mod_jk2 https 2004-12-01 - By Andrew M
ralph,
I have recreated a key with no encryption but now get the following
message in the terminal window:
./apachectl start
(13)Permission denied: make_sock: could not bind to address 0.0.0.0:443
no listening sockets available, shutting down
Unable to open logs
or
./apachectl startssl
(13)Permission denied: make_sock: could not bind to address 0.0.0.0:443
no listening sockets available, shutting down
Unable to open logs
I have attached my new key
regards
Andrew
On 1 Dec 2004, at 20:59, Ralf Glauberman wrote:
> like i sayed, your key-file is encrypted, try to use a unencrypted one.
>
> ----- Original Message ----- From: "Andrew M" <andrew@(protected)>
> To: <users@(protected)>
> Sent: Wednesday, December 01, 2004 9:45 PM
> Subject: Re: [users@(protected)] mod_jk2 https
>
>
>> Ralph,
>> my test key and certificate look fine to me, take a look.
>>
>>
>> regards
>>
>> Andrew
>>
>>
>
>
> -----------------------------------------------------------------------
> ---------
>
>
>>
>> On 1 Dec 2004, at 20:35, Ralf Glauberman wrote:
>>
>>> make sure your key-file and crt-file exist, belong together, are
>>> valid
>>> and readable for apache.
>>> try a non-encripted certificate/key.
>>> the key-file should look like this:
>>> -----BEGIN RSA PRIVATE KEY-----
>>> ...
>>> -----END RSA PRIVATE KEY-----
>>> the cert should look like this:
>>> Certificate:
>>> Data:
>>> Version: 1 (0x0)
>>> Serial Number: 4 (0x4)
>>> Signature Algorithm: md5WithRSAEncryption
>>> Issuer: ...
>>> Validity
>>> Not Before: Jun 21 12:51:40 2004 GMT
>>> Not After : Dec 18 12:51:40 2004 GMT
>>> Subject: ...
>>> Subject Public Key Info:
>>> Public Key Algorithm: rsaEncryption
>>> RSA Public Key: (1024 bit)
>>> Modulus (1024 bit):
>>> ... other stuff
>>> -----BEGIN CERTIFICATE-----
>>> ...
>>> ----END CERTIFICATE-----
>>>
>>>
>>> ----- Original Message ----- From: Andrew M
>>> To: users@(protected)
>>> Sent: Wednesday, December 01, 2004 9:23 PM
>>> Subject: Re: [users@(protected)] mod_jk2 https
>>>
>>>
>>> Ralph,
>>> I removed all the IfDefine tags from both the http.conf and ssl.conf
>>> files and then shut down. The server will now not boot up when I ask
>>> it to, and when I check the error logs I get the following:
>>>
>>> [Wed Dec 01 20:19:23 2004] [error] Init: Unable to read pass phrase
>>> [Hint: key introduced or changed before restart?]
>>> [Wed Dec 01 20:19:23 2004] [error] SSL Library Error: 218710120
>>> error:0D094068:asn1 encoding routines:d2i_ASN1_SET:bad tag
>>> [Wed Dec 01 20:19:23 2004] [error] SSL Library Error: 218529960
>>> error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
>>> [Wed Dec 01 20:19:23 2004] [error] SSL Library Error: 218595386
>>> error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1
>>> error
>>> [Wed Dec 01 20:19:23 2004] [error] SSL Library Error: 218734605
>>> error:0D09A00D:asn1 encoding routines:d2i_PrivateKey:ASN1 lib
>>>
>>> regards
>>>
>>> Andrew
>>>
>>>
>>> On 1 Dec 2004, at 20:11, Ralf Glauberman wrote:
>>>
>>>
>>> make sure you have removed every ifdefined in both configs, stop the
>>> server, look at ps -aux to see if all childs have exited, if not kill
>>> them. then start apache again. look at the error_log to see if there
>>> are any problems.
>>>
>>> ----- Original Message ----- From: Andrew M
>>> To: users@(protected)
>>> Sent: Wednesday, December 01, 2004 8:58 PM
>>> Subject: Re: [users@(protected)] mod_jk2 https
>>>
>>>
>>> Ralph,
>>> already done. See message below. i attach version2 serv-info details
>>> again.
>>> Once I remove the tags, if I try to reboot the server it will not
>>> shutdown, and I also cannot access the server at all!
>>>
>>> regards
>>>
>>> Andrew
>>>
>>>
>>>
>>>
>>>
>>>
>>> On 1 Dec 2004, at 19:44, Andrew M wrote:
>>>
>>>
>>> Ralph,
>>> looking at the server-info myself, I was unable to see the ssl module
>>> being pulled in. I did the following:
>>>
>>> #<IfDefine SSL>
>>> LoadModule ssl_module modules/mod_ssl.so
>>> #</IfDefine>
>>>
>>> and now I can see the ssl_mod component being pulled in to the
>>> server-info. Is there an issue with these tags? Anyway, I enclose
>>> version 2 of the server-info
>>>
>>> regards
>>>
>>> Andrew
>>> <Server_Information2.html>
>>>
>>> On 1 Dec 2004, at 19:38, Andrew M wrote:
>>>
>>>
>>> Ralph,
>>> as requested, i have attached the server information.. ;-)
>>>
>>> regards
>>>
>>> Andrew
>>> <Server_Information.html>
>>> On 1 Dec 2004, at 19:31, Ralf Glauberman wrote:
>>>
>>>
>>> i'm really sorry, but i did a mistake: it has to be server-info, not
>>> server-status. could you please try this?
>>>
>>> ----- Original Message ----- From: Andrew M
>>> To: users@(protected)
>>> Sent: Wednesday, December 01, 2004 7:13 PM
>>> Subject: Re: [users@(protected)] mod_jk2 https
>>>
>>>
>>> Ralf,
>>> I have attached the information you requested as a html file.
>>>
>>> regards
>>>
>>> Andrew
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> On 1 Dec 2004, at 17:52, Ralf Glauberman wrote:
>>>
>>>
>>> <Location /server-status>
>>> SetHandler server-status
>>> Order deny,allow
>>> Deny from all
>>> Allow from 127.0.0.1
>>> </Location>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> ---------------------------------------------------------------------
>>> The official User-To-User support forum of the Apache HTTP Server
>>> Project.
>>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>>> To unsubscribe, e-mail: users-unsubscribe@(protected)
>>> " from the digest: users-digest-unsubscribe@(protected)
>>> For additional commands, e-mail: users-help@(protected)
>>>
>>> ---------------------------------------------------------------------
>>> The official User-To-User support forum of the Apache HTTP Server
>>> Project.
>>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>>> To unsubscribe, e-mail: users-unsubscribe@(protected)
>>> " from the digest: users-digest-unsubscribe@(protected)
>>> For additional commands, e-mail: users-help@(protected)
>>>
>>>
>>>
>>> <beya-email.gif>
>>> +The home of urban music
>>> + http://www.beyarecords.com
>>>
>>> ---------------------------------------------------------------------
>>> The official User-To-User support forum of the Apache HTTP Server
>>> Project.
>>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>>> To unsubscribe, e-mail: users-unsubscribe@(protected)
>>> " from the digest: users-digest-unsubscribe@(protected)
>>> For additional commands, e-mail: users-help@(protected)
>>>
>>> <beya-email.gif>
>>> +The home of urban music
>>> + http://www.beyarecords.com
>>>
>>> ---------------------------------------------------------------------
>>> The official User-To-User support forum of the Apache HTTP Server
>>> Project.
>>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>>> To unsubscribe, e-mail: users-unsubscribe@(protected)
>>> " from the digest: users-digest-unsubscribe@(protected)
>>> For additional commands, e-mail: users-help@(protected)
>>>
>>>
>>>
>>>
>>>
>>>
>>> ---------------------------------------------------------------------
>>> The official User-To-User support forum of the Apache HTTP Server
>>> Project.
>>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>>> To unsubscribe, e-mail: users-unsubscribe@(protected)
>>> " from the digest: users-digest-unsubscribe@(protected)
>>> For additional commands, e-mail: users-help@(protected)
>>>
>>> ---------------------------------------------------------------------
>>> The official User-To-User support forum of the Apache HTTP Server
>>> Project.
>>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>>> To unsubscribe, e-mail: users-unsubscribe@(protected)
>>> " from the digest: users-digest-unsubscribe@(protected)
>>> For additional commands, e-mail: users-help@(protected)
>>>
>>> ---------------------------------------------------------------------
>>> The official User-To-User support forum of the Apache HTTP Server
>>> Project.
>>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>>> To unsubscribe, e-mail: users-unsubscribe@(protected)
>>> " from the digest: users-digest-unsubscribe@(protected)
>>> For additional commands, e-mail: users-help@(protected)
>>>
>>>
>>
>>
>>
>
>
> -----------------------------------------------------------------------
> ---------
>
>
>> ---------------------------------------------------------------------
>> The official User-To-User support forum of the Apache HTTP Server
>> Project.
>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>> To unsubscribe, e-mail: users-unsubscribe@(protected)
>> " from the digest: users-digest-unsubscribe@(protected)
>> For additional commands, e-mail: users-help@(protected)
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server
> Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@(protected)
> " from the digest: users-digest-unsubscribe@(protected)
> For additional commands, e-mail: users-help@(protected)
>
>
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@(protected)
" from the digest: users-digest-unsubscribe@(protected)
For additional commands, e-mail: users-help@(protected)
|
|
