Full_Name: Baird J. Ramsey
Version: 2.3.5
OS: linux (Red Hat 6.0)
Submission from: (NULL) (209.223.86.50)


I have mod_ssl compiled with mm, openssl installed on the system, and have added
php3 (via DSO).  It will run from time to time - but if I need to restart the
server when changing the config file, I can't do it.  I will stop the server
using apachectrl startssl command and get the following:

[root@gandalf bjramsey]# apachectl startssl
Apache/1.3.6 mod_ssl/2.3.5 (Pass Phrase Dialog)
Some of your private key files are encrypted for security reasons.
In order to read them you have to provide us with the pass phrases.

Server www.g3sys.com:443
Enter pass phrase:
Apache:mod_ssl:Error: Private key not found.
**Stopped
/usr/local/apache/bin/apachectl startssl: httpd could not be started


The httpd command shows this:
[root@gandalf bjramsey]# httpd -DSSL
Apache/1.3.6 mod_ssl/2.3.5 (Pass Phrase Dialog)
Some of your private key files are encrypted for security reasons.
In order to read them you have to provide us with the pass phrases.

Server www.g3sys.com:443
Enter pass phrase:
Apache:mod_ssl:Error: Private key not found.
**Stopped      

The error log shows the following:
[Wed Jul  7 10:24:59 1999] [error] OpenSSL: error:0D09B08F:asn1 encoding
routine
s:d2i_PrivateKey:unknown public key type
[Wed Jul  7 10:26:12 1999] [error] mod_ssl: Init: Private key not found.
(OpenSSL library error follows)  

These two repeat again and again, untill it works... (and that is just exactly
what I mean.  I will wait for a while (might be an hour, or might be a day, and
then it will work.  There does not seem to be any logic to the amount of time -
once it was three days, another time it was a few minutes...  A reboot will not
fix the problem, nore will anything else that I can find.)

The odd thing is that when it will work, it works fine untill I have to restart
the service again.  I am having a lot of trouble with this, since it is a
production server, and we have some major ecomerce people looking at hosting
with us.  

I would appriciate any help you can offer.  I am not a guru, so don't exclude
plain and simple stupidity on my part.  If there is anything else that you need,
let me know...

Baird

______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to