mod_jk2 https 2004-12-01 - By Ralf Glauberman
make sure your key-file and crt-file exist, belong together, are valid and
readable for apache.
try a non-encripted certificate/key.
the key-file should look like this:
-----BEGIN RSA PRIVATE KEY-----
...
-----END RSA PRIVATE KEY-----
the cert should look like this:
Certificate:
Data:
Version: 1 (0x0)
Serial Number: 4 (0x4)
Signature Algorithm: md5WithRSAEncryption
Issuer: ...
Validity
Not Before: Jun 21 12:51:40 2004 GMT
Not After : Dec 18 12:51:40 2004 GMT
Subject: ...
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public Key: (1024 bit)
Modulus (1024 bit):
... other stuff
-----BEGIN CERTIFICATE-----
...
----END CERTIFICATE-----
----- Original Message -----
From: Andrew M
To: users@(protected)
Sent: Wednesday, December 01, 2004 9:23 PM
Subject: Re: [users@(protected)] mod_jk2 https
Ralph,
I removed all the IfDefine tags from both the http.conf and ssl.conf files
and then shut down. The server will now not boot up when I ask it to, and
when I check the error logs I get the following:
[Wed Dec 01 20:19:23 2004] [error] Init: Unable to read pass phrase [Hint:
key introduced or changed before restart?]
[Wed Dec 01 20:19:23 2004] [error] SSL Library Error: 218710120
error:0D094068:asn1 encoding routines:d2i_ASN1_SET:bad tag
[Wed Dec 01 20:19:23 2004] [error] SSL Library Error: 218529960
error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
[Wed Dec 01 20:19:23 2004] [error] SSL Library Error: 218595386
error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error
[Wed Dec 01 20:19:23 2004] [error] SSL Library Error: 218734605
error:0D09A00D:asn1 encoding routines:d2i_PrivateKey:ASN1 lib
regards
Andrew
On 1 Dec 2004, at 20:11, Ralf Glauberman wrote:
make sure you have removed every ifdefined in both configs, stop the server,
look at ps -aux to see if all childs have exited, if not kill them. then
start apache again. look at the error_log to see if there are any problems.
----- Original Message ----- From: Andrew M
To: users@(protected)
Sent: Wednesday, December 01, 2004 8:58 PM
Subject: Re: [users@(protected)] mod_jk2 https
Ralph,
already done. See message below. i attach version2 serv-info details again.
Once I remove the tags, if I try to reboot the server it will not shutdown,
and I also cannot access the server at all!
regards
Andrew
On 1 Dec 2004, at 19:44, Andrew M wrote:
Ralph,
looking at the server-info myself, I was unable to see the ssl module being
pulled in. I did the following:
#<IfDefine SSL>
LoadModule ssl_module modules/mod_ssl.so
#</IfDefine>
and now I can see the ssl_mod component being pulled in to the server-info.
Is there an issue with these tags? Anyway, I enclose version 2 of the
server-info
regards
Andrew
<Server_Information2.html>
On 1 Dec 2004, at 19:38, Andrew M wrote:
Ralph,
as requested, i have attached the server information.. ;-)
regards
Andrew
<Server_Information.html>
On 1 Dec 2004, at 19:31, Ralf Glauberman wrote:
i'm really sorry, but i did a mistake: it has to be server-info, not
server-status. could you please try this?
----- Original Message ----- From: Andrew M
To: users@(protected)
Sent: Wednesday, December 01, 2004 7:13 PM
Subject: Re: [users@(protected)] mod_jk2 https
Ralf,
I have attached the information you requested as a html file.
regards
Andrew
On 1 Dec 2004, at 17:52, Ralf Glauberman wrote:
<Location /server-status>
SetHandler server-status
Order deny,allow
Deny from all
Allow from 127.0.0.1
</Location>
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@(protected)
" from the digest: users-digest-unsubscribe@(protected)
For additional commands, e-mail: users-help@(protected)
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@(protected)
" from the digest: users-digest-unsubscribe@(protected)
For additional commands, e-mail: users-help@(protected)
<beya-email.gif>
+The home of urban music
+ http://www.beyarecords.com
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@(protected)
" from the digest: users-digest-unsubscribe@(protected)
For additional commands, e-mail: users-help@(protected)
<beya-email.gif>
+The home of urban music
+ http://www.beyarecords.com
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@(protected)
" from the digest: users-digest-unsubscribe@(protected)
For additional commands, e-mail: users-help@(protected)
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@(protected)
" from the digest: users-digest-unsubscribe@(protected)
For additional commands, e-mail: users-help@(protected)
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@(protected)
" from the digest: users-digest-unsubscribe@(protected)
For additional commands, e-mail: users-help@(protected)
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@(protected)
" from the digest: users-digest-unsubscribe@(protected)
For additional commands, e-mail: users-help@(protected)
|
|
