From owner-freebsd-isp Fri Jul 31 13:33:14 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id NAA20150 for freebsd-isp-outgoing; Fri, 31 Jul 1998 13:33:14 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from s2.ijs.com (s2.ijs.com [205.149.188.6]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id NAA20144 for ; Fri, 31 Jul 1998 13:33:12 -0700 (PDT) (envelope-from jivko@ijs.com) From: jivko@ijs.com Received: from lapatopa1 (laptop.ijs.com [205.149.188.23]) by s2.ijs.com (8.8.5/8.8.5) with SMTP id NAA11567 for ; Fri, 31 Jul 1998 13:32:36 GMT Message-Id: <199807311332.NAA11567@s2.ijs.com> Date: Fri, 31 Jul 1998 13:32:57 -0700 To: freebsd-isp@FreeBSD.ORG Subject: Apache 1.3.0 + SSL/1.18 problem In-Reply-To: References: <199807311655.LAA01710@carp.gbr.epa.gov> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hi there, I know this might not be very relevant to this mailing list, but perhaps someone could help me out with this problem: ======= I have compiled and installed Apache-SSL/1.3.0 and Ben-SSL/1.18 as per the instructions using SSLeay 0.9.0 and everything looks OK except that I cannot get it to work in secure mode and the real problem is that I could not find any error messages in any of the log files I could think of checking. Well, that is not quite true. When I try to access http://209.249.22.50 I see the following errors in the log file, which does not surprise me: [Thu Jul 23 12:35:16 1998] [error] SSL_Accept failed [Thu Jul 23 12:35:16 1998] [error] error:1407609B:SSL routines:SSL23_GET_CLIENT_HELLO:http request However when I try https://209.249.22.50 nothing happens for a while and at the end the browser says it could not establish connection. The .key and .crt files I created myself using the following options: ssleay genrsa -rand /kernel:/kernel.GENERIC 512 > 209.249.22.50.key ssleay req -new -x509 -key 209.249.22.50.key > 209.249.22.50.crt Here is what I have in my httpd.conf file: =========== SSLCacheServerPath /usr/local/apache/ssl/gcache SSLCacheServerPort 8081 SSLSessionCacheTimeout 15 User ocean Group ijscln ServerAdmin jivko@ijs.com DocumentRoot /home/ssltest/ssldoc ServerName 209.249.22.50 ErrorLog /home/ssltest/log/httpd/secure_error.log TransferLog /home/ssltest/log/httpd/secure_real.log Alias / /home/ssltest/ssldoc/ ScriptAlias /cgi-bin/ /home/ssltest/ssldoc/cgi-bin/ SSLEnable SSLCACertificatePath /usr/local/apache/certificate SSLCertificateFile /usr/local/apache/certificate/secure.209.249.22.50.crt SSLCertificateKeyFile /usr/local/apache/certificate/209.249.22.50.key ========== Thanks a lot for your help! Regards, Jivko To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message