From owner-freebsd-questions@freebsd.org Tue Apr 3 07:28:50 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0001CF898BA for ; Tue, 3 Apr 2018 07:28:49 +0000 (UTC) (envelope-from xxjack12xx@gmail.com) Received: from mail-wr0-x233.google.com (mail-wr0-x233.google.com [IPv6:2a00:1450:400c:c0c::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 6CA076B232 for ; Tue, 3 Apr 2018 07:28:49 +0000 (UTC) (envelope-from xxjack12xx@gmail.com) Received: by mail-wr0-x233.google.com with SMTP id c24so17295983wrc.6 for ; Tue, 03 Apr 2018 00:28:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=MQEPCg8xFErYnlmVUxUJzutYRwdk6CxUzb98oH0ck/E=; b=EgaTGrhWMVt9vfJOXPBONZDkC77p0SgHdm7jMYu9V3estVV4nXlyUgmg5bHD2RzPI9 qPZKaxVr1dl3JTlrMi8BYVdkI4eujcigg4PuJie54LKGXb3Al3Ab7WvFqR/DvfobsAMR Ua0TMUawJ6PELWZWl8+K/k8ywTk4l6hyzmvkrjwrN5XNSz1icLlnP+i3MHv1m0qz06ir z4o67mSdq2PbxS05vv564dmDEDAQoyT4bHetzPNnRkN+G2o9CTz2EuT/+qD9Canhga91 5Uygropr0r0VaiN3AZcnvk60u0nh9nRC8oBNmkWYr+mtQBGiK9CpoIjb0Q/t4CcfHvn0 AU9A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=MQEPCg8xFErYnlmVUxUJzutYRwdk6CxUzb98oH0ck/E=; b=Vo21fRjEq5fxTXs1yzlXrqJzOK5Pq4sbPGSwdhEY4dVfvLwWqfKV6zYZlmVWPg7UPw HAtb3y4uBjRXNdpYlvhNbtojLwuvha1Uu30MMoIUMFaYlTt5AI5HEsELidAYG+xefxzi o+Vthiodzdl+FPm8tLAurLDyGWe5QtjLyB8At7gTeybWq2qH64gUl3ImmUT+Iw6+5wJg pAdKPbNv83nh6No1hpsU+W9hiBpXla7enQpRQWC9vryeDXzYln2Givfz3T+FyH1AUU4Q wCIrwThV3EvV9/dfoQtPB2BbmoEwRHMU5o4SR2Ewj+yY3lT3saReB2U1/G0qc0lZ8kBu LtIA== X-Gm-Message-State: AElRT7Ha5tmA4KZIay3bYsziA053A1GrCwccIr47aK/b1N4h2SlWC+3Z +3yVQZ85IgOvrX/TnEzaa6QxEK/n8x9Jtya6A8LJMA== X-Google-Smtp-Source: AIpwx48bgBapB7lOcuxDXAca0VO4U+rA+JDMOlbj8kxwvkFt6k+zdLJU17ZjkKN8/oztBUypoSgkPDSv5zFaf6F/RWo= X-Received: by 10.223.154.100 with SMTP id z91mr8931632wrb.120.1522740528294; Tue, 03 Apr 2018 00:28:48 -0700 (PDT) MIME-Version: 1.0 Received: by 10.223.147.130 with HTTP; Tue, 3 Apr 2018 00:28:07 -0700 (PDT) In-Reply-To: References: From: "Jack L." Date: Tue, 3 Apr 2018 00:28:07 -0700 Message-ID: Subject: Re: MY Apache 2.4 SSL broken (FreeBSD 10.3) - help! To: William Dudley Cc: freebsd-questions Content-Type: text/plain; charset="UTF-8" X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Apr 2018 07:28:50 -0000 installing the openssl package sounds unrelated, are you sure you've defined SSLCertificateFile and SSLCertificateKeyFile properly and apache can read those paths? The error Error: error:140A80B1:SSL routines:SSL_CTX_check_private_key:no certificate assigned means it can't locate your cert On Mon, Apr 2, 2018 at 4:03 PM, William Dudley wrote: > I'm running FreeBSD 10.3, all patched up using > freebsd-update fetch > freebsd-update install > > Because I got this scary warning when upgrading Apache 2.4 (pkg upgrade > apache24) > > Message from apache24-2.4.33: > > !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! > !! mod_http2 on FreeBSD with OpenSSL from base results in a mostly !! > !! functionally unusable module due to lack of "Upgrade" !! > !! capability in OpenSSL 1.0.1. !! > !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! > > I installed openssl > > pkg install openssl > > Now, apache dies if I start it with any of these: > > > . . . > > > I get this in httpd-error.log: > > [Mon Apr 02 18:44:00.204869 2018] [ssl:emerg] [pid 82318] AH02572: Failed > to configure at least one certificate and key for njsbmwr.org:80 > [Mon Apr 02 18:44:00.205017 2018] [ssl:emerg] [pid 82318] SSL Library > Error: error:140A80B1:SSL routines:SSL_CTX_check_private_key:no certificate > assigned > [Mon Apr 02 18:44:00.205027 2018] [ssl:emerg] [pid 82318] AH02312: Fatal > error initialising mod_ssl, exiting. > > This was a formerly working installation with a handful of letsencrypt > certificates. > > Did the openssl from pkg break this? > > How do I fix this? > > Thanks, > Bill Dudley > > > > This email is free of malware because I run Linux. > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"