Hello Friends,
I am still having problem in making openca up and running under UNIX
(unfortunately I donot have access to lynix machine).
I am trying to configure/install this in unix only with the assumption that
Michael Bell succeeded in installing the openca under unix (Hope my
assumption is right).
Here are the details:
I am very Sorry for the LONG description of the problems that I am
facing.....
I think it is time for me to be more clear about what I installed and
configured.
Environment is Unix
'NO' root prevlages
Installed and using currently:
======================================================
perl5.6.1
mod_ssl-2.8.8-1.3.24
flex-2.5.4 which is required in unix to successfully make modssl
openssl-0.9.7-stable-SNAP-20020429
Apache_1.3.24
openca-0.9-SNAP-20020423
======================================================
Installed and not using currently:
======================================================
mysql-3.23.47-sun-solaris2.7-sparc
(did not install the driver and DBI so not using)
openldap-stable-20020115
(unable start the ldap server (I have also installed the version 4.0.14 of
Berkeley DB from Sleepycat Software which is a prereq for ldap).
======================================================
Okey now after configuring openssl and modssl with apache, I am able to
start apache with start and startssl options. I have used make
certificate=custom and generated certificates and keys for ca and server
while making apache but I guess I will not be using these for openca as I
believe that I am supposed to generate all new ca and ra keys, certs from
the web interface. Am I right??
Now when I start the apache ( I guess I need not start the DB as I am using
the default DB), I get the series of Internal server errors (500) as follows
in my log file
first time when I access the htdocs-ca page I get this error in my log file
=========================================================
[Wed May 1 03:20:38 2002] [notice] Apache/1.3.24 (Unix) mod_ssl/2.8.8
OpenSSL/0.9.7-dev configured -- resuming normal operations
[Wed May 1 03:20:38 2002] [notice] Accept mutex: fcntl (Default: fcntl)
[Wed May 1 03:20:41 2002] [notice] caught SIGTERM, shutting down
[Wed May 1 03:20:53 2002] [notice] Apache/1.3.24 (Unix) mod_ssl/2.8.8
OpenSSL/0.9.7-dev configured -- resuming normal operations
[Wed May 1 03:20:53 2002] [notice] Accept mutex: fcntl (Default: fcntl)
syntax error at
/home/pki/public_html/pavansura/openca-0.9/modules/perl5/X500/DN.pm line 7,
near "use 5.6"
BEGIN failed--compilation aborted at
/home/pki/public_html/pavansura/openca-0.9/modules/perl5/OpenCA/OpenSSL.pm
line 60.
BEGIN failed--compilation aborted at
/home/pki/public_html/pavansura/apache_1.3.24/cgi-bin/cgi-ca/ca line 61.
[Wed May 1 03:22:41 2002] [error] [client 128.82.216.13] Premature end of
script headers:
/home/pki/public_html/pavansura/apache_1.3.24/cgi-bin/cgi-ca/ca
=========================================================
I just changed the first line in the ca script to point to perl5.6.1 which
was pointing to perl (old version)
Now I get the follwing error again when I access the htdocs-ca
=========================================================
Can't locate DB_File.pm in @INC (@INC contains:
/home/pki/public_html/pavansura/openca-0.9/modules/perl5/sun4-solaris-thread-multi
/home/pki/public_html/pavansura/openca-0.9/modules/perl5
/home/pki/perl/lib/5.6.1/sun4-solaris-thread-multi /home/pki/perl/lib/5.6.1
/home/pki/perl/lib/site_perl/5.6.1/sun4-solaris-thread-multi
/home/pki/perl/lib/site_perl/5.6.1 /home/pki/perl/lib/site_perl .
/home/pki/public_html/pavansura/openca-0.9/OpenCA/lib/functions) at
/home/pki/public_html/pavansura/openca-0.9/modules/perl5/OpenCA/DB.pm line
67.
BEGIN failed--compilation aborted at
/home/pki/public_html/pavansura/openca-0.9/modules/perl5/OpenCA/DB.pm line
67.
Compilation failed in require at
/home/pki/public_html/pavansura/openca-0.9/OpenCA/lib/functions/initDB line
3.
BEGIN failed--compilation aborted at
/home/pki/public_html/pavansura/openca-0.9/OpenCA/lib/functions/initDB line
3.
Compilation failed in require at
/home/pki/public_html/pavansura/apache_1.3.24/cgi-bin/cgi-ca/ca line 163.
[Wed May 1 03:30:55 2002] [error] [client 128.82.216.13] Premature end of
script headers:
/home/pki/public_html/pavansura/apache_1.3.24/cgi-bin/cgi-ca/ca
=========================================================
It doesnot find the DB_File.pm. Since I have installed the Berkeley DB from
Sleepycat Software I added the path to DB_File.pm in the lib of the ca
script. Is this okey??
Now when I access the htdocs-ca website the error in my log is..
=========================================================
Can't locate OpenCA/Configuration.pm in @INC (@INC contains:
/home/pki/public_html/pavansura/openca-0.9/modules/perl5
/home/pki/public_html/pavansura/db-4.0.14/perl/DB_File
/home/pki/perl/lib/5.6.1/sun4-solaris-thread-multi /home/pki/perl/lib/5.6.1
/home/pki/perl/lib/site_perl/5.6.1/sun4-solaris-thread-multi
/home/pki/perl/lib/site_perl/5.6.1 /home/pki/perl/lib/site_perl .) at
/home/pki/public_html/pavansura/apache_1.3.24/cgi-bin/cgi-ca/ca line 58.
BEGIN failed--compilation aborted at
/home/pki/public_html/pavansura/apache_1.3.24/cgi-bin/cgi-ca/ca line 58.
[Wed May 1 03:41:09 2002] [error] [client 128.82.216.13] Premature end of
script headers:
/home/pki/public_html/pavansura/apache_1.3.24/cgi-bin/cgi-ca/ca
=========================================================
The OpenCA/Configuration.pm is right in the first place where @INC looks
..under perl directory. I am having a feeling that the error in the log is
missleading and there is some other error that I cannot identify...
I am really stuck here.....kindly help me....
My configuration file of openca is...
=========================================================
./configure \
--with-engine=no \
--with-httpd-user=pki \
--with-httpd-group=grad \
--with-openca-user=pki \
--with-openca-group=grad \
--with-openssl-prefix=/home/pki/public_html/pavansura/openssl \
--with-ext-prefix=/home/pki/public_html/pavansura/openca-0.9 \
--with-openca-prefix=/home/pki/public_html/pavansura/openca-0.9/OpenCA \
--prefix=/home/pki/public_html/pavansura/openca-0.9 \
--with-ca-htdocs-fs-prefix=/home/pki/public_html/pavansura/apache_1.3.24/htdocs/htdocs-ca
\
--with-ca-cgi-fs-prefix=/home/pki/public_html/pavansura/apache_1.3.24/cgi-bin/cgi-ca
\
--with-ca-htdocs-url-prefix=/htdocs-ca \
--with-ca-cgi-url-prefix=/cgi-bin/cgi-ca \
--with-ra-htdocs-fs-prefix=/home/pki/public_html/pavansura/apache_1.3.24/htdocs/htdocs-ra
\
--with-ra-cgi-fs-prefix=/home/pki/public_html/pavansura/apache_1.3.24/cgi-bin/cgi-ra
\
--with-ra-htdocs-url-prefix=/htdocs-ra \
--with-ra-cgi-url-prefix=/cgi-bin/cgi-ra \
--with-pub-htdocs-fs-prefix=/home/pki/public_html/pavansura/apache_1.3.24/htdocs/htdocs-public
\
--with-pub-cgi-fs-prefix=/home/pki/public_html/pavansura/apache_1.3.24/cgi-bin/cgi-public
\
--with-pub-htdocs-url-prefix=/htdocs-public \
--with-pub-cgi-url-prefix=/cgi-bin/cgi-public \
--with-web-host=dilbert.cs.odu.edu \
--with-ca-organization="ODU" \
--with-ca-country=US \
--with-ca-locality=Norfolk \
--with-module-prefix=/home/pki/public_html/pavansura/openca-0.9/modules \
--enable-db \
--enable-rbac \
--with-service-mail-account="[EMAIL PROTECTED]"
=========================================================
Finally are these problem.....
{ --with-httpd-user=pki \
--with-httpd-group=grad \
--with-openca-user=pki \
--with-openca-group=grad \ }
Thanks for your patience and time...
Pavan Sura
Masters in Computer Science
Old Dominion University
Norfolk, Virginia.
Email: [EMAIL PROTECTED]
_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp.
