There are several posts to this effect in the archive if you do a search on
"Failed to Generate".
This occurred for my when I upgraded to openssl 0.9.5a without upgrading
mod-ssl from 2.5.1-1.3.11.
I solved my problem by upgrading to Apache 1.3.12 and modssl 2.6.2-1.3.12.
After the upgrade, the builtin option to SSLRandomSeed works again.
See the FAQ at
FAQ: http://www.modssl.org/docs/2.6/ssl_faq.html#entropy
http://www.openssl.org/support/faq.html#6
And review the reference: SSLRandonSeed.
It appears that on Solaris, we do not have a random seed generator and a
cursory
look in the usual places did not find one. The Modssl distribution includes a
truerand.c file which I will take a look at next week. Please let me know
if you find a
nicely packaged truerand anywhere!!!!
Regards
At 01:59 PM 4/14/00, you wrote:
>[EMAIL PROTECTED]
To: modssl users <[EMAIL PROTECTED]>
Subject: HELP! mod_ssl/apache error driving me nuts!
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
I've been hammering on this problem all day. I've been through all the
installation docs etc. and I can't fix it. When I start apache with an SSL
certificate, it logs an error of "[Fri Apr 14 16:26:20 2000] [error]
mod_ssl: Init: Failed to generate temporary 512 bit RSA private key"
Here's my openssl config:
./config --prefix=/opt/openssl-0.9.5a \
--openssldir=/opt/openssl-0.9.5a \
-L`pwd`/../rsaref-2.0/local/ rsaref \
no-idea -fPIC
I'm using the "-fPIC" parameter since I'm on Solaris 7. Openssl seems to
be working just fine.
Here's my mod_ssl config:
./configure \
--with-apache=../apache_1.3.12 \
--with-ssl=../openssl-0.9.5a \
--with-rsa=../rsaref-2.0/local \
--prefix=/opt/apache-1.3.12 \
--enable-shared=ssl
My apache config:
SSL_BASE=../openssl-0.9.5a
RSA_BASE=../rsaref-2.0/local
export SSL_BASE RSA_BASE
./configure \
--prefix=/opt/apache-1.3.12 \
--enable-rule=SHARED_CORE \
--enable-module=ssl \
--enable-module=unique_id \
--enable-module=rewrite \
--enable-module=expires \
--enable-module=info \
--enable-module=so \
--enable-module=status \
--enable-module=vhost_alias \
--enable-shared=max \
--disable-shared=vhost_alias \
--disable-module=userdir \
--disable-module=autoindex \
--disable-module=imap
I'm also running Jserv. Just in case, here's the Jserv config:
./configure \
--prefix=/opt/ApacheJServ-1.1 \
--with-apxs=/opt/apache-1.3.12/bin/apxs \
--with-JSDK=/opt/jsdk/lib \
--enable-EAPI \
--disable-debugging
mod_perl is also giving me some problems, so I'm not loading the module.
Here's the mod_perl config just to complete the whole picture. :-)
perl Makefile.PL \
NO_HTTPD=1 \
WITH_APXS=/opt/apache-1.3.12/bin/apxs \
USE_APXS=1 \
EVERYTHING=1
Apache starts up fine and even asks me for my certificate password, then
it just dies...
Any help would be GREATLY appreciated.
Thanks,
js.
Have a great day!
--Robert Monical
--Director of CRM Development
[EMAIL PROTECTED]
"The Truth is Out There"
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
