i had similar problems with HP-UX B11.00 and SunOS 5.6. in my case this
happened because our mod_ssl configuration wasn't read in when starting
Apache to serve in HTTP-only. the problem was that the OpenSSL pseudo
random number generator could not be seeded when SSLRandomSeed directives
were not specified. after adding one to the HTTP-only configuration
everything started working fine. your problem might be PRNG related. you
could try applying the attached patch in order to get a bit more verbose
error message.

-- 
        aspa



*** ssl_engine_init.c.dist      Thu Mar 22 16:07:10 2001
--- ssl_engine_init.c   Thu Mar 22 17:04:46 2001
***************
*** 373,378 ****
--- 373,379 ----
  {
      SSLModConfigRec *mc = myModConfig();
      ssl_asn1_t *asn1;
+     int st;
      unsigned char *ucp;
      RSA *rsa;
      DH *dh;
***************
*** 381,392 ****
      if (action == SSL_TKP_GEN) {
  
          /* seed PRNG */
!         ssl_rand_seed(s, p, SSL_RSCTX_STARTUP, "Init: ");
  
          /* generate 512 bit RSA key */
          ssl_log(s, SSL_LOG_INFO, "Init: Generating temporary RSA private keys 
(512/1024 bits)");
          if ((rsa = RSA_generate_key(512, RSA_F4, NULL, NULL)) == NULL) {
              ssl_log(s, SSL_LOG_ERROR, "Init: Failed to generate temporary 512 bit 
RSA private key");
              ssl_die();
          }
          asn1 = (ssl_asn1_t *)ssl_ds_table_push(mc->tTmpKeys, "RSA:512");
--- 382,394 ----
      if (action == SSL_TKP_GEN) {
  
          /* seed PRNG */
!         st = ssl_rand_seed(s, p, SSL_RSCTX_STARTUP, "Init: ");
  
          /* generate 512 bit RSA key */
          ssl_log(s, SSL_LOG_INFO, "Init: Generating temporary RSA private keys 
(512/1024 bits)");
          if ((rsa = RSA_generate_key(512, RSA_F4, NULL, NULL)) == NULL) {
              ssl_log(s, SSL_LOG_ERROR, "Init: Failed to generate temporary 512 bit 
RSA private key");
+           ssl_log(s, SSL_LOG_ERROR, ERR_reason_error_string(ERR_get_error()));
              ssl_die();
          }
          asn1 = (ssl_asn1_t *)ssl_ds_table_push(mc->tTmpKeys, "RSA:512");

Reply via email to