hi,
I've read the FAQ and scanned the archives. I haven't yet found a
solution.
The problem has come up on the list before: The server starts
successfully, but refuses connections from clients and sends messages
like this to the ssl_log:
[12/Mar/1999:12:30:09 -0600] Unable to set private key
[12/Mar/1999:12:30:09 -0600] ssl_int_SetCertStuff failed
This is a linux 2.0 box (no alpha-gcc problem). I have also done some
diagnostics on the certificate and private key file. The output is
appended below for reference.
My situation is this: I inherited an apache installation whose
certificate proceeded to expire. I obtained a new certificate from
verisign, and replaced the SSLCertificateFile and SSLCertificateKeyFile
with the new certificate and key. I have *not* built mod_ssl or
apache (they were both installed when I started).
can someone shed some light?
thanks in advance,
-Lyn
here are the diagnostics I have run
==================================================================
sudo ssleay x509 -noout -text -in /usr/local/ssl/certs
/www.healthquiz.com.cert
Certificate:
Data:
Version: 1 (0x0)
Serial Number:
7d:20:19:cf:30:c6:67:23:1b:69:46:a7:29:28:63:63
Signature Algorithm: md5WithRSAEncryption
Issuer: C=US, O=RSA Data Security, Inc., OU=Secure Server Certification
Authority
Validity
Not Before: Mar 10 00:00:00 1999 GMT
Not After : Mar 11 23:59:59 2000 GMT
Subject: C=US, ST=Illinois, L=Chicago, O=University Community Health, Inc.,
OU=HealthQuiz, CN=www.healthquiz.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public Key: (1024 bit)
Modulus (1024 bit):
00:e2:a4:06:9b:3b:95:5b:2f:90:3d:4d:d8:f1:a0:
1a:0e:4b:9f:03:d2:75:cc:6f:65:24:a6:07:8e:a3:
e1:38:f5:38:79:9d:a1:d1:8d:c2:3a:f6:fe:24:f1:
ff:61:b1:7f:06:04:57:28:e0:eb:57:04:ac:00:67:
fc:5d:02:e5:52:46:40:a4:ea:1d:d4:47:d7:c2:66:
5d:b6:be:e6:65:15:e5:c9:4b:fa:5e:19:eb:5e:b3:
7d:d7:53:26:8e:74:9b:8a:38:3b:14:da:a3:a8:31:
a5:38:ac:3e:b1:78:dc:75:17:32:0a:24:4f:92:f3:
bc:c6:ba:bc:7e:ea:4e:8f:d1
Exponent: 65537 (0x10001)
Signature Algorithm: md5WithRSAEncryption
61:06:f5:e4:f6:46:4f:01:60:47:e8:90:37:28:1a:8a:4c:a3:
8a:a6:8c:e9:17:e1:61:f2:f5:d9:c1:ff:4e:61:e0:bd:d3:80:
99:8c:b0:cc:1c:e1:b7:fd:bc:a4:0b:07:2d:fc:ef:b9:09:33:
b3:4b:f8:05:dc:a0:e9:6e:10:cc:3a:c6:35:ed:ce:ad:8c:c6:
15:b4:86:ed:26:35:96:dc:23:fe:a4:d4:34:00:be:4d:9b:26:
90:ca:f8:0e:b4:54:44:c0:ac:01:1d:c2:a3:88:c1:61:75:95:
d7:61:cc:67:b4:e2:24:bf:53:3c:6d:4e:0b:86:25:14:42
sudo ssleay rsa -noout -text -in /usr/local/ssl/private/ \
www.healthquiz.com.key
read RSA private key
Enter PEM pass phrase:
Private-Key: (1024 bit)
(private key info)
sudo ssleay x509 -noout -modulus -in /usr/local/ssl/certs/\
www.healthquiz.com.cert | ssleay md5
f164ed1c7409a49da5b99ce6105b88ea
sudo ssleay rsa -noout -modulus -in \
/usr/local/ssl/private/www.healthquiz.com.key | ssleay md5
read RSA private key
Enter PEM pass phrase:
f164ed1c7409a49da5b99ce6105b88ea
______________________________________________________________________
Apache Interface to SSLeay (mod_ssl) www.engelschall.com/sw/mod_ssl/
Official Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
