ssl trouples

Made all the ca.key and the server.key and sign it via sign.sh everthing
looked good so far.

then the misery begins.

../configure --with apache... --with-ssl --with-mm
--with-crt=/var/local/certs --with -key=/var/local/private
--prefix=../apache_1.3.35 --enabled-shared-ssl

Error:
cannot find SSL x.509 certificated file /var/local/certs

but those buggers are there
ca.key
server.key
ca.crt
server.crt

any hint would be welcome
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users [at] modssl.org
Automated List Manager majordomo [at] modssl.org
Markus [ Mo, 22 Mai 2006 17:25 ] [ ID #1324601 ]

Re: ssl trouples

Markus wrote:
> Made all the ca.key and the server.key and sign it via sign.sh everthing
> looked good so far.
>
> then the misery begins.
>
> ./configure --with apache... --with-ssl --with-mm
> --with-crt=/var/local/certs --with -key=/var/local/private
> --prefix=../apache_1.3.35 --enabled-shared-ssl
>
> Error:
> cannot find SSL x.509 certificated file /var/local/certs

It wants the path to the cert, not to the directory containing
the cert. I wonder why they didn't use --with-cert for the
option name?!
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users [at] modssl.org
Automated List Manager majordomo [at] modssl.org
Phil Ehrens [ Mo, 22 Mai 2006 17:48 ] [ ID #1324602 ]

Re: ssl trouples

This is a multi-part message in MIME format.
--------------040309000501080102090409
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit

Phil Ehrens wrote:

>Markus wrote:
>
>
>>Made all the ca.key and the server.key and sign it via sign.sh everthing
>>looked good so far.
>>
>>then the misery begins.
>>
>>./configure --with apache... --with-ssl --with-mm
>>--with-crt=/var/local/certs --with -key=/var/local/private
>>--prefix=../apache_1.3.35 --enabled-shared-ssl
>>
>>Error:
>>cannot find SSL x.509 certificated file /var/local/certs
>>
>>
>
>It wants the path to the cert, not to the directory containing
>the cert. I wonder why they didn't use --with-cert for the
>option name?!
>___________________________________________________________ ___________
>Apache Interface to OpenSSL (mod_ssl) www.modssl.org
>User Support Mailing List modssl-users [at] modssl.org
>Automated List Manager majordomo [at] modssl.org
>
>
>
>
I put that path in, however it still doesn't work. I put it in like this:
the certs and keys are in /usr/local/certs and /usr/local/private.
and i put in/usr/local/certs
and /usr/local/private
or do i understand something wrong, sorry but im a complet unic newbie
Any other suggestions?

--------------040309000501080102090409
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
Phil Ehrens wrote:<br>
<blockquote cite="mid20060522154831.GA13301 [at] ligo.caltech.edu"
type="cite">
<pre wrap="">Markus wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Made all the ca.key and the server.key and sign it via sign.sh everthing
looked good so far.

then the misery begins.

../configure --with apache... --with-ssl --with-mm
--with-crt=/var/local/certs --with -key=/var/local/private
--prefix=../apache_1.3.35 --enabled-shared-ssl

Error:
cannot find SSL x.509 certificated file /var/local/certs
</pre>
</blockquote>
<pre wrap=""><!---->
It wants the path to the cert, not to the directory containing
the cert. I wonder why they didn't use --with-cert for the
option name?!
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) <a class="moz-txt-link-abbreviated" href="http://www.modssl.org">www.modssl.org</a>
User Support Mailing List <a class="moz-txt-link-abbreviated" href="mailto:modssl-users [at] modssl.org">modssl-users [at] modssl.org</a>
Automated List Manager <a class="moz-txt-link-abbreviated" href="mailto:majordomo [at] modssl.org">majordomo [at] modssl.org</a>


</pre>
</blockquote>
I put that path in, however it still doesn't work. I put it in like
this:<br>
the certs and keys are in /usr/local/certs and /usr/local/private.<br>
and i put in/usr/local/certs<br>
and /usr/local/private<br>
or do i understand something wrong, sorry but im a complet unic newbie<br>
Any other suggestions?  <br>
</body>
</html>

--------------040309000501080102090409--
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users [at] modssl.org
Automated List Manager majordomo [at] modssl.org
Markus [ Mo, 22 Mai 2006 18:40 ] [ ID #1324603 ]

Re: ssl trouples

Markus wrote:
> Phil Ehrens wrote:
>
> >Markus wrote:
> >
> >
> >>Made all the ca.key and the server.key and sign it via sign.sh everthing
> >>looked good so far.
> >>
> >>then the misery begins.
> >>
> >>./configure --with apache... --with-ssl --with-mm
> >>--with-crt=/var/local/certs --with -key=/var/local/private
> >>--prefix=../apache_1.3.35 --enabled-shared-ssl
> >>
> >>Error:
> >>cannot find SSL x.509 certificated file /var/local/certs
> >>
> >>
> >
> >It wants the path to the cert, not to the directory containing
> >the cert. I wonder why they didn't use --with-cert for the
> >option name?!
> >
> I put that path in, however it still doesn't work. I put it in like this:
> the certs and keys are in /usr/local/certs and /usr/local/private.
> and i put in/usr/local/certs
> and /usr/local/private

It wants something like:

/usr/local/certs/httpdcert.pem
^^^^^^^^^^^^^^
|
filename of cert
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users [at] modssl.org
Automated List Manager majordomo [at] modssl.org
Phil Ehrens [ Mo, 22 Mai 2006 19:12 ] [ ID #1324604 ]

Re: ssl trouples

This is a multi-part message in MIME format.
--------------050402010100000107080606
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit

Phil Ehrens wrote:

>Markus wrote:
>
>
>>Phil Ehrens wrote:
>>
>>
>>
>>>Markus wrote:
>>>
>>>
>>>
>>>
>>>>Made all the ca.key and the server.key and sign it via sign.sh everthing
>>>>looked good so far.
>>>>
>>>>then the misery begins.
>>>>
>>>>./configure --with apache... --with-ssl --with-mm
>>>>--with-crt=/var/local/certs --with -key=/var/local/private
>>>>--prefix=../apache_1.3.35 --enabled-shared-ssl
>>>>
>>>>Error:
>>>>cannot find SSL x.509 certificated file /var/local/certs
>>>>
>>>>
>>>>
>>>>
>>>It wants the path to the cert, not to the directory containing
>>>the cert. I wonder why they didn't use --with-cert for the
>>>option name?!
>>>
>>>
>>>
>>I put that path in, however it still doesn't work. I put it in like this:
>>the certs and keys are in /usr/local/certs and /usr/local/private.
>>and i put in/usr/local/certs
>>and /usr/local/private
>>
>>
>
>It wants something like:
>
>/usr/local/certs/httpdcert.pem
> ^^^^^^^^^^^^^^
> |
> filename of cert
>___________________________________________________________ ___________
>Apache Interface to OpenSSL (mod_ssl) www.modssl.org
>User Support Mailing List modssl-users [at] modssl.org
>Automated List Manager majordomo [at] modssl.org
>
>
>
>
Ahh now it works :) Thanks..
Except httpd dosent start up anymore.. but this we do tommorow :)

--------------050402010100000107080606
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
Phil Ehrens wrote:<br>
<blockquote cite="mid20060522171201.GA13969 [at] ligo.caltech.edu"
type="cite">
<pre wrap="">Markus wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Phil Ehrens wrote:

</pre>
<blockquote type="cite">
<pre wrap="">Markus wrote:


</pre>
<blockquote type="cite">
<pre wrap="">Made all the ca.key and the server.key and sign it via sign.sh everthing
looked good so far.

then the misery begins.

../configure --with apache... --with-ssl --with-mm
--with-crt=/var/local/certs --with -key=/var/local/private
--prefix=../apache_1.3.35 --enabled-shared-ssl

Error:
cannot find SSL x.509 certificated file /var/local/certs


</pre>
</blockquote>
<pre wrap="">It wants the path to the cert, not to the directory containing
the cert. I wonder why they didn't use --with-cert for the
option name?!

</pre>
</blockquote>
<pre wrap="">I put that path in, however it still doesn't work. I put it in like this:
the certs and keys are in /usr/local/certs and /usr/local/private.
and i put in/usr/local/certs
and /usr/local/private
</pre>
</blockquote>
<pre wrap=""><!---->
It wants something like:

/usr/local/certs/httpdcert.pem
^^^^^^^^^^^^^^
|
filename of cert
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) <a class="moz-txt-link-abbreviated" href="http://www.modssl.org">www.modssl.org</a>
User Support Mailing List <a class="moz-txt-link-abbreviated" href="mailto:modssl-users [at] modssl.org">modssl-users [at] modssl.org</a>
Automated List Manager <a class="moz-txt-link-abbreviated" href="mailto:majordomo [at] modssl.org">majordomo [at] modssl.org</a>


</pre>
</blockquote>
Ahh now it works :) Thanks..<br>
Except httpd dosent start up anymore.. but this we do tommorow :)<br>
</body>
</html>

--------------050402010100000107080606--
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users [at] modssl.org
Automated List Manager majordomo [at] modssl.org
Markus [ Mo, 22 Mai 2006 22:08 ] [ ID #1324606 ]

Re: ssl trouples

This is a multi-part message in MIME format.
--------------020008040200040108030902
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit

Phil Ehrens wrote:

>Markus wrote:
>
>
>>Phil Ehrens wrote:
>>
>>
>>
>>>Markus wrote:
>>>
>>>
>>>
>>>
>>>>Made all the ca.key and the server.key and sign it via sign.sh everthing
>>>>looked good so far.
>>>>
>>>>then the misery begins.
>>>>
>>>>./configure --with apache... --with-ssl --with-mm
>>>>--with-crt=/var/local/certs --with -key=/var/local/private
>>>>--prefix=../apache_1.3.35 --enabled-shared-ssl
>>>>
>>>>Error:
>>>>cannot find SSL x.509 certificated file /var/local/certs
>>>>
>>>>
>>>>
>>>>
>>>It wants the path to the cert, not to the directory containing
>>>the cert. I wonder why they didn't use --with-cert for the
>>>option name?!
>>>
>>>
>>>
>>I put that path in, however it still doesn't work. I put it in like this:
>>the certs and keys are in /usr/local/certs and /usr/local/private.
>>and i put in/usr/local/certs
>>and /usr/local/private
>>
>>
>
>It wants something like:
>
>/usr/local/certs/httpdcert.pem
> ^^^^^^^^^^^^^^
> |
> filename of cert
>___________________________________________________________ ___________
>Apache Interface to OpenSSL (mod_ssl) www.modssl.org
>User Support Mailing List modssl-users [at] modssl.org
>Automated List Manager majordomo [at] modssl.org
>
>
>
>
[Mon May 22 21:56:26 2006] [error] mod_ssl: Init: Private key not found
(OpenSSL library error follows)
[Mon May 22 21:56:26 2006] [error] OpenSSL: error:0D094068:asn1 encoding
routines:d2i_ASN1_SET:bad tag
[Mon May 22 21:56:26 2006] [error] OpenSSL: error:0D0680A8:asn1 encoding
routines:ASN1_CHECK_TLEN:wrong tag
[Mon May 22 21:56:26 2006] [error] OpenSSL: error:0D07803A:asn1 encoding
routines:ASN1_ITEM_EX_D2I:nested asn1 error
[Mon May 22 21:56:26 2006] [error] OpenSSL: error:0D09A00D:asn1 encoding
routines:d2i_PrivateKey:ASN1 lib

Someone can put me in the right direction where i have to lok to solve
this error ?

--------------020008040200040108030902
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
Phil Ehrens wrote:<br>
<blockquote cite="mid20060522171201.GA13969 [at] ligo.caltech.edu"
type="cite">
<pre wrap="">Markus wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Phil Ehrens wrote:

</pre>
<blockquote type="cite">
<pre wrap="">Markus wrote:


</pre>
<blockquote type="cite">
<pre wrap="">Made all the ca.key and the server.key and sign it via sign.sh everthing
looked good so far.

then the misery begins.

../configure --with apache... --with-ssl --with-mm
--with-crt=/var/local/certs --with -key=/var/local/private
--prefix=../apache_1.3.35 --enabled-shared-ssl

Error:
cannot find SSL x.509 certificated file /var/local/certs


</pre>
</blockquote>
<pre wrap="">It wants the path to the cert, not to the directory containing
the cert. I wonder why they didn't use --with-cert for the
option name?!

</pre>
</blockquote>
<pre wrap="">I put that path in, however it still doesn't work. I put it in like this:
the certs and keys are in /usr/local/certs and /usr/local/private.
and i put in/usr/local/certs
and /usr/local/private
</pre>
</blockquote>
<pre wrap=""><!---->
It wants something like:

/usr/local/certs/httpdcert.pem
^^^^^^^^^^^^^^
|
filename of cert
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) <a class="moz-txt-link-abbreviated" href="http://www.modssl.org">www.modssl.org</a>
User Support Mailing List <a class="moz-txt-link-abbreviated" href="mailto:modssl-users [at] modssl.org">modssl-users [at] modssl.org</a>
Automated List Manager <a class="moz-txt-link-abbreviated" href="mailto:majordomo [at] modssl.org">majordomo [at] modssl.org</a>


</pre>
</blockquote>
[Mon May 22 21:56:26 2006] [error] mod_ssl: Init: Private key not found
(OpenSSL library error follows)<br>
[Mon May 22 21:56:26 2006] [error] OpenSSL: error:0D094068:asn1
encoding routines:d2i_ASN1_SET:bad tag<br>
[Mon May 22 21:56:26 2006] [error] OpenSSL: error:0D0680A8:asn1
encoding routines:ASN1_CHECK_TLEN:wrong tag<br>
[Mon May 22 21:56:26 2006] [error] OpenSSL: error:0D07803A:asn1
encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error<br>
[Mon May 22 21:56:26 2006] [error] OpenSSL: error:0D09A00D:asn1
encoding routines:d2i_PrivateKey:ASN1 lib<br>
<br>
Someone can put me in the right direction where i have to lok to solve
this error ?<br>
</body>
</html>

--------------020008040200040108030902--
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users [at] modssl.org
Automated List Manager majordomo [at] modssl.org
Markus [ Di, 23 Mai 2006 10:49 ] [ ID #1326333 ]

Re: ssl trouples

This is a multi-part message in MIME format.
--------------090807060909030607070506
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit

Markus wrote:

> Phil Ehrens wrote:
>
>>Markus wrote:
>>
>>
>>>Phil Ehrens wrote:
>>>
>>>
>>>
>>>>Markus wrote:
>>>>
>>>>
>>>>
>>>>
>>>>>Made all the ca.key and the server.key and sign it via sign.sh everthing
>>>>>looked good so far.
>>>>>
>>>>>then the misery begins.
>>>>>
>>>>>./configure --with apache... --with-ssl --with-mm
>>>>>--with-crt=/var/local/certs --with -key=/var/local/private
>>>>>--prefix=../apache_1.3.35 --enabled-shared-ssl
>>>>>
>>>>>Error:
>>>>>cannot find SSL x.509 certificated file /var/local/certs
>>>>>
>>>>>
>>>>>
>>>>>
>>>>It wants the path to the cert, not to the directory containing
>>>>the cert. I wonder why they didn't use --with-cert for the
>>>>option name?!
>>>>
>>>>
>>>>
>>>I put that path in, however it still doesn't work. I put it in like this:
>>>the certs and keys are in /usr/local/certs and /usr/local/private.
>>>and i put in/usr/local/certs
>>>and /usr/local/private
>>>
>>>
>>
>>It wants something like:
>>
>>/usr/local/certs/httpdcert.pem
>> ^^^^^^^^^^^^^^
>> |
>> filename of cert
>>__________________________________________________________ ____________
>>Apache Interface to OpenSSL (mod_ssl) www.modssl.org
>>User Support Mailing List modssl-users [at] modssl.org
>>Automated List Manager majordomo [at] modssl.org
>>
>>
>>
>>
> [Mon May 22 21:56:26 2006] [error] mod_ssl: Init: Private key not
> found (OpenSSL library error follows)
> [Mon May 22 21:56:26 2006] [error] OpenSSL: error:0D094068:asn1
> encoding routines:d2i_ASN1_SET:bad tag
> [Mon May 22 21:56:26 2006] [error] OpenSSL: error:0D0680A8:asn1
> encoding routines:ASN1_CHECK_TLEN:wrong tag
> [Mon May 22 21:56:26 2006] [error] OpenSSL: error:0D07803A:asn1
> encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error
> [Mon May 22 21:56:26 2006] [error] OpenSSL: error:0D09A00D:asn1
> encoding routines:d2i_PrivateKey:ASN1 lib
>
> Someone can put me in the right direction where i have to lok to solve
> this error ?

oopsy.. forgot to mention, this is in the apache error log.

--------------090807060909030607070506
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
Markus wrote:
<blockquote cite="mid4472CC89.2040204 [at] sakrina.com" type="cite">
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
Phil Ehrens wrote:<br>
<blockquote cite="mid20060522171201.GA13969 [at] ligo.caltech.edu"
type="cite">
<pre wrap="">Markus wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Phil Ehrens wrote:

</pre>
<blockquote type="cite">
<pre wrap="">Markus wrote:


</pre>
<blockquote type="cite">
<pre wrap="">Made all the ca.key and the server.key and sign it via sign.sh everthing
looked good so far.

then the misery begins.

../configure --with apache... --with-ssl --with-mm
--with-crt=/var/local/certs --with -key=/var/local/private
--prefix=../apache_1.3.35 --enabled-shared-ssl

Error:
cannot find SSL x.509 certificated file /var/local/certs


</pre>
</blockquote>
<pre wrap="">It wants the path to the cert, not to the directory containing
the cert. I wonder why they didn't use --with-cert for the
option name?!

</pre>
</blockquote>
<pre wrap="">I put that path in, however it still doesn't work. I put it in like this:
the certs and keys are in /usr/local/certs and /usr/local/private.
and i put in/usr/local/certs
and /usr/local/private
</pre>
</blockquote>
<pre wrap=""><!---->
It wants something like:

/usr/local/certs/httpdcert.pem
^^^^^^^^^^^^^^
|
filename of cert
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) <a
class="moz-txt-link-abbreviated" href="http://www.modssl.org">www.modssl.org</a>
User Support Mailing List <a
class="moz-txt-link-abbreviated" href="mailto:modssl-users [at] modssl.org">modssl-users [at] modssl.or g</a>
Automated List Manager <a
class="moz-txt-link-abbreviated" href="mailto:majordomo [at] modssl.org">majordomo [at] modssl.org</a>


</pre>
</blockquote>
[Mon May 22 21:56:26 2006] [error] mod_ssl: Init: Private key not found
(OpenSSL library error follows)<br>
[Mon May 22 21:56:26 2006] [error] OpenSSL: error:0D094068:asn1
encoding routines:d2i_ASN1_SET:bad tag<br>
[Mon May 22 21:56:26 2006] [error] OpenSSL: error:0D0680A8:asn1
encoding routines:ASN1_CHECK_TLEN:wrong tag<br>
[Mon May 22 21:56:26 2006] [error] OpenSSL: error:0D07803A:asn1
encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error<br>
[Mon May 22 21:56:26 2006] [error] OpenSSL: error:0D09A00D:asn1
encoding routines:d2i_PrivateKey:ASN1 lib<br>
<br>
Someone can put me in the right direction where i have to lok to solve
this error ?<br>
</blockquote>
oopsy.. forgot to mention, this is in the apache error log.<br>
</body>
</html>

--------------090807060909030607070506--
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users [at] modssl.org
Automated List Manager majordomo [at] modssl.org
Markus [ Di, 23 Mai 2006 20:10 ] [ ID #1326334 ]
Webserver » gmane.comp.apache.mod-ssl.user » ssl trouples

Vorheriges Thema: SSL Handshake Re-negotiation
Nächstes Thema: New to https, looking for info on how it is setup with a hosted site.