mod_jk2 https 2004-12-01 - By Ralf Glauberman
there is still an application bound to port 443. use ps -aux and make sure
there is no http-thread running.
----- Original Message -----
From: "Andrew M" <andrew@(protected)>
To: <users@(protected)>
Sent: Wednesday, December 01, 2004 10:27 PM
Subject: Re: [users@(protected)] mod_jk2 https
> ralph,
> I have recreated a key with no encryption but now get the following
> message in the terminal window:
>
> ./apachectl start
> (13)Permission denied: make_sock: could not bind to address 0.0.0.0:443
> no listening sockets available, shutting down
> Unable to open logs
>
> or
>
> ./apachectl startssl
> (13)Permission denied: make_sock: could not bind to address 0.0.0.0:443
> no listening sockets available, shutting down
> Unable to open logs
>
> I have attached my new key
>
> regards
>
>
> Andrew
>
>
--------------------------------------------------------------------------------
>
>
> On 1 Dec 2004, at 20:59, Ralf Glauberman wrote:
>
>> like i sayed, your key-file is encrypted, try to use a unencrypted one.
>>
>> ----- Original Message ----- From: "Andrew M" <andrew@(protected)>
>> To: <users@(protected)>
>> Sent: Wednesday, December 01, 2004 9:45 PM
>> Subject: Re: [users@(protected)] mod_jk2 https
>>
>>
>>> Ralph,
>>> my test key and certificate look fine to me, take a look.
>>>
>>>
>>> regards
>>>
>>> Andrew
>>>
>>>
>>
>>
>> -----------------------------------------------------------------------
>> ---------
>>
>>
>>>
>>> On 1 Dec 2004, at 20:35, Ralf Glauberman wrote:
>>>
>>>> make sure your key-file and crt-file exist, belong together, are
>>>> valid
>>>> and readable for apache.
>>>> try a non-encripted certificate/key.
>>>> the key-file should look like this:
>>>> -----BEGIN RSA PRIVATE KEY-----
>>>> ...
>>>> -----END RSA PRIVATE KEY-----
>>>> the cert should look like this:
>>>> Certificate:
>>>> Data:
>>>> Version: 1 (0x0)
>>>> Serial Number: 4 (0x4)
>>>> Signature Algorithm: md5WithRSAEncryption
>>>> Issuer: ...
>>>> Validity
>>>> Not Before: Jun 21 12:51:40 2004 GMT
>>>> Not After : Dec 18 12:51:40 2004 GMT
>>>> Subject: ...
>>>> Subject Public Key Info:
>>>> Public Key Algorithm: rsaEncryption
>>>> RSA Public Key: (1024 bit)
>>>> Modulus (1024 bit):
>>>> ... other stuff
>>>> -----BEGIN CERTIFICATE-----
>>>> ...
>>>> ----END CERTIFICATE-----
>>>>
>>>>
>>>> ----- Original Message ----- From: Andrew M
>>>> To: users@(protected)
>>>> Sent: Wednesday, December 01, 2004 9:23 PM
>>>> Subject: Re: [users@(protected)] mod_jk2 https
>>>>
>>>>
>>>> Ralph,
>>>> I removed all the IfDefine tags from both the http.conf and ssl.conf
>>>> files and then shut down. The server will now not boot up when I ask
>>>> it to, and when I check the error logs I get the following:
>>>>
>>>> [Wed Dec 01 20:19:23 2004] [error] Init: Unable to read pass phrase
>>>> [Hint: key introduced or changed before restart?]
>>>> [Wed Dec 01 20:19:23 2004] [error] SSL Library Error: 218710120
>>>> error:0D094068:asn1 encoding routines:d2i_ASN1_SET:bad tag
>>>> [Wed Dec 01 20:19:23 2004] [error] SSL Library Error: 218529960
>>>> error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
>>>> [Wed Dec 01 20:19:23 2004] [error] SSL Library Error: 218595386
>>>> error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1
>>>> error
>>>> [Wed Dec 01 20:19:23 2004] [error] SSL Library Error: 218734605
>>>> error:0D09A00D:asn1 encoding routines:d2i_PrivateKey:ASN1 lib
>>>>
>>>> regards
>>>>
>>>> Andrew
>>>>
>>>>
>>>> On 1 Dec 2004, at 20:11, Ralf Glauberman wrote:
>>>>
>>>>
>>>> make sure you have removed every ifdefined in both configs, stop the
>>>> server, look at ps -aux to see if all childs have exited, if not kill
>>>> them. then start apache again. look at the error_log to see if there
>>>> are any problems.
>>>>
>>>> ----- Original Message ----- From: Andrew M
>>>> To: users@(protected)
>>>> Sent: Wednesday, December 01, 2004 8:58 PM
>>>> Subject: Re: [users@(protected)] mod_jk2 https
>>>>
>>>>
>>>> Ralph,
>>>> already done. See message below. i attach version2 serv-info details
>>>> again.
>>>> Once I remove the tags, if I try to reboot the server it will not
>>>> shutdown, and I also cannot access the server at all!
>>>>
>>>> regards
>>>>
>>>> Andrew
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> On 1 Dec 2004, at 19:44, Andrew M wrote:
>>>>
>>>>
>>>> Ralph,
>>>> looking at the server-info myself, I was unable to see the ssl module
>>>> being pulled in. I did the following:
>>>>
>>>> #<IfDefine SSL>
>>>> LoadModule ssl_module modules/mod_ssl.so
>>>> #</IfDefine>
>>>>
>>>> and now I can see the ssl_mod component being pulled in to the
>>>> server-info. Is there an issue with these tags? Anyway, I enclose
>>>> version 2 of the server-info
>>>>
>>>> regards
>>>>
>>>> Andrew
>>>> <Server_Information2.html>
>>>>
>>>> On 1 Dec 2004, at 19:38, Andrew M wrote:
>>>>
>>>>
>>>> Ralph,
>>>> as requested, i have attached the server information.. ;-)
>>>>
>>>> regards
>>>>
>>>> Andrew
>>>> <Server_Information.html>
>>>> On 1 Dec 2004, at 19:31, Ralf Glauberman wrote:
>>>>
>>>>
>>>> i'm really sorry, but i did a mistake: it has to be server-info, not
>>>> server-status. could you please try this?
>>>>
>>>> ----- Original Message ----- From: Andrew M
>>>> To: users@(protected)
>>>> Sent: Wednesday, December 01, 2004 7:13 PM
>>>> Subject: Re: [users@(protected)] mod_jk2 https
>>>>
>>>>
>>>> Ralf,
>>>> I have attached the information you requested as a html file.
>>>>
>>>> regards
>>>>
>>>> Andrew
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> On 1 Dec 2004, at 17:52, Ralf Glauberman wrote:
>>>>
>>>>
>>>> <Location /server-status>
>>>> SetHandler server-status
>>>> Order deny,allow
>>>> Deny from all
>>>> Allow from 127.0.0.1
>>>> </Location>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> ---------------------------------------------------------------------
>>>> The official User-To-User support forum of the Apache HTTP Server
>>>> Project.
>>>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>>>> To unsubscribe, e-mail: users-unsubscribe@(protected)
>>>> " from the digest: users-digest-unsubscribe@(protected)
>>>> For additional commands, e-mail: users-help@(protected)
>>>>
>>>> ---------------------------------------------------------------------
>>>> The official User-To-User support forum of the Apache HTTP Server
>>>> Project.
>>>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>>>> To unsubscribe, e-mail: users-unsubscribe@(protected)
>>>> " from the digest: users-digest-unsubscribe@(protected)
>>>> For additional commands, e-mail: users-help@(protected)
>>>>
>>>>
>>>>
>>>> <beya-email.gif>
>>>> +The home of urban music
>>>> + http://www.beyarecords.com
>>>>
>>>> ---------------------------------------------------------------------
>>>> The official User-To-User support forum of the Apache HTTP Server
>>>> Project.
>>>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>>>> To unsubscribe, e-mail: users-unsubscribe@(protected)
>>>> " from the digest: users-digest-unsubscribe@(protected)
>>>> For additional commands, e-mail: users-help@(protected)
>>>>
>>>> <beya-email.gif>
>>>> +The home of urban music
>>>> + http://www.beyarecords.com
>>>>
>>>> ---------------------------------------------------------------------
>>>> The official User-To-User support forum of the Apache HTTP Server
>>>> Project.
>>>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>>>> To unsubscribe, e-mail: users-unsubscribe@(protected)
>>>> " from the digest: users-digest-unsubscribe@(protected)
>>>> For additional commands, e-mail: users-help@(protected)
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> ---------------------------------------------------------------------
>>>> The official User-To-User support forum of the Apache HTTP Server
>>>> Project.
>>>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>>>> To unsubscribe, e-mail: users-unsubscribe@(protected)
>>>> " from the digest: users-digest-unsubscribe@(protected)
>>>> For additional commands, e-mail: users-help@(protected)
>>>>
>>>> ---------------------------------------------------------------------
>>>> The official User-To-User support forum of the Apache HTTP Server
>>>> Project.
>>>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>>>> To unsubscribe, e-mail: users-unsubscribe@(protected)
>>>> " from the digest: users-digest-unsubscribe@(protected)
>>>> For additional commands, e-mail: users-help@(protected)
>>>>
>>>> ---------------------------------------------------------------------
>>>> The official User-To-User support forum of the Apache HTTP Server
>>>> Project.
>>>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>>>> To unsubscribe, e-mail: users-unsubscribe@(protected)
>>>> " from the digest: users-digest-unsubscribe@(protected)
>>>> For additional commands, e-mail: users-help@(protected)
>>>>
>>>>
>>>
>>>
>>>
>>
>>
>> -----------------------------------------------------------------------
>> ---------
>>
>>
>>> ---------------------------------------------------------------------
>>> The official User-To-User support forum of the Apache HTTP Server
>>> Project.
>>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>>> To unsubscribe, e-mail: users-unsubscribe@(protected)
>>> " from the digest: users-digest-unsubscribe@(protected)
>>> For additional commands, e-mail: users-help@(protected)
>>
>>
>> ---------------------------------------------------------------------
>> The official User-To-User support forum of the Apache HTTP Server
>> Project.
>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>> To unsubscribe, e-mail: users-unsubscribe@(protected)
>> " from the digest: users-digest-unsubscribe@(protected)
>> For additional commands, e-mail: users-help@(protected)
>>
>>
>
>
>
--------------------------------------------------------------------------------
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@(protected)
> " from the digest: users-digest-unsubscribe@(protected)
> For additional commands, e-mail: users-help@(protected)
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@(protected)
" from the digest: users-digest-unsubscribe@(protected)
For additional commands, e-mail: users-help@(protected)
|
|
