i had similar problems with HP-UX B11.00 and SunOS 5.6. in my case this
happened because our mod_ssl configuration wasn't read in when starting
Apache to serve in HTTP-only. the problem was that the OpenSSL pseudo
random number generator could not be seeded when SSLRandomSeed directives
were not specified. after adding one to the HTTP-only configuration
everything started working fine. your problem might be PRNG related. you
could try applying the attached patch in order to get a bit more verbose
error message.
--
aspa
*** ssl_engine_init.c.dist Thu Mar 22 16:07:10 2001
--- ssl_engine_init.c Thu Mar 22 17:04:46 2001
***************
*** 373,378 ****
--- 373,379 ----
{
SSLModConfigRec *mc = myModConfig();
ssl_asn1_t *asn1;
+ int st;
unsigned char *ucp;
RSA *rsa;
DH *dh;
***************
*** 381,392 ****
if (action == SSL_TKP_GEN) {
/* seed PRNG */
! ssl_rand_seed(s, p, SSL_RSCTX_STARTUP, "Init: ");
/* generate 512 bit RSA key */
ssl_log(s, SSL_LOG_INFO, "Init: Generating temporary RSA private keys
(512/1024 bits)");
if ((rsa = RSA_generate_key(512, RSA_F4, NULL, NULL)) == NULL) {
ssl_log(s, SSL_LOG_ERROR, "Init: Failed to generate temporary 512 bit
RSA private key");
ssl_die();
}
asn1 = (ssl_asn1_t *)ssl_ds_table_push(mc->tTmpKeys, "RSA:512");
--- 382,394 ----
if (action == SSL_TKP_GEN) {
/* seed PRNG */
! st = ssl_rand_seed(s, p, SSL_RSCTX_STARTUP, "Init: ");
/* generate 512 bit RSA key */
ssl_log(s, SSL_LOG_INFO, "Init: Generating temporary RSA private keys
(512/1024 bits)");
if ((rsa = RSA_generate_key(512, RSA_F4, NULL, NULL)) == NULL) {
ssl_log(s, SSL_LOG_ERROR, "Init: Failed to generate temporary 512 bit
RSA private key");
+ ssl_log(s, SSL_LOG_ERROR, ERR_reason_error_string(ERR_get_error()));
ssl_die();
}
asn1 = (ssl_asn1_t *)ssl_ds_table_push(mc->tTmpKeys, "RSA:512");