I'm trying to generating a self signed certificate that expires in 30000
days with:
openssl req -new -x509 -nodes -out httpsd.pem -keyout httpsd.pem -days 30000
(Note: not sure if I MUST use a openssl.cnf file - I don't use it in the
above statement).
In my httpsd.conf file, when I specify:
SSLCACertificateFile /opt/apache-1.3.6-SSL/cert/httpsd.pem
SSLCertificateFile /opt/apache-1.3.6-SSL/cert/httpsd.pem
##Commented out## SSLCertificateKeyFile /opt/apache-1.3.6-SSL/cert/somekey.key
I'm also trying to use gcache in my httpsd.conf file, with:
SSLCacheServerPath /opt/apache-1.3.6-SSL/bin/gcache
SSLCacheServerPort 1234
The server starts, but the error log gives me
[Thu Aug 5 18:09:02 1999] [info] removed PID file
/opt/apache-1.3.6-SSL/logs/httpsd.pid (pid=5092)
[Thu Aug 5 18:09:02 1999] [notice] caught SIGTERM, shutting down
[Thu Aug 5 18:09:14 1999] gcache started
[Thu Aug 5 18:09:14 1999] [debug] apache_ssl.c(355): Random input
/dev/urandom(1024) -> 0
[Thu Aug 5 18:09:14 1999] [error] Cannot resolve host name heap --- ignoring!
[Thu Aug 5 18:09:14 1999] gcache started
[Thu Aug 5 18:09:15 1999] [notice] Apache/1.3.6 Ben-SSL/1.36 (Unix)
configured -- resuming normal operations
[Thu Aug 5 18:09:15 1999] [info] Server built: Aug 4 1999 16:11:01
[Thu Aug 5 18:09:26 1999] [debug] apache_ssl.c(355): Random input
/dev/urandom(1024) -> 0
[Thu Aug 5 18:09:26 1999] [error] SSL_accept failed
[Thu Aug 5 18:09:26 1999] [error] error:1407609C:SSL
routines:SSL23_GET_CLIENT_HELLO:http request
I there something I am doing wrong???
Perhaps my openssl command, or Apache directives (besides the "heap"
problem), or the gcache ?
Any advice would be much appreciated. Thanks
--------------------------------------------------------------------------
Joe Novielli x.7703 Email: [EMAIL PROTECTED]
MIS Department
Matrox Electronic Systems Inc. http://www.matrox.com
1055 St-Régis Tel: (514) 822-6000 x. 7703
Dorval, Québec Fax: (514) 822-6262
Canada, H9P 2T4
--------------------------------------------------------------------------
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
