David,

Have you looked at the modssl FAQ?  It is at
http://www.modssl.org/docs/2.8/ssl_faq.html#ToC28

The FAQ contains instructions for using openssl to create a certificate.
They should work.  The instructions that you mention look pretty similar but
you never know.

If you could send me the certificate that you generated, I would be happy to
take a look at it for you and try it on my test web server that has a self
signed cert.

Richard
        Richard W. Lane
        Science Applications International Corporation (SAIC)
        7125 Columbia Gateway Dr. 300
        Columbia, MD 21046
        (410)953-6854 (Desk)
        (410)953-7001 (fax)


-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Thursday, July 12, 2001 10:38 AM
To: [EMAIL PROTECTED]
Subject: Expired Certificate



Folks,

The certificate at one of our web sites has expired. It's a self-signed
certificate and we want to create another. The problem is when we try to
sign the new certificate by running sign.sh we get the following error
message:

error 7 at 0 depth lookup: certificate signature failure.

I found some instructions at
http://www.iu.hio.no/~mark/WebCourse/node25.html
which implied we could ignore this error but if we do we get a message
saying "The server's certificate has an invalid signature".

I even got hold of a set of perl scripts for creating a certificate from
the openssl.org web site. They produced the same error.

What's likely to be causing this, please, and how can we get round it?

I don't know what versions of anything were installed on this machine, but
the installation appears to date from July 1999, if that helps

TIA for your advice,

Dave Smith


______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to