In article <> you wrote:
> On Sat, 3 Oct 1998 12:05:16 +0200, Ralf S. Engelschall wrote:
>>> [Tue Sep 29 21:51:23 1998] [error] mod_ssl: SSL_accept failed
>>> [Tue Sep 29 21:51:23 1998] [error] SSLeay: error:14094412:SSL routines:SSL3_READ
>>> _BYTES:sslv3 alert bad certificate
>>AFAIK the above SSLeay error isn't related to your server certificate you
>>created with `make certificate'. It's from the SSL_accept stage, i.e. it's the
>>_CLIENT_ certificate which is bad, I think. Do you have any client cert
>>configured in your browser?
> When I try connectin with Netscape 3.0 or 4.05, the same error appears .
> Netscape says "The server's certificate has an invalid signature. You will
> neot be able to connect to site securely" . When I try to connct with IE 4
> or 5, it's just unable to connect but no error log appears. In Netscape,
> I've deleted all the site certificates, so that shouldn't be a problem..
Then the server certificate is the root of your problems.
>>Check your client certificate, please. And additionally
>>try to connect without client cert to at least find out the source of your problems.
> I have redownloaded a fresh apache and the new mod-ssl source, recompiled
> everything and the same thing appears.
How have you created the server certificate?
Can you read them via "ssleay x509 -noout -text -in <file>"
and "ssleay rsa -noout -text -in <file>"?
Are there different SSLeay versions installed on your system?
Ralf S. Engelschall
[EMAIL PROTECTED]
www.engelschall.com
______________________________________________________________________
Apache Interface to SSLeay (mod_ssl) www.engelschall.com/sw/mod_ssl/
Official Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
