From owner-freebsd-questions  Wed May 23 10:54:15 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from trinity.lee.net (trinity.lee.net [208.229.121.1])
	by hub.freebsd.org (Postfix) with ESMTP id 3A4D137B422
	for <FreeBSD-questions@FreeBSD.ORG>; Wed, 23 May 2001 10:54:10 -0700 (PDT)
	(envelope-from awells@journalstar.com)
Received: from journalstar.com (leepcD-213.sub-d.lee.net [208.205.127.213])
	by trinity.lee.net (8.9.3/8.9.3) with ESMTP id MAA13375;
	Wed, 23 May 2001 12:18:12 -0500
Message-ID: <3B0BF0B6.5343B35A@journalstar.com>
Date: Wed, 23 May 2001 12:17:42 -0500
From: Tony Wells <awells@journalstar.com>
X-Mailer: Mozilla 4.76 [en] (X11; U; Linux 2.0.36 i386)
X-Accept-Language: en
MIME-Version: 1.0
To: Michael Sharp <mds@reality.dynip.com>
Cc: FreeBSD-questions@FreeBSD.ORG
Subject: Re: apache+ssl
References: <Pine.LNX.4.33.0105222127220.8816-100000@reality.dynip.com>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

I'm assuming you self-signed your csr...

The client doesn't need a client cert installed to do SSL.  My guess is
when you created your self-signed certificate when it asked you for a CN
"e.g. YOUR name", you didn't put in reality.dynip.com.  It's confusing
in the dialog, it seems it want's your name, not the name of the server.

Michael Sharp wrote:
> 
> I just installed apache13+ssl, and made my
> test certificate and fired up
> the httpd and its running. When going to my
> site, I get presented with the ability to accept
> the cerificate, so I do. The last part of the
> acceptance under " Certificate Name Check "
> states " The certificate that the site reality.dynip.com has
> presented does not contain the correct site name ".
> Then, I get " document contained no data ".
> 
> in reading: http://www.apache-ssl.org/#FAQ
> 
> under the section: How do I create a client certificate?
> 
> When I issue the comamnd:
> openssl x509 -req -in client.cert.csr -out
> client.cert.cert -signkey my.CA.key -CA my.CA.cert -CAkey my.CA.key
> -CAcreateserial -days 365
> 
> Thinking that it will fix my problem above, I get:
> client.cert.csr: No such file or directory
> 
> any ideas?
> 
> Michael Sharp
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message