| 1 |
On Tue, 2006-07-11 at 17:59 -0500, Michael Sullivan wrote: |
| 2 |
> I'm trying to make use of SSL on my server box. I followed the wiki at |
| 3 |
> http://gentoo-wiki.com/Apache_Modules_mod_ssl on my client PC and |
| 4 |
> everything worked right. However, when I try it on my server PC and I |
| 5 |
> go to start Apache with the new configs for SSL, Apache won't start and |
| 6 |
> I get the following output to /var/log/apache2/error_log: |
| 7 |
> |
| 8 |
> bullet ssl # cat /var/log/apache2/error_log |
| 9 |
> [Tue Jul 11 17:55:11 2006] [notice] suEXEC mechanism enabled |
| 10 |
> (wrapper: /usr/sbin/suexec2) |
| 11 |
> [Tue Jul 11 17:55:11 2006] [error] Init: Unable to read server |
| 12 |
> certificate from file /usr/lib/apache2/conf/ssl/server.pem |
| 13 |
> [Tue Jul 11 17:55:11 2006] [error] SSL Library Error: 218529960 |
| 14 |
> error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag |
| 15 |
> [Tue Jul 11 17:55:11 2006] [error] SSL Library Error: 218595386 |
| 16 |
> error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error |
| 17 |
> |
| 18 |
> The permissions on the files in /usr/lib/apache2/conf/ssl are the same |
| 19 |
> on both my client and server box. Here they are: |
| 20 |
> |
| 21 |
> bullet conf # pwd |
| 22 |
> /usr/lib/apache2/conf |
| 23 |
> bullet conf # ls -l |
| 24 |
> total 96 |
| 25 |
> -rw-r--r-- 1 root root 2068 Jul 6 22:30 apache2-builtin-mods |
| 26 |
> drwxr-xr-x 5 root root 4096 Dec 12 2005 conf |
| 27 |
> -rw-r--r-- 1 root root 37188 Jul 6 22:30 httpd.conf |
| 28 |
> -rw-r--r-- 1 root root 1131 Mar 30 15:21 jk-workers.properties |
| 29 |
> -rw-r--r-- 1 root root 12958 Jul 6 22:30 magic |
| 30 |
> -rw-r--r-- 1 root root 15020 Nov 27 2005 mime.types |
| 31 |
> drwxr-xr-x 2 root root 4096 Jul 10 22:14 modules.d |
| 32 |
> drwx------ 2 root root 4096 Jul 11 17:53 ssl |
| 33 |
> drwxr-xr-x 2 root root 4096 Jul 11 17:54 vhosts.d |
| 34 |
> bullet conf # ls -l ssl |
| 35 |
> total 16 |
| 36 |
> -r-------- 1 root root 794 Sep 25 2005 server.crt |
| 37 |
> -rw-r--r-- 1 root root 582 Jul 11 17:53 server.csr |
| 38 |
> -r-------- 1 root root 891 Sep 25 2005 server.key |
| 39 |
> -rw-r--r-- 1 root root 493 Jul 10 22:21 server.pem |
| 40 |
> |
| 41 |
> What's going wrong here? Why can't I start Apache with SSL? |
| 42 |
> |
| 43 |
|
| 44 |
Nevermind. I got SSLCertificateFile and SSLCertificateKeyFile confused |
| 45 |
in /etc/apache2/modules.d/41_mod_ssl.default-vhost.conf . It's fixed |
| 46 |
now... |
| 47 |
|
| 48 |
-- |
| 49 |
gentoo-user@g.o mailing list |
Archives