Hello, ....
I am having Error 6251043, General Error Aborting connection - you are
using a too short symmetric keylength (). I have read this
mail-archive with "Error 6251043" keywords. But sorry, I still
couldn't make https connection. I am having difficulty, how and where
to put the SSLOptions +StdEnvVars +ExportCertData configuration.
I am using Debian Sarge. Before I am changing to https protocol, I
have been succeeded using http protocol. Therefor I change the
*.xml.template at /usr/local/openra/openca/etc/access_control and at
/usr/local/openca/openca/etc/access_control.
Then, I've added this to /etc/apache-ssl/httpd.conf
# OpenCA Mods
# CA Aliases
Alias /ca /usr/local/openca/httpd/htdocs/ca/
Alias /ca-node /usr/local/openca/httpd/htdocs/ca-node
ScriptAlias /cgi-bin/ca/ /usr/local/openca/httpd/cgi-bin/ca/
ScriptAlias /cgi-bin/ca-node/ /usr/local/openca/httpd/cgi-bin/ca-node/
# RA Aliases
Alias /ra /usr/local/openra/httpd/htdocs/ra/
Alias /ra-node /usr/local/openra/httpd/htdocs/ra-node/
ScriptAlias /cgi-bin/ra/ /usr/local/openra/httpd/cgi-bin/ra/
ScriptAlias /cgi-bin/ra-node /usr/local/openra/httpd/cgi-bin/ra-node/
# Pub Aliases
Alias /pub /usr/local/openra/httpd/htdocs/pub/
ScriptAlias /cgi-bin/pub/ /usr/local/openra/httpd/cgi-bin/pub/
# LDAP Aliases
Alias /ldap/ /usr/local/openra/httpd/htdocs/ldap/
ScriptAlias /cgi-bin/ldap/ /usr/local/openra/httpd/cgi-bin/ldap/
# OpenCA Mods Directory
<Directory "/usr/local/openca/httpd/cgi-bin/">
AllowOverride None
Options ExecCGI
Order allow,deny
Allow from all
</Directory>
<Directory "/usr/local/openra/httpd/cgi-bin/">
AllowOverride None
Options ExecCGI
Order allow,deny
Allow from all
</Directory>
<Directory "/usr/local/openca/httpd/htdocs/">
AllowOverride None
Options FollowSymLinks Indexes
Order allow,deny
Allow from all
</Directory>
<Directory "/usr/local/openra/httpd/htdocs/">
AllowOverride None
Options FollowSymLinks Indexes
Order allow,deny
Allow from all
</Directory>
<Directory "/usr/local/openra/httpd/cgi-bin/pub/">
AllowOverride None
Options FollowSymLinks Indexes
Order allow,deny
Allow from all
#SSLEngine on
#SSLOptions +StdEnvVars
</Directory>
<Directory "/usr/local/openra/httpd/htdocs/ldap/">
AllowOverride None
Options FollowSymLinks Indexes
Order allow,deny
Allow from all
</Directory>
I've read the manual
http://www.openca.info/docs/guide/openca-guide.html#id2545243, but I
still don't know how and where to put the
SSLOptions +StdEnvVars configuration.
Thank you for your attention.
Regards
--
Zaki Akhmad
-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Openca-Users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openca-users
