Full_Name: Brad Cox
Version: mod_ssl-2.0.13-1.3.3
OS: linux
Submission from: pwp001.dialup.gmu.edu (129.174.193.201)


I've been trying to get mod_ssl installed on a working apache/mod_perl server
for nearly a week. Thought it is time to ask for help. ;)

Here's the tail of the latest ssl_error_log
[Thu Nov  5 18:36:45 1998] [error] SSLeay: error:0906D06C:PEM
routines:PEM_read_bio:no start line
[Thu Nov  5 20:29:56 1998] [error] (2)No such file or directory: mod_ssl: Can't
open SSL s
erver certificate file /usr/local/apache/conf/ssl.crt/server.csr, nor
/usr/local/ssl/certs
//usr/local/apache/conf/ssl.crt/server.csr

Here are the files in my apache/conf directory

vs2:/usr/local/apache/conf# ls -Rl .
total 121
-rw-r--r--   1 bcox     daemon       3298 Nov  5 08:51 access.conf
-rw-r--r--   1 bcox     daemon       2797 Oct  3 07:05 access.conf-dist
-rw-r--r--   1 bcox     daemon       3083 Sep  3 14:04 access.conf-dist-win
-rw-r--r--   1 bcox     daemon       1608 Oct  3 07:05
highperformance.conf-dist
-rw-r--r--   1 bcox     daemon      14781 Nov  5 20:48 httpd.conf
-rw-r--r--   1 bcox     daemon      14237 Oct 23 22:23 httpd.conf-dist
-rw-r--r--   1 bcox     daemon       8640 Sep 12 16:16 httpd.conf-dist-win
-rw-r--r--   1 bcox     daemon      10021 Oct  3 07:05 httpd.conf-dist.orig
-rw-r--r--   1 bcox     daemon      12441 Jul 18 07:35 magic
-rw-r--r--   1 bcox     daemon       2952 Sep 30 13:42 mime.types
-rw-r--r--   1 bcox     daemon      18746 Nov  1 18:16 srm.conf
-rw-r--r--   1 bcox     daemon       8440 Oct  5 13:53 srm.conf-dist
-rw-r--r--   1 bcox     daemon       8862 Aug 30 17:47 srm.conf-dist-win
dr-xr-xr-x   2 nobody   daemon       1024 Nov  5 13:08 ssl.crt
dr-xr-xr-x   2 nobody   daemon       1024 Nov  4 22:41 ssl.csr
dr-xr-xr-x   2 nobody   daemon       1024 Nov  5 13:08 ssl.key

ssl.crt:
total 111
lrwxrwxrwx   1 nobody   root            6 Nov  5 13:08 024ff96f.0 -> ca.crt
lrwxrwxrwx   1 nobody   root           10 Nov  5 13:08 024ff96f.1 -> server.crt
-r--r--r--   1 nobody   daemon        887 Sep 23 04:52 Makefile
-r--r--r--   1 nobody   daemon       1225 Sep  9 04:28 README.CRT
-r--r--r--   1 nobody   daemon     102580 Sep  9 03:41 ca-bundle.crt
-r--r--r--   1 nobody   daemon       1054 Nov  5 13:07 ca.crt
lrwxrwxrwx   1 nobody   root           12 Nov  5 13:08 e52d41d0.0 ->
snakeoil.crt
-r--r--r--   1 nobody   daemon       1054 Nov  5 13:08 server.crt
-r--r--r--   1 nobody   daemon       1078 Oct  9 04:36 snakeoil.crt

ssl.csr:
total 3
-r--r--r--   1 nobody   daemon        925 Sep  9 04:24 README.CSR
-r--r--r--   1 nobody   daemon        729 Nov  5 13:07 ca.csr
-r--r--r--   1 nobody   daemon        729 Nov  5 13:08 server.csr

ssl.key:
total 4
-r--r--r--   1 nobody   daemon        946 Sep  9 04:28 README.KEY
-r--r--r--   1 nobody   daemon        951 Nov  5 13:08 ca.key
-r--r--r--   1 nobody   daemon        963 Nov  5 13:08 server.key
-r--r--r--   1 nobody   daemon        887 Oct  9 04:36 snakeoil.key

Here are the relevant parts of my httpd.conf
<IfDefine SSL>
        SSLDisable
        Listen 129.174.23.43:443
        <VirtualHost _default_:443>
                ServerAdmin [EMAIL PROTECTED]
                DocumentRoot /usr/local/htdocs
                ServerName www.virtualschool.edu
                ErrorLog /usr/local/apache/var/log/ssl_error_log
                TransferLog /usr/local/apache/var/log/ssl_access_log
                SSLCacheServerPort /usr/local/apache/var/run/ssl_gcache_port
                SSLCacheServerPath /usr/local/apache/sbin/ssl_gcache
                SSLCACertificateFile /usr/local/apache/conf/ssl.crt/ca-bundle.crt
                SSLCertificateFile /usr/local/apache/conf/ssl.crt/server.crt
                SSLCertificateKeyFile /usr/local/apache/conf/ssl.key/server.key
                SSLLogFile /usr/local/apache/var/log/ssl.log
    SSLRequireSSL
                SSLSessionCacheTimeout 15
                SSLVerifyDepth 10
                SSLEnable
#               SLVerifyClient none
#               SSLMutex file:/usr/local/apache/var/run/ssl.mutex
#               SSLSessionCache /usr/local/apache/var/run/ssl.scache
#   SSLEngine on
        </VirtualHost>
</IfDefine>

(eg no .csr files mentioned anywhere I see)

Documents are very confusing/inconsistent re: what needs to go where. For
example, 

SSLCertificateFile /usr/local/apache/conf/sslcerts/server.pem

but make certificate generates no such directory or file



______________________________________________________________________
Apache Interface to SSLeay (mod_ssl)   www.engelschall.com/sw/mod_ssl/
Official Support Mailing List               [EMAIL PROTECTED]
Automated List Manager                       [EMAIL PROTECTED]

Reply via email to