Re: ssl trouples

permalink · #1 (**permalink**) 05-23-2006

This is a multi-part message in MIME format.
--------------090807060909030607070506
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit

Markus wrote:

> Phil Ehrens wrote:
>
>>Markus wrote:
>>
>>
>>>Phil Ehrens wrote:
>>>
>>>
>>>
>>>>Markus wrote:
>>>>
>>>>
>>>>
>>>>
>>>>>Made all the ca.key and the server.key and sign it via sign.sh everthing
>>>>>looked good so far.
>>>>>
>>>>>then the misery begins.
>>>>>
>>>>>./configure --with apache... --with-ssl --with-mm
>>>>>--with-crt=/var/local/certs --with -key=/var/local/private
>>>>>--prefix=../apache_1.3.35 --enabled-shared-ssl
>>>>>
>>>>>Error:
>>>>>cannot find SSL x.509 certificated file /var/local/certs
>>>>>
>>>>>
>>>>>
>>>>>
>>>>It wants the path to the cert, not to the directory containing
>>>>the cert. I wonder why they didn't use --with-cert for the
>>>>option name?!
>>>>
>>>>
>>>>
>>>I put that path in, however it still doesn't work. I put it in like this:
>>>the certs and keys are in /usr/local/certs and /usr/local/private.
>>>and i put in/usr/local/certs
>>>and /usr/local/private
>>>
>>>
>>
>>It wants something like:
>>
>>/usr/local/certs/httpdcert.pem
>> ^^^^^^^^^^^^^^
>> |
>> filename of cert
>>________________________________________________ ______________________
>>Apache Interface to OpenSSL (mod_ssl) www.modssl.org
>>User Support Mailing List modssl-users@modssl.org
>>Automated List Manager majordomo@modssl.org
>>
>>
>>
>>
> [Mon May 22 21:56:26 2006] [error] mod_ssl: Init: Private key not
> found (OpenSSL library error follows)
> [Mon May 22 21:56:26 2006] [error] OpenSSL: error:0D094068:asn1
> encoding routines:d2i_ASN1_SET:bad tag
> [Mon May 22 21:56:26 2006] [error] OpenSSL: error:0D0680A8:asn1
> encoding routines:ASN1_CHECK_TLEN:wrong tag
> [Mon May 22 21:56:26 2006] [error] OpenSSL: error:0D07803A:asn1
> encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error
> [Mon May 22 21:56:26 2006] [error] OpenSSL: error:0D09A00D:asn1
> encoding routines:d2i_PrivateKey:ASN1 lib
>
> Someone can put me in the right direction where i have to lok to solve
> this error ?

oopsy.. forgot to mention, this is in the apache error log.

--------------090807060909030607070506
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
Markus wrote:
<blockquote cite="mid4472CC89.2040204@sakrina.com" type="cite">
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
Phil Ehrens wrote: 
<blockquote cite="mid20060522171201.GA13969@ligo.caltech.edu"
type="cite">
<pre wrap="">Markus wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Phil Ehrens wrote:

</pre>
<blockquote type="cite">
<pre wrap="">Markus wrote:

</pre>
<blockquote type="cite">
<pre wrap="">Made all the ca.key and the server.key and sign it via sign.sh everthing
looked good so far.

then the misery begins.

../configure --with apache... --with-ssl --with-mm
--with-crt=/var/local/certs --with -key=/var/local/private
--prefix=../apache_1.3.35 --enabled-shared-ssl

Error:
cannot find SSL x.509 certificated file /var/local/certs

</pre>
</blockquote>
<pre wrap="">It wants the path to the cert, not to the directory containing
the cert. I wonder why they didn't use --with-cert for the
option name?!

</pre>
</blockquote>
<pre wrap="">I put that path in, however it still doesn't work. I put it in like this:
the certs and keys are in /usr/local/certs and /usr/local/private.
and i put in/usr/local/certs
and /usr/local/private
</pre>
</blockquote>
<pre wrap="">
It wants something like:

/usr/local/certs/httpdcert.pem
^^^^^^^^^^^^^^
|
filename of cert
__________________________________________________ ____________________
Apache Interface to OpenSSL (mod_ssl) <a
class="moz-txt-link-abbreviated" href="http://www.modssl.org">www.modssl.org</a>
User Support Mailing List <a
class="moz-txt-link-abbreviated" href="mailto:modssl-users@modssl.org">modssl-users@modssl.org</a>
Automated List Manager <a
class="moz-txt-link-abbreviated" href="mailto:majordomo@modssl.org">majordomo@modss l.org</a>

</pre>
</blockquote>
[Mon May 22 21:56:26 2006] [error] mod_ssl: Init: Private key not found
(OpenSSL library error follows) 
[Mon May 22 21:56:26 2006] [error] OpenSSL: error:0D094068:asn1
encoding routines:d2i_ASN1_SET:bad tag 
[Mon May 22 21:56:26 2006] [error] OpenSSL: error:0D0680A8:asn1
encoding routines:ASN1_CHECK_TLEN:wrong tag 
[Mon May 22 21:56:26 2006] [error] OpenSSL: error:0D07803A:asn1
encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error 
[Mon May 22 21:56:26 2006] [error] OpenSSL: error:0D09A00D:asn1
encoding routines:d2i_PrivateKey:ASN1 lib 
 
Someone can put me in the right direction where i have to lok to solve
this error ? 
</blockquote>
oopsy.. forgot to mention, this is in the apache error log. 
</body>
</html>

--------------090807060909030607070506--
__________________________________________________ ____________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode