RE: Openssl Error + Apache
It means that the file that it's attempting to read does not have the proper format of a .crt. Take a look of your cert in notepad, does the first line shows something like ---BEGIN CERTIFICATE . If no, then regenerate your cert. SS --- [EMAIL PROTECTED] wrote: I ran the command below and I did receive an error so it looks like something is indeed wrong with the SSL Certificate. If anyone has any ideas how what I can look at regarding this error I would appreciate it. Thanks 2705:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:662:Expecting: TRUSTED CERTIFICATE From: [EMAIL PROTECTED] on behalf of Dr. Stephen Henson Sent: Sun 10/8/2006 12:01 PM To: openssl-users@openssl.org Subject: Re: Openssl Error + Apache On Sat, Oct 07, 2006, [EMAIL PROTECTED] wrote: Hi there ~ I have an Apache installation running mod_ssl and would like to setup another VirtualHost that runs under SSL on a different port (e.g. 8443). The default site on port 443 is running fine with SSL. The new certificate I have installed for the second site appears to be incorrect or the version of OpenSSL I have is not up to date. This causes Apache to crash. Can someone look at the error(s) below and please tell me where to start or how to fix it? Errors: [Fri Oct 6 13:37:21 2006] [error] mod_ssl: Init: Unable to read server certificate from file /apache/conf /mycertificatename.crt (OpenSSL library error follows) [Fri Oct 6 13:37:21 2006] [error] OpenSSL: error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag [Fri Oct 6 13:37:21 2006] [error] OpenSSL: error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error Thanks in advance That indicates it doesn't like the certificate file in mycertificatename.crt. It may be corrupt or in the wrong format. Try the command: openssl x509 -in mycertificatename.crt to see if you get the same error. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk __ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED] __ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED] __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
RE: Openssl Error + Apache
It appears the certificate file was pasted in the file wrong. It was missing the -BE of -BEGIN CERTIFICATE-. Thank you for the help everyone. Gary Mack Associate Systems Administrator www.hubbardone.com Phone: (312) 873 - 6886 Fax: (312) 873 - 6801 [EMAIL PROTECTED] Hubbard One is a Thomson Elite Business. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Siew San Yu Sent: Monday, October 09, 2006 3:28 AM To: openssl-users@openssl.org Subject: RE: Openssl Error + Apache It means that the file that it's attempting to read does not have the proper format of a .crt. Take a look of your cert in notepad, does the first line shows something like ---BEGIN CERTIFICATE . If no, then regenerate your cert. SS --- [EMAIL PROTECTED] wrote: I ran the command below and I did receive an error so it looks like something is indeed wrong with the SSL Certificate. If anyone has any ideas how what I can look at regarding this error I would appreciate it. Thanks 2705:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:662:Expecting: TRUSTED CERTIFICATE From: [EMAIL PROTECTED] on behalf of Dr. Stephen Henson Sent: Sun 10/8/2006 12:01 PM To: openssl-users@openssl.org Subject: Re: Openssl Error + Apache On Sat, Oct 07, 2006, [EMAIL PROTECTED] wrote: Hi there ~ I have an Apache installation running mod_ssl and would like to setup another VirtualHost that runs under SSL on a different port (e.g. 8443). The default site on port 443 is running fine with SSL. The new certificate I have installed for the second site appears to be incorrect or the version of OpenSSL I have is not up to date. This causes Apache to crash. Can someone look at the error(s) below and please tell me where to start or how to fix it? Errors: [Fri Oct 6 13:37:21 2006] [error] mod_ssl: Init: Unable to read server certificate from file /apache/conf /mycertificatename.crt (OpenSSL library error follows) [Fri Oct 6 13:37:21 2006] [error] OpenSSL: error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag [Fri Oct 6 13:37:21 2006] [error] OpenSSL: error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error Thanks in advance That indicates it doesn't like the certificate file in mycertificatename.crt. It may be corrupt or in the wrong format. Try the command: openssl x509 -in mycertificatename.crt to see if you get the same error. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk __ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED] __ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED] __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager [EMAIL PROTECTED] __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
Re: Openssl Error + Apache
On Sat, Oct 07, 2006, [EMAIL PROTECTED] wrote: Hi there ~ I have an Apache installation running mod_ssl and would like to setup another VirtualHost that runs under SSL on a different port (e.g. 8443). The default site on port 443 is running fine with SSL. The new certificate I have installed for the second site appears to be incorrect or the version of OpenSSL I have is not up to date. This causes Apache to crash. Can someone look at the error(s) below and please tell me where to start or how to fix it? Errors: [Fri Oct 6 13:37:21 2006] [error] mod_ssl: Init: Unable to read server certificate from file /apache/conf /mycertificatename.crt (OpenSSL library error follows) [Fri Oct 6 13:37:21 2006] [error] OpenSSL: error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag [Fri Oct 6 13:37:21 2006] [error] OpenSSL: error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error Thanks in advance That indicates it doesn't like the certificate file in mycertificatename.crt. It may be corrupt or in the wrong format. Try the command: openssl x509 -in mycertificatename.crt to see if you get the same error. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
RE: Openssl Error + Apache
I ran the command below and I did receive an error so it looks like something is indeed wrong with the SSL Certificate. If anyone has any ideas how what I can look at regarding this error I would appreciate it. Thanks 2705:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:662:Expecting: TRUSTED CERTIFICATE From: [EMAIL PROTECTED] on behalf of Dr. Stephen Henson Sent: Sun 10/8/2006 12:01 PM To: openssl-users@openssl.org Subject: Re: Openssl Error + Apache On Sat, Oct 07, 2006, [EMAIL PROTECTED] wrote: Hi there ~ I have an Apache installation running mod_ssl and would like to setup another VirtualHost that runs under SSL on a different port (e.g. 8443). The default site on port 443 is running fine with SSL. The new certificate I have installed for the second site appears to be incorrect or the version of OpenSSL I have is not up to date. This causes Apache to crash. Can someone look at the error(s) below and please tell me where to start or how to fix it? Errors: [Fri Oct 6 13:37:21 2006] [error] mod_ssl: Init: Unable to read server certificate from file /apache/conf /mycertificatename.crt (OpenSSL library error follows) [Fri Oct 6 13:37:21 2006] [error] OpenSSL: error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag [Fri Oct 6 13:37:21 2006] [error] OpenSSL: error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error Thanks in advance That indicates it doesn't like the certificate file in mycertificatename.crt. It may be corrupt or in the wrong format. Try the command: openssl x509 -in mycertificatename.crt to see if you get the same error. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager [EMAIL PROTECTED] __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
Re: OpenSSL Error (Apache + mod_ssl)
On Fri, 15 Nov 2002 22:51:05 +, Manoj Kithany wrote: Hi: My Apache is NOT working.the log file shows: [Fri Nov 15 15:35:57 2002] [error] mod_ssl: Init: Failed to generate temporary 512 bit RSA private key (OpenSSL library error follows) [Fri Nov 15 15:35:57 2002] [error] OpenSSL: error:24064064:random number generator:SSLEAY_RAND_BYTES:PRNG not seeded [Fri Nov 15 15:35:57 2002] [error] OpenSSL: error:04069003:rsa routines:RSA_generate_key:BN lib I am using Apache 1.3.27, mod_ssl 2.8.11 on IBM AIX 5.1 box. Check the FAQ. This is quite possibly the most frequently asked OpenSSL question. DS __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
