I found the SSLLogLevel, thanks. Here is the engine log from today. I'm not
really sure what to make of it...
[15/Mar/2003 14:30:18 11313] [info] Server: Apache/1.3.26, Interface:
mod_ssl/2.8.10, Library: OpenSSL/0.9.6g
[15/Mar/2003 14:30:18 11313] [info] Init: 1st startup round (still not
) `www.pelathe.org' does NOT match se
rver name!?
change this line...
ServerName matrix.pelathe.org
(no big deal...)
- Original Message -
From: A. Putnam [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Saturday, March 15, 2003 3:07 PM
Subject: Re: private key not found
I found the SSLLogLevel, thanks
...)
- Original Message -
From: A. Putnam [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Saturday, March 15, 2003 3:07 PM
Subject: Re: private key not found
I found the SSLLogLevel, thanks. Here is the engine log from today. I'm not
really sure what to make of it...
[15/Mar/2003 14:30:18
PROTECTED]
Sent: Saturday, March 15, 2003 4:02 PM
Subject: Re: private key not found
Changed the SeverName - thanks, I was wondering about that.
How do I check my Docroot? add Directory ... ? What does that mean?
On Friday 14 March 2003 12:53, Ron Gedye wrote:
Quick check...
Check your Docroot
)
#
# This should be changed to whatever you set DocumentRoot to.
#
Directory /home/httpd/html
- Original Message -
From: A. Putnam [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Saturday, March 15, 2003 4:02 PM
Subject: Re: private key not found
Changed the SeverName - thanks, I was wondering
Okay, I cleaned out all of the older versions of the keys and ran the scripts
again. I ended up with this:
1 out of 1 certificate requests certified, commit? [y/n]y
Write out database with 1 new entries
Data Base Updated
CA verifying: www.pelathe.org.crt - CA cert
www.pelathe.org.crt: OK
That
You can copy your cert and key files to apache's conf directory.
A. Putnam said:
Okay, I cleaned out all of the older versions of the keys and ran the
scripts again. I ended up with this:
1 out of 1 certificate requests certified, commit? [y/n]y
Write out database with 1 new entries
Data
you should beable to safely move then into place. make sure perms are
restricted as possible to prevent their info from being leaked.
On Fri, 14 Mar 2003, A. Putnam wrote:
Okay, I cleaned out all of the older versions of the keys and ran the scripts
again. I ended up with this:
1 out of
I went ahead and changed my httpd.conf file to reflect the new directory. And
when I went to restart Apache, it worked! (THANK YOU!!) However, when I go to
my shopping cart and click 'checkout' (thus sending me to the secure server)
I get this error moeesage:
www.pelathe.org has received an
--- On Fri 03/14, A. Putnam [EMAIL PROTECTED] wrote:
That does mean it worked, right? Everything is good?
Everything is rosy...
If so, should I move the
new files I have to their respective directories or should I change my httpd.conf
file to point to the new directory?
I would
Just a guess: have you also added the CA certificate to the CA certificate
bundle? Also, set your logging to trace, it should give you a clue.
-a
A. Putnam said:
I went ahead and changed my httpd.conf file to reflect the new
directory. And when I went to restart Apache, it worked! (THANK
--- On Fri 03/14, A. Putnam [EMAIL PROTECTED] wrote:
I get this error moeesage:
www.pelathe.org has received an incorrect or unexpected message. Error Code: -12227
I've never seen an error code like that before. Does anyone know what it means?
Again, a guess, but you haven't set
Right then. I moved my certificates into their respective directories and
re-reeditted my httpd.conf file to reflect those changes and set the
SSLVerifyClient to 'none'. I was not sure where to go to change the logging
to 'trace' though. But, I can get into the secure server now so it
A. Putnam said:
Right then. I moved my certificates into their respective directories
and re-reeditted my httpd.conf file to reflect those changes and set
the SSLVerifyClient to 'none'. I was not sure where to go to change
the logging to 'trace' though. But, I can get into the secure server
Still no luck. I get the same error with this script too. Thank you for
pointing out the script though. It was a LOT easier to use than the other one
I had been using.
On Monday 10 March 2003 04:42, camun2020 wrote:
1 out of 1 certificate requests certified, commit? [y/n]y
Write out
1 out of 1 certificate requests certified, commit? [y/n]y
Write out database with 1 new entries
ata Base Updated
CA verifying: server.crt - CA cert
server.crt: /C=US/ST=Kansas/L=Lawrence/O=Pelathe
Center/CN=www.pelathe.org/[EMAIL PROTECTED]
error 18 at 0 depth lookup:self signed certificate
by root (in most all cases) and not the webserver
account (nobody/apache).
- Original Message -
From: A. Putnam [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, March 07, 2003 4:20 PM
Subject: Re: private key not found
The permissions for the server.crt file are rw-r--r
/crt?
I'm having the same difficulty with one where the domain, cert and key were
transferred; all my others work properly...
- Original Message -
From: A. Putnam [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, March 07, 2003 5:20 PM
Subject: Re: private key not found
Message -
From: A. Putnam [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Saturday, March 08, 2003 4:48 PM
Subject: Re: private key not found
I'm not too sure what you mean when you ask if the domain was transferred.
What domain? All I know I did was that I generated the key/csr/crts and
self
Message -
From: A. Putnam [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Saturday, March 08, 2003 4:48 PM
Subject: Re: private key not found
I'm not too sure what you mean when you ask if the domain was transferred.
What domain? All I know I did was that I generated the key/csr/crts and
self
don't think you can make a key from a crt... only works the other way
around... Tempted to do that, though...
- Original Message -
From: A. Putnam [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Saturday, March 08, 2003 6:01 PM
Subject: Re: private key not found
Oh, I see now. Well
On Fri, 7 Mar 2003, Justin Williams wrote:
don't think you can make a key from a crt... only works the other way
around... Tempted to do that, though...
You're right, it doesn't work the other way around. otherwise SSL would be
worthless...
It seems to me that your keys might be corrupted,
]
Sent: Friday, March 07, 2003 4:57 PM
Subject: Re: private key not found
On Fri, 7 Mar 2003, Justin Williams wrote:
don't think you can make a key from a crt... only works the other way
around... Tempted to do that, though...
You're right, it doesn't work the other way around. otherwise
private key files are encrypted for security reasons.
In order to read them you have to provide us with the pass phrases.
Server matrix.pelathe.org:443 (RSA)
Enter pass phrase:
Apache:mod_ssl:Error: Private key not found.
**Stopped
stty: standard input: Inappropriate ioctl for device
..failed
What
Please check the permissions on your private key. They should be readable
only by owner (400)
(knee-jerk first guess reaction)
Best of luck
- Original Message -
From: A. Putnam [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, March 07, 2003 3:42 PM
Subject: private key not found
- Original Message -
From: A. Putnam [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, March 07, 2003 3:42 PM
Subject: private key not found
I'm trying to get mod_ssl to work on my server, but each time I try to
restart
apache with mod_ssl activated, it gives me this error
on your private key. They should be
readable only by owner (400)
(knee-jerk first guess reaction)
Best of luck
- Original Message -
From: A. Putnam [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, March 07, 2003 3:42 PM
Subject: private key not found
I'm
be owned by root (in most all cases) and not the webserver
account (nobody/apache).
- Original Message -
From: A. Putnam [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, March 07, 2003 4:20 PM
Subject: Re: private key not found
The permissions for the server.crt file are rw-r--r
private key. They should be readable
only by owner (400)
(knee-jerk first guess reaction)
Best of luck
- Original Message -
From: A. Putnam [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, March 07, 2003 3:42 PM
Subject: private key not found
I'm trying
PROTECTED]
To: A. Putnam [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Thursday, March 06, 2003 3:23 PM
Subject: Re: private key not found
On Fri, 7 Mar 2003, A. Putnam wrote:
The permissions for the server.crt file are rw-r--r-- but it still
cannot find
the Private Key.
which would be 644
, March 07, 2003 5:20 PM
Subject: Re: private key not found
The permissions for the server.crt file are rw-r--r-- but it still cannot
find
the Private Key.
On Thursday 06 March 2003 13:36, Ron Gedye wrote:
Please check the permissions on your private key. They should be readable
only by owner (400
files are encrypted for security reasons.
In order to read them you have to provide us with the pass phrases.
Server matrix.pelathe.org:443 (RSA)
Enter pass phrase:
Apache:mod_ssl:Error: Private key not found.
**Stopped
stty: standard input: Inappropriate ioctl for device
..failed
How do I get
I am working on a new installation of Slackware 8.1. I am trying to get the
mod_ssl working. I have generated the key and crt files but when I try to
startssl I get an error that the Private Key not found and it doesn't start.
I am stumped. Any ideas where to start?
Justin
stop: httpd stopped
I start Apache SSL
# ./apachectl startssl
[Wed Mar 6 11:42:25 2002] [alert] httpd: Could not determine the
server's fully qualified domain name, using 10.32.10.150 for ServerName
Apache:mod_ssl:Error: Private key not found.
**Stopped
./apachectl startssl: httpd could
: Private key not found.
**Stopped
The error is right there: Private key not found
Make sure that SSLCertificateKeyFile is pointing to your private key
http://www.modssl.org/docs/2.8/ssl_reference.html#ToC11 and make sure
that it is a valid key with a matching certificate - see also
http://www.modssl.org
Hi its me again,
I have successfully(?) installed modssl as a DSO
module and this time I have recompiled apache but when
I entered 'apachectl sslstart' then it would say:
Apache:mod_ssl:Error: Private key not found.
**Stopped
Can anybody try to help me?
Breughel
and PC Applications
[EMAIL PROTECTED]
(412)-854-5688
-Original Message-
From: Carl Bowden [mailto:[EMAIL PROTECTED]]
Sent: Saturday, June 02, 2001 7:40 PM
To: [EMAIL PROTECTED]
Subject: Init: Private key not found
hi
I have been working on this for days now (like a blind
shepard i
startup round
(still not detached)
[03/Jun/2001 10:59:15 06923] [info] Init: Initializing
OpenSSL library
[03/Jun/2001 10:59:15 06923] [info] Init: Loading
certificate private key of SSL-aware server
secure.macpac.co.nz:443
[03/Jun/2001 10:59:15 06923] [error] Init: Private key not
found
: Loading
certificate private key of SSL-aware server
secure.macpac.co.nz:443
[03/Jun/2001 10:59:15 06923] [error] Init: Private key
not
found (OpenSSL library error follows)
[03/Jun/2001 10:59:15 06923] [error] OpenSSL:
error:0D084064:asn1 encoding routines:d2i_ASN1_SET:bad
class
[03/Jun
: Initializing
OpenSSL library
[03/Jun/2001 10:59:15 06923] [info] Init: Loading
certificate private key of SSL-aware server
secure.macpac.co.nz:443
[03/Jun/2001 10:59:15 06923] [error] Init: Private key not
found (OpenSSL library error follows)
[03/Jun/2001 10:59:15 06923] [error] OpenSSL:
error
Thawte. I've updated two of the machines to openssl 0.9.6a and modssl
2.8.3. One machine works fine with the new versions, and one bombs on start,
with the following error(s):
mod_ssl: Init: Private key not found (OpenSSL library error follows)
OpenSSL: error:0D084069:asn1 encoding
Hi!
I have tryed to create my own ssl server certificate keys, but now the Apache do not
start?
( System is Solaris 2.7, Apache 1.3.12 , mod_ssl 2.2.6 and openssl 0.9.6)
System has some test keys and they work, but the new ones do not.
Errors in logs:
[error] mod_ssl: Init: Private key
On Tue, Feb 22, 2000, Stefan Marx wrote:
I've encountered the following error when trying to start my newly compiled
apache(apache 1.3.11, mod_ssl, mod_php3(3.0.14), mod_perl):
mod_ssl: Init: Private key not found
OpenSSL: error 0D09B08F:asn1 encoding routines:d2i_PrivatKey:unknown public
Hi,
I've encountered the following error when trying to start my newly compiled
apache(apache 1.3.11, mod_ssl, mod_php3(3.0.14), mod_perl):
mod_ssl: Init: Private key not found
OpenSSL: error 0D09B08F:asn1 encoding routines:d2i_PrivatKey:unknown public key
type
I've read about this in former
/opt/apache/conf/ssl.crt/server.crt
SSLCertificateKeyFile /opt/apache/conf/ssl.key/server.key
Then I try to run Apache:
/opt/apache/bin/apachectl startssl
And get and error:
Apache:mod_ssl:Error: Private key not found.
**Stopped
/opt/apache/bin/apachectl
45 matches
Mail list logo
