Date: Wed, 7 Oct 2009 19:33:38 -0400 From: "Philip M. Gollucci" <pgollucci@p6m7g8.com> To: David Southwell <david@vizion2000.net> Cc: apache@freebsd.org Subject: Re: ssl onceonlyinit problem Message-ID: <4ACD2552.2030706@p6m7g8.com> In-Reply-To: <200910071607.15617.david@vizion2000.net> References: <200910071607.15617.david@vizion2000.net>
next in thread | previous in thread | raw e-mail | index | archive | help
David Southwell wrote:
> Hi
>
> NOt used to this one.
>
> Can anyone tell me how to fix this error?
>
> [Wed Oct 07 16:03:17 2009] [warn] RSA server certificate is a CA certificate
> (BasicConstraints: CA == TRUE !?)
> [Wed Oct 07 16:03:18 2009] [warn] RSA server certificate is a CA certificate
> (BasicConstraints: CA == TRUE !?)
> /libexec/ld-elf.so.1: /usr/local/lib/php/20060613/imap.so: Undefined symbol
> "ssl_onceonlyinit"
This is actually a common one, but I forget what causes it off the top
of my head. Some things to check, I'm sure google will know this one.
1) Do you have the following configs -- at the vhost level ?
### SSL (PCI-compliant)
SSLEngine On
# SSLProxyEngine on
SSLProtocol -ALL +SSLv3 +TLSv1
SSLCipherSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP
<IfDefine VERISIGN>
SSLCACertificateFile %%CERTS%%/vs_intermediate_bundle.crt
</IfDefine>
<IfDefine GODADDY>
SSLCertificateChainFile %%CERTS%%/gd_intermediate_bundle.crt
</IfDefine>
SSLCertificateFile %%CERTS%%/%%H%%.crt
SSLCertificateKeyFile %%CERTS%%/%%H%%.key
2) httpd -l |grep ssl
its there
3) you started the server with -DSSL if you used the <IfDefine SSL>
4) the key files exist, are readable, don't have ^Ms in them
5) you're using http 2.2.1[34]
6) The certificates are not expired
--
------------------------------------------------------------------------
1024D/DB9B8C1C B90B FBC3 A3A1 C71A 8E70 3F8C 75B8 8FFB DB9B 8C1C
Philip M. Gollucci (pgollucci@p6m7g8.com) c: 703.336.9354
Consultant - P6M7G8 Inc. http://p6m7g8.net
Senior Sys Admin - RideCharge, Inc. http://ridecharge.com
ASF Member - Apache Software Foundation http://apache.org
FreeBSD Committer - FreeBSD Foundation http://freebsd.org
Work like you don't need the money,
love like you'll never get hurt,
and dance like nobody's watching.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4ACD2552.2030706>