtualHost *:80>
ServerName admin.domain.tld
ServerAlias umc.domain.tld
force ssl
RewriteEngine on
RewriteCond %{HTTPS} !=on
RewriteRule ^/?(.*) https://%{SERVER_NAME}/$1 [R,L]
RewriteLog “/var/log/apache2/rewrite.log”
RewriteLogLevel 1
[/code]
/etc/univention/templates/files/etc/apache2/sites-available/ssl.d/00start
[code]@%@UCRWARNING=# @%@
NameVirtualHost *:443
<VirtualHost *:443>
ServerName admin.domain.tld
ServerAlias umc.domain.tld
ServerPath "/ucs-overview/"
Include /etc/apache2/ucs-sites.conf.d
# overwrite DocumentRoot from Include
DocumentRoot /var/www/univention-management-console
# neat redirect of ox within umc
RewriteEngine on
RewriteRule ".*/appsuite$" "https://ox.domain.tld/" [L,R]
RewriteLog "/var/log/apache2/rewrite-ssl.log"
RewriteLogLevel 1
SSLEngine on
SSLProxyEngine on
@!@
if configRegistry.get('apache2/ssl/certificate'):
print ' SSLCertificateFile %s' % configRegistry.get('apache2/ssl/certificate')
else:
print ' SSLCertificateFile /etc/univention/ssl/%s.%s/cert.pem' % (configRegistry.get('hostname'), configRegistry.get('domainname'))
if configRegistry.get('apache2/ssl/key'):
print ' SSLCertificateKeyFile %s' % configRegistry.get('apache2/ssl/key')
else:
print ' SSLCertificateKeyFile /etc/univention/ssl/%s.%s/private.key' % (configRegistry.get('hostname'), configRegistry.get('domainname'))
if configRegistry.get('apache2/ssl/ca'):
print ' SSLCACertificateFile %s' % configRegistry.get('apache2/ssl/ca')
else:
print ' SSLCACertificateFile /etc/univention/ssl/ucsCA/CAcert.pem'
if configRegistry.get('apache2/ssl/certificatechain'):
print ' SSLCertificateChainFile %s' % configRegistry.get('apache2/ssl/certificatechain')
@!@
#SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
### To enable special log format for HTTPS-access
# LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\" %p" combinedssl
# CustomLog /var/log/apache2/access.log combinedssl ## with port number[/code]
Hier musste ich nachher in der resultierenden default-ssl die letzten beiden Einträge
vertauschen, weil apache sonst gar nicht gestartet ist
/etc/apache2/sites-available/virtual
[code]##########
default landing page
##########
<VirtualHost *:80>
ServerName domain.tld
ServerAlias www.domain.tld
force ssl
RewriteEngine on
RewriteCond %{HTTPS} !=on
RewriteRule ^/?(.*) https://%{SERVER_NAME}/$1 [R,L]
RewriteLog “/var/log/apache2/rewrite.log”
RewriteLogLevel 1
##########
this section is generated via ucs templates!
see /etc/apache2/sites-available/default
refer to /etc/univention/templates/files/etc/apache2/sites-available/default.d/
##########
#<VirtualHost *:80>
ServerName admin.DOMAIN.tdl
ServerAlias umc.DOMAIN.tdl
ServerPath “/ucs-overview/”
DocumentRoot /var/www/univention-management-console
RedirectMatch ^/$ /ucs-overview/
#
##########
Open Xchange
##########
<VirtualHost *:80>
ServerName ox.domain.tld
ServerAlias mail.domain.tld
force ssl
RewriteEngine on
RewriteCond %{HTTPS} !=on
RewriteRule ^/?(.*) https://%{SERVER_NAME}/$1 [R,L]
RewriteLog “/var/log/apache2/rewrite.log”
RewriteLogLevel 1
##########
Benno
##########
<VirtualHost *:80>
ServerName benno.domain.tld
force ssl
RewriteEngine on
RewriteCond %{HTTPS} !=on
RewriteRule ^/?(.*) https://%{SERVER_NAME}/$1 [R,L]
RewriteLog “/var/log/apache2/rewrite.log”
RewriteLogLevel 1
[/code]
/etc/apache2/sites-available/virtual-ssl
[code]##########
default landing page
##########
<VirtualHost *:443>
ServerName domain.tld
ServerAlias www.domain.tld
DocumentRoot /var/www/default
DirectoryIndex index.html
SSLEngine on
SSLProxyEngine on
SSLCertificateFile /etc/univention/ssl/ucs-master1.ucs.domain.tld/cert.pem
SSLCertificateKeyFile /etc/univention/ssl/ucs-master1.ucs.domain.tld/private.key
SSLCACertificateFile /etc/univention/ssl/ucsCA/CAcert.pem
SSLCertificateFile /etc/univention/ssl/../cert.pem
SSLCertificateKeyFile /etc/univention/ssl/../private.key
SSLCACertificateFile /etc/univention/ssl/ucsCA/CAcert.pem
##########
this section is generated via ucs templates!
see /etc/apache2/sites-available/default
refer to /etc/univention/templates/files/etc/apache2/sites-available/default.d/
##########
#<VirtualHost *:80>
ServerName admin.DOMAIN.tdl
ServerAlias umc.DOMAIN.tdl
ServerPath “/ucs-overview/”
DocumentRoot /var/www/univention-management-console
RedirectMatch ^/$ /ucs-overview/
#
##########
Open Xchange
##########
<VirtualHost *:80>
ServerName ox.domain.tld
ServerAlias mail.domain.tld
DocumentRoot /var/www
RedirectMatch ^/$ /appsuite/
Include /etc/apache2/sites-available/ox
SSLEngine on
SSLProxyEngine on
SSLCertificateFile /etc/univention/ssl/ucs-master1.ucs.domain.tld/cert.pem
SSLCertificateKeyFile /etc/univention/ssl/ucs-master1.ucs.domain.tld/private.key
SSLCACertificateFile /etc/univention/ssl/ucsCA/CAcert.pem
SSLCertificateFile /etc/univention/ssl/../cert.pem
SSLCertificateKeyFile /etc/univention/ssl/../private.key
SSLCACertificateFile /etc/univention/ssl/ucsCA/CAcert.pem
##########
Benno
##########
<VirtualHost *:80>
ServerName benno.domain.tld
DocumentRoot /var/www
RedirectMatch ^/$ /benno/
SSLEngine on
SSLProxyEngine on
SSLCertificateFile /etc/univention/ssl/ucs-master1.ucs.domain.tld/cert.pem
SSLCertificateKeyFile /etc/univention/ssl/ucs-master1.ucs.domain.tld/private.key
SSLCACertificateFile /etc/univention/ssl/ucsCA/CAcert.pem
SSLCertificateFile /etc/univention/ssl/../cert.pem
SSLCertificateKeyFile /etc/univention/ssl/../private.key
SSLCACertificateFile /etc/univention/ssl/ucsCA/CAcert.pem
[/code]
Ich habe jetzt zu Testzwecken zunächst den Verweis auf die vorhandenen Keys in /etc/univention/ssl/ucs-master1.ucs.domain.tld/ eingerichtet. Das sollte doch gehen oder?
Würde mich über Hilfe weiterhin extrem freuen.
Danke
Sascha
Edit:
Es ist Ende des Jahres, das Jahr war lang und der Jüngste bin ich auch nicht mehr…
Fehler natürlich gefunden:
in der virtual-ssl stand überall noch
<VirtualHost *:80>
statt
<VirtualHost *:443>
Mann Mann Mann…
Danke für Eure Hilfe…
Sascha
