Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 23 May 2001 12:17:42 -0500
From:      Tony Wells <awells@journalstar.com>
To:        Michael Sharp <mds@reality.dynip.com>
Cc:        FreeBSD-questions@FreeBSD.ORG
Subject:   Re: apache+ssl
Message-ID:  <3B0BF0B6.5343B35A@journalstar.com>
References:  <Pine.LNX.4.33.0105222127220.8816-100000@reality.dynip.com>

next in thread | previous in thread | raw e-mail | index | archive | help
I'm assuming you self-signed your csr...

The client doesn't need a client cert installed to do SSL.  My guess is
when you created your self-signed certificate when it asked you for a CN
"e.g. YOUR name", you didn't put in reality.dynip.com.  It's confusing
in the dialog, it seems it want's your name, not the name of the server.

Michael Sharp wrote:
> 
> I just installed apache13+ssl, and made my
> test certificate and fired up
> the httpd and its running. When going to my
> site, I get presented with the ability to accept
> the cerificate, so I do. The last part of the
> acceptance under " Certificate Name Check "
> states " The certificate that the site reality.dynip.com has
> presented does not contain the correct site name ".
> Then, I get " document contained no data ".
> 
> in reading: http://www.apache-ssl.org/#FAQ
> 
> under the section: How do I create a client certificate?
> 
> When I issue the comamnd:
> openssl x509 -req -in client.cert.csr -out
> client.cert.cert -signkey my.CA.key -CA my.CA.cert -CAkey my.CA.key
> -CAcreateserial -days 365
> 
> Thinking that it will fix my problem above, I get:
> client.cert.csr: No such file or directory
> 
> any ideas?
> 
> Michael Sharp
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3B0BF0B6.5343B35A>