Apache的SSL不能远程工作

我正在尝试使用ssl设置apache2.2，但是我无法远程连接到它。

My Virtualhost looks like this: NameVirtualHost *:443 <VirtualHost *:443> SSLEngine On SSLCertificateFile /etc/ssl/localcerts/host1/apache.pem ServerName mail.host1.net DocumentRoot /usr/share/squirrelmail <Directory /> Options -Indexes AllowOverride All </Directory> ErrorLog /var/log/apache2/mail.host1.log LogLevel warn CustomLog /var/log/apache2/mail.host1-access.log combined ServerSignature Off </VirtualHost> 

我已经使用这个教程创build了ssl文件： http : //wiki.debian.org/Self-Signed_Certificate

当我连接本地

 server ~ openssl s_client -connect localhost:443 CONNECTED(00000003) depth=0 /C=AU/ST=Some-State/O=Internet Widgits Pty Ltd verify error:num=18:self signed certificate verify return:1 depth=0 /C=AU/ST=Some-State/O=Internet Widgits Pty Ltd verify return:1 --- Certificate chain 0 s:/C=AU/ST=Some-State/O=Internet Widgits Pty Ltd i:/C=AU/ST=Some-State/O=Internet Widgits Pty Ltd --- Server certificate -----BEGIN CERTIFICATE----- [...] -----END CERTIFICATE----- subject=/C=AU/ST=Some-State/O=Internet Widgits Pty Ltd issuer=/C=AU/ST=Some-State/O=Internet Widgits Pty Ltd --- No client certificate CA names sent --- SSL handshake has read 1265 bytes and written 319 bytes --- New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA Server public key is 1024 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE SSL-Session: Protocol : TLSv1 Cipher : DHE-RSA-AES256-SHA Session-ID: [...] Session-ID-ctx: Master-Key: [...] Key-Arg : None Start Time: 1357993878 Timeout : 300 (sec) Verify return code: 18 (self signed certificate) --- closed 

但是当我远程执行时：

• 本地LAMP安装权限/ Owernship问题
• 什么是一个好的开源负载平衡器？
• 来自apache的Gzip编码内容打破了safari
• 要求基于URL的用户？
• 目录存在之前重新启动Apache

 [13:27:05:gentoo@~/]openssl s_client -connect mail.host1.net:443 CONNECTED(00000003) 139720085706408:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:177: --- no peer certificate available --- No client certificate CA names sent --- SSL handshake has read 0 bytes and written 322 bytes --- New, (NONE), Cipher is (NONE) Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE --- 

Nmap告诉我，端口443是打开的。

当我通过http://mail.host1.net:443连接到我的网站，它的工作，但SSL不

希望有人能帮忙。

日志只是说：

 [Sat Jan 12 19:25:50 2013] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?) [Sat Jan 12 19:25:50 2013] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)