Ok, I am officially embarrassed. I copied the cert into a file using notepad and it named the file foo.pem.txt for me.
I just don't use windows for much more than reading email and web browsing.... Thanks, Bryan Wooten [email protected] Work: 801.585.9323 Cell: 801.414.3593 -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Phil Ames Sent: Friday, August 06, 2010 3:13 PM To: [email protected] Subject: Re: [cas-user] Mod_auth_cas problem with CASCertificatePath If that is the exact certificate file, it may be corrupt: $ openssl x509 -in foo.pem -text unable to load certificate 26236:error:0D07209B:asn1 encoding routines:ASN1_get_object:too long:asn1_lib.c:142: 26236:error:0D068066:asn1 encoding routines:ASN1_CHECK_TLEN:bad object header:tasn_dec.c:1303: 26236:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error:tasn_dec.c:380:Type=X509 26236:error:0906700D:PEM routines:PEM_ASN1_read_bio:ASN1 lib:pem_oth.c:83: Can you try the same command and verify that the file is not corrupt? -Phil On Fri, Aug 6, 2010 at 4:55 PM, Bryan Wooten <[email protected]> wrote: > When I try to start Apache 2.2.2 on Windows Server 2008 I get the following > error: > > > > MOD_AUTH_CAS: Certificate Authority file > 'c:/kronos/apache/conf/ssl/casRootCA.pem' is not a regular file or directory > > > > The .pem file is of the format > > > > -----BEGIN CERTIFICATE----- > > MIIGVTCCBT2gAwIBAgIQCFH5WYFBRcq94CTiEsnCDjANBgkqhkiG9w0BAQUFADBs > > 9ZKNu8BVIASm2LAXFszj0Mi0PeXZhMbT9m5teMl5Q+h6N/9cNUm/ocU= > > -----END CERTIFICATE----- > > > > Does anyone have any ideas what the problem is? > > > > Cheers, > > > > > > Bryan Wooten > > > > [email protected] > > Work: 801.585.9323 > > Cell: 801.414.3593 > > > > -- > You are currently subscribed to [email protected] as: > [email protected] > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
