Wen,

I think you will find that the SSLCertificateFile directive does not belong
to the <Directory...> section. Moving it outside that block may help.

There is a sample configuration file that comes with modssl - best to use
this as your starting point.

Cheers

Mike

At 10:21 AM 5/9/2000 +0800, you wrote:
>modssl-users:
>       after I intalled apache+modssl+openssl,I run command:
>               /usr/local/apache/bin/httpd -DSSL 
>               (or  /usr/local/apache/bin/apachectl startssl).
>shrow next errormessages:
>       "SSLCertificateFile      conf/ssl.crt/server.crt"  line in 
>/usr/local/apache/conf/httpd.conf   file  is not allowed here.can't start 
>httpd.
>
> why?   how can I run httpd with ssl?
>
> in the course of "make certificate",  I use default value other than 
>private key.
>for private key, I input "wen".
>
>my system is rethat6.1,
>
>next are about SSL line in my httpd.conf file.
>
>##################################################
>SSLVerifyClient      none
><Directory /usr/local/apache/htdocs/>
>SSLVerifyClient      require
>SSLVerifyDepth       5
>SSLCertificateFile conf/ssl.crt/server.crt
>SSLCertificatePath conf/ssl.crt
>SSLOptions           +FakeBasicAuth
>SSLRequireSSL
>AuthName             "wen"
>AuthType             Basic
>AuthUserFile         /usr/local/apache/conf/httpd.passwd
>require              valid-user
></Directory>
>
>####################################################
>
>
>
>
>
>
>            wen
>            [EMAIL PROTECTED]
>
>______________________________________________________________________
>Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
>User Support Mailing List                      [EMAIL PROTECTED]
>Automated List Manager                            [EMAIL PROTECTED]

______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to