https

hi all...

i tried http-users list without success...

i recently upgraded httpd from 1.3.x to 2.0.54. compiled httpd with mod_s=
sl.
OpenSSL 0.9.7e...
i remember that when building 1.3.x with mod_ssl the certificate was done
at the time of compilation of the server. now with 2.0.54 i'm trying the
instruction on:
http://httpd.apache.org/docs-2.0/ssl/ssl_faq.html#realcert

i did follow this a few times and that didn't work. then i did this a few
times:
http://www.samspublishing.com/articles/article.asp?p=3D30115 &seqNum=3D4&r=
l=3D1

it didn't work either.. in both cases the message i get is that the
connection is refused...

the only difference between the old 1.3.x apache build on the machine and
the new 2.0.54 is these two lines below in the ssl conf section.
when i start the new one i get a message that ca-bundle.crt is missing -
and it is. on the old machine it came with the apache src. there isn't
such file here now. i could copy it but maybe that's not a great idea, is=
it?

SSLCACertificatePath /usr/local/httpd/conf/ssl.crt
SSLCACertificateFile /usr/local/httpd/conf/ssl.crt/ca-bundle.crt

i need this issue resolved relatively soon because that's the only thing
stopping this machine to go in production...

thanks a lot...


--




____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: https

There has been some discussion about that here lately.
RS Engelschall said he would include a script that would
produce a ca-bunde.crt from the Mozilla certdata.txt file
in version 2.8.23 of mod_ssl which should be available
now.

kind regards
/Daniel

----- Original Message -----
From: "kalin mintchev"
To:
Sent: Wednesday, July 13, 2005 10:51 AM
Subject: https


> hi all...
>
> i tried http-users list without success...
>
> i recently upgraded httpd from 1.3.x to 2.0.54. compiled httpd with
mod_ssl.
> OpenSSL 0.9.7e...
> i remember that when building 1.3.x with mod_ssl the certificate was done
> at the time of compilation of the server. now with 2.0.54 i'm trying the
> instruction on:
> http://httpd.apache.org/docs-2.0/ssl/ssl_faq.html#realcert
>
> i did follow this a few times and that didn't work. then i did this a few
> times:
> http://www.samspublishing.com/articles/article.asp?p=30115&s eqNum=4&rl=1
>
> it didn't work either.. in both cases the message i get is that the
> connection is refused...
>
> the only difference between the old 1.3.x apache build on the machine and
> the new 2.0.54 is these two lines below in the ssl conf section.
> when i start the new one i get a message that ca-bundle.crt is missing -
> and it is. on the old machine it came with the apache src. there isn't
> such file here now. i could copy it but maybe that's not a great idea, is
it?
>
> SSLCACertificatePath /usr/local/httpd/conf/ssl.crt
> SSLCACertificateFile /usr/local/httpd/conf/ssl.crt/ca-bundle.crt
>
> i need this issue resolved relatively soon because that's the only thing
> stopping this machine to go in production...
>
> thanks a lot...
>
>
> --
>
>
>
>
> ____________________________________________________________ __________
> Apache Interface to OpenSSL (mod_ssl) www.modssl.org
> User Support Mailing List modssl-users@modssl.org
> Automated List Manager majordomo@modssl.org
>


____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org