Topic: http web site still available even if no config for it ?!?

[yoyo]

Hi currently use Apache/2.2.22 on Debian

I did modify my apache conf in order to get virtual host and a https website.

My only file on "sites-enabled" directory is :

<VirtualHost *:443>
ServerName XXX
DocumentRoot /var/wwws
SSLEngine On
SSLCertificateFile /home/lionel/srv/ssl/xxx.pem
SSLCertificateKeyFile /home/lionel/srv/ssl/YYY.pem
SSLProtocol all -SSLv2
SSLCACertificateFile /home/lionel/srv/ssl/ZZZ.pem
#SSLVerifyClient require
#SSLVerifyDepth 1
</VirtualHost>

From a default installation, I have some files on /var/www
I cannot find anyplace in my installation where something is linked to /var/www

Anyway,
when I try to access my website using https, it runs ok the content of /var/wwws
BUT
when I try to access my website using http, it runs also ok the content of /var/www

The only solution I found was to deactivate the http is to remove Listen 80 in ports.conf and it works fine but I still can not figure out how apache2 can run content of /var/www as it is not defined in any configuration file.

Can somebody help me ?

Thanks a lot in advance.

[yoyo]

hi again,

it seems I am not the only one :
http://serverfault.com/questions/716175/apache-2-2-a2dissite-default-not-removing-access-to-its-document-root

but still do not know why ?!?

[maba]

If you enable both ports you must have a DocumentRoot defined. Otherwise Apache would not even start but would give you an error message that you have to define DocumentRoot.

Proposal:

cd to the config directory and grep for all documentroots

[yoyo]

Hi,

this is what makes me think that it is hardcoded somewhere.
No DocumentRoot except the one I defined for my https.
I even tried to search for "/var/www" but also could not find it.

Thanks.

[r4a5a88]

have you tried a2dissite 000-default.conf
that is the default page for http
check your sites-enabled directory to pls