Hello,

 

I've searched the web regarding this issue but found little to no information

that didn't cover what I've already tried.

 

Running Apache 1.3.26 with OpenSSL 0.9.6g on Solaris 2.7.

 

I was able to successfully test the initial configuration with a test certificate but am now trying

to install a certificate recently received from Verisign.

 

I have performed the following steps:

 

            Sftpd cert.cer from windows client to Solaris server

            Ran "dos2unix cert.cer > dx04-t.cert" to strip out Windows ^M characters

            Ran "mv dx04-t.cert /usr/local/apache/SSLconf/conf/dx04-t.cert"

            Set the following in httpsd.conf:

 

                        SSLCertificateFile /usr/local/apache/SSLconf/conf/dx04-t.cert

                        SSLCertificateKeyFile /usr/local/apache/SSLconf/conf/dx04-t.cert.key

 

When I attempt to start apache, I receive the following messages in the https.error.log:

 

            [Tue Sep 10 17:36:42 2002] [crit] Error reading server certificate      file /usr/local/apache/SSLconf/conf/dx04-t.cert

      [Tue Sep 10 17:36:42 2002] [crit] error:0D0A2007:asn1 encoding       routines:d2i_X509_CINF:expecting an asn1 sequence

      [Tue Sep 10 17:36:42 2002] [crit] error:0D09F004:asn1 encoding       routines:d2i_X509:nested asn1 error

      [Tue Sep 10 17:36:42 2002] [crit] error:0906700D:PEM routines:PEM_ASN1_read_bio:ASN1 lib

 

I get the same messages when I run:

 

      openssl x509 -noout -text -in dx04-t.cert

 

I have setup dozens of other Web Servers in the same fashion (running various Apache and SSL configs)

but this is the first time I've run into this problem.

 

Any ideas or suggestions would be greatly appreciated.

--

Kenneth Reed,

Sr. UNIX Administrator

 

Reply via email to