Hi, all.  Hopefully this is the appropriate list for my question, though
it's certainly possible that it could be a mod_ssl problem.

I'm running Apache 1.3.26, OpenSSL 0.9.6e, and mod_ssl 2.8.10-1.3.26.  I
believe I was previously using OpenSSL 0.9.6c though it could have been d.
 All of them were installed using the Slackware-current packages.

With my previous version of OpenSSL, everything worked fine when I started
Apache.  I would get a prompt to enter my passphrase, and then httpd would
start after entering the passphrase successfully.  I upgraded OpenSSL a
week or two ago and https was still working.  Then I had a brief loss of
power to the server and it rebooted.  When it came back up, I could no
longer start Apache with SSL support.  I get this:

Apache:mod_ssl:Error: Private key not found.
**Stopped

So I checked the httpd.conf, and it was still pointing to the correct key
file.  After trying numerous different things, I finally tried the same
key with no passphrase, and that was successful.  The above error occurs
without prompting for a passphrase first.

When I try to start Apache and use a key that has a passphrase, my
error_log shows the following:

[Fri Sep 20 12:04:08 2002] [error] mod_ssl: Init: Private key not found
(OpenSSL
library error follows)
[Fri Sep 20 12:04:08 2002] [error] OpenSSL:
error:0D084069:lib(13):func(132):reason(105)
[Fri Sep 20 12:04:08 2002] [error] OpenSSL:
error:0D09D082:lib(13):func(157):reason(130)
[Fri Sep 20 12:04:08 2002] [error] OpenSSL:
error:0D09B00D:lib(13):func(155):reason(13)

Can anyone tell me why it will not work with a passphrase now when it did
previously?  And how can I fix it so it will work with key that has a
passphrase instead of just working with a key that has no passphrase?

Thanks,
Nate


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to