During the OpenCA configuration phase you should specify the two lines suggestend in the HINT message...
in your case...

   ./configure .... your_oprions ...
       --with-httpd-user=apache
       --with-httpd-group=apache
since I see from the (ps -eo "%U %G %a") command output that "apache" is the user-name and group-name of the owner of the apache process. After reinstalling OpenCA with such options the (ls -al /usr/local/openCA/OpenCA/etc/servers) command should have the following output:

-rw-r-----   1 apache apache 9112 Jan 12 03:51 ca.conf

Let me know
Bye
Giuseppe



Ng JinHui ha scritto:

I have created a new user and group called apache and modify as according to what u have asked me to do. Below is the output of the command ps -eo "%U %G %a" for the apache.

apache   apache   /usr/local/apache2/bin/httpd -DSSL
apache   apache   /usr/local/apache2/bin/httpd -DSSL
apache   apache   /usr/local/apache2/bin/httpd -DSSL
apache   apache   /usr/local/apache2/bin/httpd -DSSL
apache   apache   /usr/local/apache2/bin/httpd -DSSL
apache   apache   /usr/local/apache2/bin/httpd -DSSL
apache   apache   /usr/local/apache2/bin/httpd -DSSL

but i still get the error:

The configuration file /usr/local/openCA/OpenCA/etc/servers/ca.conf exists but can not be read! You probably misconfigured OpenCA during installation. Make sure that you used the correct user and group for your webserver.

HINT:
Under UNIX-like operating systems you can determine the user and group of your webserver by issuing the following command
# ps -eo "%U %G %a"
and look for the process name of your webserver (in most cases httpd)

Use this information when customizing your configure script at the following configuration options:
--with-httpd-user=user id of webserver
--with-httpd-group=apache=group id of webserver

however the permission of the file is still set to like this by the system:

[EMAIL PROTECTED] servers]# ls -al /usr/local/openCA/OpenCA/etc/servers
total 32
drwxr-xr-x   2 nobody nobody 4096 Jan 11 03:24 .
drwxr-xr-x  10 nobody nobody 4096 Jan 11 02:06 ..
-rw-r-----   1 root   nobody 9112 Jan 12 03:51 ca.conf
-rw-r-----   1 root   nobody 9351 Jan  9 01:55 ca.conf.template
lrwxrwxrwx   1 root   root      7 Jan 11 03:24 common.conf -> ca.conf
[EMAIL PROTECTED] servers]#

By the way, I am using CentOS 4, apache-2.0.55, openssl-0.9.8a and openca-0.9.2.4

_________________________________________________________________
Get MSN Hotmail alerts on your mobile. http://mobile.msn.com/ac.aspx?cid=uuhp_hotmail



-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
Openca-Users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openca-users




-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
Openca-Users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to