mod_jk2 https 2004-12-01 - By Ralf Glauberman
like i sayed, your key-file is encrypted, try to use a unencrypted one.
----- Original Message -----
From: "Andrew M" <andrew@(protected)>
To: <users@(protected)>
Sent: Wednesday, December 01, 2004 9:45 PM
Subject: Re: [users@(protected)] mod_jk2 https
> Ralph,
> my test key and certificate look fine to me, take a look.
>
>
> regards
>
> Andrew
>
>
--------------------------------------------------------------------------------
>
> On 1 Dec 2004, at 20:35, Ralf Glauberman wrote:
>
>> make sure your key-file and crt-file exist, belong together, are valid
>> and readable for apache.
>> try a non-encripted certificate/key.
>> the key-file should look like this:
>> -----BEGIN RSA PRIVATE KEY-----
>> ...
>> -----END RSA PRIVATE KEY-----
>> the cert should look like this:
>> Certificate:
>> Data:
>> Version: 1 (0x0)
>> Serial Number: 4 (0x4)
>> Signature Algorithm: md5WithRSAEncryption
>> Issuer: ...
>> Validity
>> Not Before: Jun 21 12:51:40 2004 GMT
>> Not After : Dec 18 12:51:40 2004 GMT
>> Subject: ...
>> Subject Public Key Info:
>> Public Key Algorithm: rsaEncryption
>> RSA Public Key: (1024 bit)
>> Modulus (1024 bit):
>> ... other stuff
>> -----BEGIN CERTIFICATE-----
>> ...
>> ----END CERTIFICATE-----
>>
>>
>> ----- Original Message ----- From: Andrew M
>> To: users@(protected)
>> Sent: Wednesday, December 01, 2004 9:23 PM
>> Subject: Re: [users@(protected)] mod_jk2 https
>>
>>
>> Ralph,
>> I removed all the IfDefine tags from both the http.conf and ssl.conf
>> files and then shut down. The server will now not boot up when I ask
>> it to, and when I check the error logs I get the following:
>>
>> [Wed Dec 01 20:19:23 2004] [error] Init: Unable to read pass phrase
>> [Hint: key introduced or changed before restart?]
>> [Wed Dec 01 20:19:23 2004] [error] SSL Library Error: 218710120
>> error:0D094068:asn1 encoding routines:d2i_ASN1_SET:bad tag
>> [Wed Dec 01 20:19:23 2004] [error] SSL Library Error: 218529960
>> error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
>> [Wed Dec 01 20:19:23 2004] [error] SSL Library Error: 218595386
>> error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1
>> error
>> [Wed Dec 01 20:19:23 2004] [error] SSL Library Error: 218734605
>> error:0D09A00D:asn1 encoding routines:d2i_PrivateKey:ASN1 lib
>>
>> regards
>>
>> Andrew
>>
>>
>> On 1 Dec 2004, at 20:11, Ralf Glauberman wrote:
>>
>>
>> make sure you have removed every ifdefined in both configs, stop the
>> server, look at ps -aux to see if all childs have exited, if not kill
>> them. then start apache again. look at the error_log to see if there
>> are any problems.
>>
>> ----- Original Message ----- From: Andrew M
>> To: users@(protected)
>> Sent: Wednesday, December 01, 2004 8:58 PM
>> Subject: Re: [users@(protected)] mod_jk2 https
>>
>>
>> Ralph,
>> already done. See message below. i attach version2 serv-info details
>> again.
>> Once I remove the tags, if I try to reboot the server it will not
>> shutdown, and I also cannot access the server at all!
>>
>> regards
>>
>> Andrew
>>
>>
>>
>>
>>
>>
>> On 1 Dec 2004, at 19:44, Andrew M wrote:
>>
>>
>> Ralph,
>> looking at the server-info myself, I was unable to see the ssl module
>> being pulled in. I did the following:
>>
>> #<IfDefine SSL>
>> LoadModule ssl_module modules/mod_ssl.so
>> #</IfDefine>
>>
>> and now I can see the ssl_mod component being pulled in to the
>> server-info. Is there an issue with these tags? Anyway, I enclose
>> version 2 of the server-info
>>
>> regards
>>
>> Andrew
>> <Server_Information2.html>
>>
>> On 1 Dec 2004, at 19:38, Andrew M wrote:
>>
>>
>> Ralph,
>> as requested, i have attached the server information.. ;-)
>>
>> regards
>>
>> Andrew
>> <Server_Information.html>
>> On 1 Dec 2004, at 19:31, Ralf Glauberman wrote:
>>
>>
>> i'm really sorry, but i did a mistake: it has to be server-info, not
>> server-status. could you please try this?
>>
>> ----- Original Message ----- From: Andrew M
>> To: users@(protected)
>> Sent: Wednesday, December 01, 2004 7:13 PM
>> Subject: Re: [users@(protected)] mod_jk2 https
>>
>>
>> Ralf,
>> I have attached the information you requested as a html file.
>>
>> regards
>>
>> Andrew
>>
>>
>>
>>
>>
>>
>>
>> On 1 Dec 2004, at 17:52, Ralf Glauberman wrote:
>>
>>
>> <Location /server-status>
>> SetHandler server-status
>> Order deny,allow
>> Deny from all
>> Allow from 127.0.0.1
>> </Location>
>>
>>
>>
>>
>>
>>
>>
>> ---------------------------------------------------------------------
>> The official User-To-User support forum of the Apache HTTP Server
>> Project.
>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>> To unsubscribe, e-mail: users-unsubscribe@(protected)
>> " from the digest: users-digest-unsubscribe@(protected)
>> For additional commands, e-mail: users-help@(protected)
>>
>> ---------------------------------------------------------------------
>> The official User-To-User support forum of the Apache HTTP Server
>> Project.
>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>> To unsubscribe, e-mail: users-unsubscribe@(protected)
>> " from the digest: users-digest-unsubscribe@(protected)
>> For additional commands, e-mail: users-help@(protected)
>>
>>
>>
>> <beya-email.gif>
>> +The home of urban music
>> + http://www.beyarecords.com
>>
>> ---------------------------------------------------------------------
>> The official User-To-User support forum of the Apache HTTP Server
>> Project.
>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>> To unsubscribe, e-mail: users-unsubscribe@(protected)
>> " from the digest: users-digest-unsubscribe@(protected)
>> For additional commands, e-mail: users-help@(protected)
>>
>> <beya-email.gif>
>> +The home of urban music
>> + http://www.beyarecords.com
>>
>> ---------------------------------------------------------------------
>> The official User-To-User support forum of the Apache HTTP Server
>> Project.
>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>> To unsubscribe, e-mail: users-unsubscribe@(protected)
>> " from the digest: users-digest-unsubscribe@(protected)
>> For additional commands, e-mail: users-help@(protected)
>>
>>
>>
>>
>>
>>
>> ---------------------------------------------------------------------
>> The official User-To-User support forum of the Apache HTTP Server
>> Project.
>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>> To unsubscribe, e-mail: users-unsubscribe@(protected)
>> " from the digest: users-digest-unsubscribe@(protected)
>> For additional commands, e-mail: users-help@(protected)
>>
>> ---------------------------------------------------------------------
>> The official User-To-User support forum of the Apache HTTP Server
>> Project.
>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>> To unsubscribe, e-mail: users-unsubscribe@(protected)
>> " from the digest: users-digest-unsubscribe@(protected)
>> For additional commands, e-mail: users-help@(protected)
>>
>> ---------------------------------------------------------------------
>> The official User-To-User support forum of the Apache HTTP Server
>> Project.
>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>> To unsubscribe, e-mail: users-unsubscribe@(protected)
>> " from the digest: users-digest-unsubscribe@(protected)
>> For additional commands, e-mail: users-help@(protected)
>>
>>
>
>
>
--------------------------------------------------------------------------------
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@(protected)
> " from the digest: users-digest-unsubscribe@(protected)
> For additional commands, e-mail: users-help@(protected)
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@(protected)
" from the digest: users-digest-unsubscribe@(protected)
For additional commands, e-mail: users-help@(protected)
|
|
