Look under the OpenSSL docs/HOWTO directory for a text file called
formats.txt (I think).  It should contain directions/pointers on converting
certificates from one form to another.  There are also several other helpful
files in the distribution which should help you with outputting all the
files from the certificate you will need to get your server up and running.

-David Powers
Milestone Capital Management

----- Original Message -----
From: "Claudio Higashi" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, May 10, 2001 2:57 PM
Subject: How to configure Apache to use certificate in PKCS#7 structure?


Hi all,

I received my Certificate File (.crt) from a CA (certisign) but the file
is in a PKCS#7 structure.
The problem is that Apache does not start when I try to use this
Certificate File.
It looks like mod_ssl is trying to open my .crt file as a file in X509
structure...

Using:
- Apache 1.3.12
- mod_ssl 2.6.5
- OpenSSL 0.9.5a


Some few lines of some files:

-------------- from httpd.conf -------------------

SSLCertificateFile conf/ssl.crt/server.crt
SSLCertificateKeyFile conf/ssl.key/server.key

----------------   end   -------------------------



--------------- from apache log file -------------

[Thu May 10 07:53:04 2001] [error] mod_ssl: Init: Unable to read server
certific
ate from file /usr/apache/conf/ssl.crt/server.crt (OpenSSL library error
follows
)

[Thu May 10 07:53:04 2001] [error] OpenSSL: error:0D09F007:asn1 encoding
routine
s:d2i_X509:expecting an asn1 sequence

-----------------   end    -----------------------



How can I configure Apache/mod_ssl correctly?
Any suggestions or comments will be very appreciated!

--
Claudio Higashi
Software Engineer
Phone: +55 19 3737-4540
Fax  : +55 19 3737-4501
CI&T - software enabling the e-world
http://www.cit.com.br
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]


______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to