Solved - 8.1 to 8.2 upgrade, apache SSL Certificates problem
Don't border, i found the error, nothing to with freebsd. sorry 2011/3/23 n dhert > Hi, > > I did an upgrade from FreeBSD 8.1 to 8.2 today. All OK so far, except for > Apache (apache-2.2.17_1) > It wouldn't start. > /var/log/httpd-error.log > [Wed Mar 23 13:04:26 2011] [error] Server should be SSL-aware but has no > certificate configured [Hint: SSLCertificateFile] ((null):0) > > I dit not change anything tot my apache config in the last weeks (and have > restarted apache, via apachectl graceful several > times). My certificates are still there and did not change. Accessing some > of my https enabled virtual hosts worked > before the upgrade. > > # apachectl configtest > Suntax OK > > If I start apache without SSL (commenting out the "Include > etc/apache22/extra/httpd-ssl.conf" line in > /usr/local/etc/apache22/httpd.conf), > then apache starts. > > Waht can be the cause, it worked before 8.2 ?? > > > > ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
8.1 to 8.2 upgrade, apache SSL Certificates problem
Hi, I did an upgrade from FreeBSD 8.1 to 8.2 today. All OK so far, except for Apache (apache-2.2.17_1) It wouldn't start. /var/log/httpd-error.log [Wed Mar 23 13:04:26 2011] [error] Server should be SSL-aware but has no certificate configured [Hint: SSLCertificateFile] ((null):0) I dit not change anything tot my apache config in the last weeks (and have restarted apache, via apachectl graceful several times). My certificates are still there and did not change. Accessing some of my https enabled virtual hosts worked before the upgrade. # apachectl configtest Suntax OK If I start apache without SSL (commenting out the "Include etc/apache22/extra/httpd-ssl.conf" line in /usr/local/etc/apache22/httpd.conf), then apache starts. Waht can be the cause, it worked before 8.2 ?? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: Apache ssl certificates?
Eric F Crist wrote: On Tuesday 17 February 2004 10:48 pm, Saint Aardvark the Carpeted wrote: Eric F Crist disturbed my sleep to write: When I go the the server via https: I get a dialog asking for me to accept a certificate, but it's still the snakeoil cert! What am I doing wrong? I hate to ask the obvious, but have you restarted Apache? I know that's bit me a couple times... Hugh That's a fair questions, but yes. I've checked my syntax and restarted multiple times. I've even taken the old snake-oil certificate and it's entire containing directory and moved it to a completely different part of the system. What kills me more is that I've set these systems up before. Thanks for the replies... Hi, More to the point, try stopping apache and then starting it. For some reason apache does not read the new certs on a apachectl restart. -- -Ryan Merrick [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Apache ssl certificates?
On Wed, 18 Feb 2004, Eric F Crist wrote: > On Tuesday 17 February 2004 10:48 pm, Saint Aardvark the Carpeted wrote: > > Eric F Crist disturbed my sleep to write: > > > When I go the the server via https: I get a dialog asking > > > for me to accept a certificate, but it's still the snakeoil cert! What > > > am I doing wrong? > > > > I hate to ask the obvious, but have you restarted Apache? I know that's > > bit me a couple times... > > another pretty lame reply, what about permissions on those certs? i imagine they should be quite restrictive yet httpd has to read them. m > > Hugh > > That's a fair questions, but yes. I've checked my syntax and restarted > multiple times. I've even taken the old snake-oil certificate and it's > entire containing directory and moved it to a completely different part of > the system. What kills me more is that I've set these systems up before. > > Thanks for the replies... > > -- > Eric F Crist > AdTech Integrated Systems, Inc > (612) 998-3588 > ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Apache ssl certificates?
On Tuesday 17 February 2004 10:48 pm, Saint Aardvark the Carpeted wrote: > Eric F Crist disturbed my sleep to write: > > When I go the the server via https: I get a dialog asking > > for me to accept a certificate, but it's still the snakeoil cert! What > > am I doing wrong? > > I hate to ask the obvious, but have you restarted Apache? I know that's > bit me a couple times... > > Hugh That's a fair questions, but yes. I've checked my syntax and restarted multiple times. I've even taken the old snake-oil certificate and it's entire containing directory and moved it to a completely different part of the system. What kills me more is that I've set these systems up before. Thanks for the replies... -- Eric F Crist AdTech Integrated Systems, Inc (612) 998-3588 pgp0.pgp Description: signature
Re: Apache ssl certificates?
Eric F Crist disturbed my sleep to write: > When I go the the server via https: I get a dialog asking > for me to accept a certificate, but it's still the snakeoil cert! What > am I doing wrong? I hate to ask the obvious, but have you restarted Apache? I know that's bit me a couple times... Hugh -- Saint Aardvark the Carpeted [EMAIL PROTECTED] Because the plural of Anecdote is Myth. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Apache ssl certificates?
Hello list, I've been using apache 1.3.x with mod_ssl with the snakeoil certs that are installed originally. Now, I'm trying to create a CA cert and then a certificate signed by that CA. That part is fine. Where I'm having difficulties is in the configuration. I've got the two following lines in my httpd.conf file: SSLCertificateFile /usr/local/etc/apache/ca-dir/seccomp-srv.crt SSLCertificateKeyFile /usr/local/etc/apache/ca-dir/seccomp-key.key When I go the the server via https: I get a dialog asking for me to accept a certificate, but it's still the snakeoil cert! What am I doing wrong? TIA Eric F Crist President AdTech Integrated Systems, Inc (612) 998-3588 ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
