I've been working on reverse proxy server on Solaris 8 system. Apache
2.0.39, using openssl-0.9.6c.

Lines in httpd.conf are as follows:

SSLProxyEngine On
SSLProxyMachineCertificateFile
/usr/local/apache2/conf/ssl.crt/ca-chain.crt
SSLProxyVerify on
SSLProxyVerifyDepth 2
ProxyPass / https://name.of.server/
ProxyPassReverse / https://name.of.server/

I start proxy server with "apachectl startssl"

In file ca-chain.crt is concatenated certificates for local issuer CA &
root CA.
When attempting to use proxy, I get error message in error_log which
says, [error] Certificate Verification: Error (19): self signed
certificate in certificate chain, [error] SSL Proxy connect failed

I've been trying for two days to figure out.  I thought the root CA
certificate was supposed to be self signed.  Can anyone tell me what I
am doing wrong?

Thanks,
Janice Eely
[EMAIL PROTECTED]

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to