#1  
Old 22nd June 2011, 15:41
edworcs edworcs is offline
Junior Member
 
Join Date: Sep 2010
Posts: 7
Thanks: 1
Thanked 0 Times in 0 Posts
 
Default SSL Logging

Hi,

We're trying to get per virtual host SSL logging working. We would like an ssl_access_log and an ssl_error_log for virtual sites where SSL has been enabled.

We can see that per virtual host logging is controlled by vlogger and configured in /etc/httpd/conf/sites-available/ispconfig.conf. This appears to work with a non SSL access.log

We can see that the /etc/httpd/conf/sites-available/SITENAME.vhost file has an entry for error logs:

Code:
<VirtualHost IP.AD.DR.ES:443>
ErrorLog /var/log/ispconfig/httpd/SITENAME/error.log
This does log SSL errors, but they are mixed in with all other errors. We'd like a separate ssl_error_log. We also know that direct modification of .vhost files is not a smart idea as they will be overwritten. So we added the following into Apache Directives on a per site basis:

Code:
CustomLog  /var/www/SITENAME/log/access_ssl_log combined_ssl_ispconfig
ErrorLog   /var/www/SITENAME/log/error_ssl_log
Unfortunately this is placed outside of the SSL Virtual host in the .vhost file and so all requests are logged to access_ssl_log for both http and https.

We can see that there is an entry for logging in /etc/httpd/conf.d/ssl.conf

Code:
#   Per-Server Logging:
#   The home of a custom SSL log file. Use this when you want a
#   compact non-error SSL logfile on a virtual host basis.
CustomLog logs/ssl_request_log \
          "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
We can see the following server wide files:

/var/log/httpd/ssl_access_log
/var/log/httpd/ssl_error_log
/var/log/httpd/ssl_request_log

The files listed above are logged to if the IP address of the SSL site is used directly, but not the name.

Can anybody offer any help as to how to do this?

Thanks,

Ed

ISPConfig 3.0.3 on Centos 5.5. Setup using Perfect Server, but modified since setup.

Last edited by edworcs; 22nd June 2011 at 15:42. Reason: ISP Config Version Added
Reply With Quote
Sponsored Links
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Adding SSL certificate to Site snowfly Installation/Configuration 2 31st May 2011 12:54
Creating a SSL certificate - Quick guide SamTzu Tips/Tricks/Mods 22 4th January 2011 13:38
Documentation for SSL abubin Installation/Configuration 1 23rd April 2010 06:48
SSL and IPs problem. debian-lover General 7 21st April 2008 11:59
SSL for virtual hosts on one certificate rbartz Tips/Tricks/Mods 8 20th November 2007 17:59


All times are GMT +2. The time now is 14:06.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.