Hi,

When I recompiled cherokee against a newer openssl, I did this:

in /usr/src/openssl-0.9.8m:
./config && make && make test && make install
(all tests passed)

I configured cherokee as follows:
cherokee config.status '0.99.43'
configured by ./configure, generated by GNU Autoconf 2.65,
  with options "'--with-wwwgroup=www-data' '--with-wwwuser=www-data'
'--with-wwwroot=/var/www/default' '--prefix=/' '--exec-prefix=/usr/local/'
'--with-mysql=no' '--with-libssl=/usr/local/ssl'"

When I did make, I verified -I/usr/local/ssl where applicable

I receive the following error when trying to start the newly compiled
cherokee.

[15/03/2010 18:20:43.129] (error) cryptor_libssl.c:340 - OpenSSL: cannot use
certificate file '/etc/cherokee/ssl/bestbridalprices.pem':
error:2606A074:engine routines:ENGINE_by_id:no such engine
[15/03/2010 18:20:43.129] (critical) server.c:746 - cannot initialize TLS
for 'www.bestbridalprices.com' virtual host

Any ideas?

Ryan

On Mon, Mar 15, 2010 at 11:11 AM, Ryan McIntosh <[email protected]>wrote:

> Testing this with openssl s_client before and after a restart show
> identical certificates being served - with the exception of the session id.
>
> Ryan
>
>
> On Mon, Mar 15, 2010 at 11:09 AM, [email protected] <[email protected]
> > wrote:
>
>>
>> On Mar 15, 2010, at 12:03 PM, Ryan McIntosh wrote:
>>
>> > Does anyone have information on this error?  The cherokee server is
>> running an ecommerce site and my client is greatly troubled by this issue.
>>  I can restart cherokee with a cron job periodically, but that really isn't
>> a great fix.
>>
>> Have you pulled the "bad certificate" to see whether it's pulling the
>> default cert out sometimes, and serving the real one the rest of the time?
>>
>> This would show one type of bug in the server whereas, if the
>> certificate's getting corrupted as it's served, it might show something
>> completely different.
>>
>> S
>>
>>
>
_______________________________________________
Cherokee mailing list
[email protected]
http://lists.octality.com/listinfo/cherokee

Reply via email to