I've followed the instructions for a self-signed cert twice through (copying
the commands directly from the FAQ), and both times end up with:

1 out of 1 certificate requests certified, commit? [y/n]y
Write out database with 1 new entries
Data Base Updated
CA verifying: server.crt <-> CA cert
server.crt: /C=US/ST=New York/L=New York/O=Munaco Packing & Rubber
Co./OU=IT/CN=s                    [EMAIL PROTECTED]
error 18 at 0 depth lookup:self signed certificate
/C=US/ST=New York/L=New York/O=Munaco Packing & Rubber
Co./OU=IT/CN=shop.munaco.c                    [EMAIL PROTECTED]
error 7 at 0 depth lookup:certificate signature failure

While a certificate is created, attempting to use it causes Apache not to
run. Is this because the identity given for the CA matches the identity
given for the server certificate? If so, why wasn't this a problem when I
did that using the Apache make option (on a different certificate) for it
rather than the procedure in the FAQ? (I'd don't have the Apache source
sitting around at present, and don't want to have to rebuild it just to get
to that option again.)

In any case, the FAQ appears to be leaving something out on this.

 \/\/ I-I I T 
 Blauvelt
 [EMAIL PROTECTED]
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to