Hi,

> http://192.168.0.1/cgi-bin/ra/RAServer?cmd=getStaticPage&name=index
> it display "Error 6251026
> General Error Aborting connection - you are using a wrong security  
> protocol
> (http)."

OpenCA complains that you are accessing it unencrypted (not SSL  
protected) according to your configuration. Reading the documentation  
and/or browsing this mailing list for answers will surely help you to  
solve this problem.

> and I can't run with https://192.168.0.1/ca/  also i configed my  
> system
> flowing http://ist.uwaterloo.ca/security/lib-proxy/howto/ssleay/ docs
>
> But in the doc i don't understand two  lines:
>
> SSLCertificateFile /software/sslCerts-1/config/certs/httpsd.pem
> SSLCertificateKeyFile /software/sslCerts-1/config/certs/private/ 
> httpsd.pem

Please read the excellent mod_ssl docs at http://www.modssl.org/docs/

> That /software/sslCerts-1/config/certs/httpsd.pem file and
> /software/sslCerts-1/config/certs/private/httpsd.pem  from where  
> and how to
> create it?
> For openca i can make and find it from where?

mod_ssl comes with a script that generates a dummy certificate for  
your web server until you are able to generate a real one from your  
own CA. Use it.

Don't get me wrong, but you are asking a lot from us here. You should  
be able to set up an Apache server and protect it properly with SSL  
before you start thinking about setting up something as complicated  
as a full-fledged PKI system.

In addition, when posting your questions I would recommend to be as  
concise as possible. State your problem, the environment details one  
would need to understand the problem and other details that might be  
needed to answer your question.

Cheers

Martin



-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Openca-Users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to