mod_jk2 https 2004-12-01 - By Andrew M
Ralph,
my test key and certificate look fine to me, take a look.
regards
Andrew
On 1 Dec 2004, at 20:35, Ralf Glauberman wrote:
> make sure your key-file and crt-file exist, belong together, are valid
> and readable for apache.
> try a non-encripted certificate/key.
> the key-file should look like this:
> -----BEGIN RSA PRIVATE KEY-----
> ...
> -----END RSA PRIVATE KEY-----
> the cert should look like this:
> Certificate:
> Data:
> Version: 1 (0x0)
> Serial Number: 4 (0x4)
> Signature Algorithm: md5WithRSAEncryption
> Issuer: ...
> Validity
> Not Before: Jun 21 12:51:40 2004 GMT
> Not After : Dec 18 12:51:40 2004 GMT
> Subject: ...
> Subject Public Key Info:
> Public Key Algorithm: rsaEncryption
> RSA Public Key: (1024 bit)
> Modulus (1024 bit):
> ... other stuff
> -----BEGIN CERTIFICATE-----
> ...
> ----END CERTIFICATE-----
>
>
> ----- Original Message ----- From: Andrew M
> To: users@(protected)
> Sent: Wednesday, December 01, 2004 9:23 PM
> Subject: Re: [users@(protected)] mod_jk2 https
>
>
> Ralph,
> I removed all the IfDefine tags from both the http.conf and ssl.conf
> files and then shut down. The server will now not boot up when I ask
> it to, and when I check the error logs I get the following:
>
> [Wed Dec 01 20:19:23 2004] [error] Init: Unable to read pass phrase
> [Hint: key introduced or changed before restart?]
> [Wed Dec 01 20:19:23 2004] [error] SSL Library Error: 218710120
> error:0D094068:asn1 encoding routines:d2i_ASN1_SET:bad tag
> [Wed Dec 01 20:19:23 2004] [error] SSL Library Error: 218529960
> error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
> [Wed Dec 01 20:19:23 2004] [error] SSL Library Error: 218595386
> error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1
> error
> [Wed Dec 01 20:19:23 2004] [error] SSL Library Error: 218734605
> error:0D09A00D:asn1 encoding routines:d2i_PrivateKey:ASN1 lib
>
> regards
>
> Andrew
>
>
> On 1 Dec 2004, at 20:11, Ralf Glauberman wrote:
>
>
> make sure you have removed every ifdefined in both configs, stop the
> server, look at ps -aux to see if all childs have exited, if not kill
> them. then start apache again. look at the error_log to see if there
> are any problems.
>
> ----- Original Message ----- From: Andrew M
> To: users@(protected)
> Sent: Wednesday, December 01, 2004 8:58 PM
> Subject: Re: [users@(protected)] mod_jk2 https
>
>
> Ralph,
> already done. See message below. i attach version2 serv-info details
> again.
> Once I remove the tags, if I try to reboot the server it will not
> shutdown, and I also cannot access the server at all!
>
> regards
>
> Andrew
>
>
>
>
>
>
> On 1 Dec 2004, at 19:44, Andrew M wrote:
>
>
> Ralph,
> looking at the server-info myself, I was unable to see the ssl module
> being pulled in. I did the following:
>
> #<IfDefine SSL>
> LoadModule ssl_module modules/mod_ssl.so
> #</IfDefine>
>
> and now I can see the ssl_mod component being pulled in to the
> server-info. Is there an issue with these tags? Anyway, I enclose
> version 2 of the server-info
>
> regards
>
> Andrew
> <Server_Information2.html>
>
> On 1 Dec 2004, at 19:38, Andrew M wrote:
>
>
> Ralph,
> as requested, i have attached the server information.. ;-)
>
> regards
>
> Andrew
> <Server_Information.html>
> On 1 Dec 2004, at 19:31, Ralf Glauberman wrote:
>
>
> i'm really sorry, but i did a mistake: it has to be server-info, not
> server-status. could you please try this?
>
> ----- Original Message ----- From: Andrew M
> To: users@(protected)
> Sent: Wednesday, December 01, 2004 7:13 PM
> Subject: Re: [users@(protected)] mod_jk2 https
>
>
> Ralf,
> I have attached the information you requested as a html file.
>
> regards
>
> Andrew
>
>
>
>
>
>
>
> On 1 Dec 2004, at 17:52, Ralf Glauberman wrote:
>
>
> <Location /server-status>
> SetHandler server-status
> Order deny,allow
> Deny from all
> Allow from 127.0.0.1
> </Location>
>
>
>
>
>
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server
> Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@(protected)
> " from the digest: users-digest-unsubscribe@(protected)
> For additional commands, e-mail: users-help@(protected)
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server
> Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@(protected)
> " from the digest: users-digest-unsubscribe@(protected)
> For additional commands, e-mail: users-help@(protected)
>
>
>
> <beya-email.gif>
> +The home of urban music
> + http://www.beyarecords.com
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server
> Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@(protected)
> " from the digest: users-digest-unsubscribe@(protected)
> For additional commands, e-mail: users-help@(protected)
>
> <beya-email.gif>
> +The home of urban music
> + http://www.beyarecords.com
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server
> Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@(protected)
> " from the digest: users-digest-unsubscribe@(protected)
> For additional commands, e-mail: users-help@(protected)
>
>
>
>
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server
> Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@(protected)
> " from the digest: users-digest-unsubscribe@(protected)
> For additional commands, e-mail: users-help@(protected)
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server
> Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@(protected)
> " from the digest: users-digest-unsubscribe@(protected)
> For additional commands, e-mail: users-help@(protected)
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server
> Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@(protected)
> " from the digest: users-digest-unsubscribe@(protected)
> For additional commands, e-mail: users-help@(protected)
>
>
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@(protected)
" from the digest: users-digest-unsubscribe@(protected)
For additional commands, e-mail: users-help@(protected)
|
|
