On Fri, Nov 06, 1998, [EMAIL PROTECTED] wrote:
>[...]
> I've been trying to get mod_ssl installed on a working apache/mod_perl
> server for nearly a week. Thought it is time to ask for help. ;)
>
> Here's the tail of the latest ssl_error_log
> [Thu Nov 5 18:36:45 1998] [error] SSLeay: error:0906D06C:PEM
> routines:PEM_read_bio:no start line
> [Thu Nov 5 20:29:56 1998] [error] (2)No such file or directory: mod_ssl: Can't
> open SSL s
> erver certificate file /usr/local/apache/conf/ssl.crt/server.csr, nor
> /usr/local/ssl/certs
> //usr/local/apache/conf/ssl.crt/server.csr
>[...]
> Here are the relevant parts of my httpd.conf
> <IfDefine SSL>
> SSLDisable
> Listen 129.174.23.43:443
> <VirtualHost _default_:443>
> ServerAdmin [EMAIL PROTECTED]
> DocumentRoot /usr/local/htdocs
> ServerName www.virtualschool.edu
> ErrorLog /usr/local/apache/var/log/ssl_error_log
> TransferLog /usr/local/apache/var/log/ssl_access_log
> SSLCacheServerPort /usr/local/apache/var/run/ssl_gcache_port
> SSLCacheServerPath /usr/local/apache/sbin/ssl_gcache
> SSLCACertificateFile /usr/local/apache/conf/ssl.crt/ca-bundle.crt
> SSLCertificateFile /usr/local/apache/conf/ssl.crt/server.crt
> SSLCertificateKeyFile /usr/local/apache/conf/ssl.key/server.key
> SSLLogFile /usr/local/apache/var/log/ssl.log
> SSLRequireSSL
> SSLSessionCacheTimeout 15
> SSLVerifyDepth 10
> SSLEnable
> # SLVerifyClient none
> # SSLMutex file:/usr/local/apache/var/run/ssl.mutex
> # SSLSessionCache /usr/local/apache/var/run/ssl.scache
> # SSLEngine on
> </VirtualHost>
> </IfDefine>
>
> (eg no .csr files mentioned anywhere I see)
Sorry, but this cannot be. I've looked at the source and the string
"/usr/local/apache/conf/ssl.crt/server.csr" comes directly from
SSLCertificateFile's argument. So when the error talks about "...server.csr"
your test was with "SSLCertificateFile .../server.csr" and not with the above
"SSLCertificateFile /usr/local/apache/conf/ssl.crt/server.crt". Can it be that
you confused yourself while testing various combinations?
> Documents are very confusing/inconsistent re: what needs to go where. For
> example,
>
> SSLCertificateFile /usr/local/apache/conf/sslcerts/server.pem
>
> but make certificate generates no such directory or file
Ops, yes. That's right. I've fixed those inconsistencies now for 2.0.15.
Thanks for the hint.
Ralf S. Engelschall
[EMAIL PROTECTED]
www.engelschall.com
______________________________________________________________________
Apache Interface to SSLeay (mod_ssl) www.engelschall.com/sw/mod_ssl/
Official Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
