Websense Express: Apache Web Server fails and Websense Explorer does not display

To address this problem, you can either give the machine a longer host name, and then reinstall Websense Express, or manually create a self-signed SSL certificate, and then restart the Apache Web Server, as described below.

  1. Open a Windows command prompt (Start > Run > cmd).
  2. Use the following command to navigate to the Apache installation directory:
       cd \Program Files\Websense\apache\bin
  3. From this directory, enter the following commands in the order given:
    1. To generate a private RSA key, enter the openssl genrsa -des3 -out server.key 1024 command. When prompted, enter a pass phrase. Make a note of the value you enter here, as you will need it in step c.
    2. Use the copy server.key server.key.orig to make a backup copy of the key file.
    3. To process the key, enter the openssl rsa -in server.key.orig -out server.key command. When prompted, enter the pass phrase created in step a.
    4. To create a self-signed certificate, enter the openssl req -config “C:\Program Files\Websense\apache\conf\ssl\openssl.cnf” -new -key server.key -out server.csr command. You will be prompted for information that will be included in the certificate.
    5. To create a certificate valid for 365 days, enter the openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt command. Change the value of the “-days” parameter to change the amount of time that the certificate is valid.
    6. Enter the cd \Program Files\Websense\apache\conf\ssl\ssl.crt command to change to the “conf\ssl\ssl.crt” subdirectory.
    7. To move the “server.crt” file to the “apache\bin” directory, use the move “C:\Program Files\Websense\apache\bin\server.crt” server.crt command.
    8. To change to the “conf\ssl\ssl.key” subdirectory, use the cd \Program Files\Websense\apache\conf\ssl\ssl.key command.
    9. To move the “server.key” file to the “apache\bin” directory, use the move “C:\Program Files\Websense\apache\bin\server.key” server.key command.
  4. Restart the Apache2Websense service.
    1. Open the Windows Services dialog box (open the Windows Control Panel and go to Administrative Tools > Services).
    2. Right-click on Apache2Websense.
    3. Select Restart from the pop-up menu.

More information on SSL certificates for Apache is available at: httpd.apache.org/docs/2.0/ssl/ssl_faq.html



Leave a Reply

Your email address will not be published.

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>