Date: Fri, 31 Jul 1998 13:32:57 -0700 From: jivko@ijs.com To: freebsd-isp@FreeBSD.ORG Subject: Apache 1.3.0 + SSL/1.18 problem Message-ID: <199807311332.NAA11567@s2.ijs.com> In-Reply-To: <Pine.HPP.3.96.980731151440.469C-100000@hp9000.chc-chimes.c om> References: <199807311655.LAA01710@carp.gbr.epa.gov>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi there, I know this might not be very relevant to this mailing list, but perhaps someone could help me out with this problem: ======= I have compiled and installed Apache-SSL/1.3.0 and Ben-SSL/1.18 as per the instructions using SSLeay 0.9.0 and everything looks OK except that I cannot get it to work in secure mode and the real problem is that I could not find any error messages in any of the log files I could think of checking. Well, that is not quite true. When I try to access http://209.249.22.50 I see the following errors in the log file, which does not surprise me: [Thu Jul 23 12:35:16 1998] [error] SSL_Accept failed [Thu Jul 23 12:35:16 1998] [error] error:1407609B:SSL routines:SSL23_GET_CLIENT_HELLO:http request However when I try https://209.249.22.50 nothing happens for a while and at the end the browser says it could not establish connection. The .key and .crt files I created myself using the following options: ssleay genrsa -rand /kernel:/kernel.GENERIC 512 > 209.249.22.50.key ssleay req -new -x509 -key 209.249.22.50.key > 209.249.22.50.crt Here is what I have in my httpd.conf file: =========== SSLCacheServerPath /usr/local/apache/ssl/gcache SSLCacheServerPort 8081 SSLSessionCacheTimeout 15 <VirtualHost 209.249.22.50> User ocean Group ijscln ServerAdmin jivko@ijs.com DocumentRoot /home/ssltest/ssldoc ServerName 209.249.22.50 ErrorLog /home/ssltest/log/httpd/secure_error.log TransferLog /home/ssltest/log/httpd/secure_real.log Alias / /home/ssltest/ssldoc/ ScriptAlias /cgi-bin/ /home/ssltest/ssldoc/cgi-bin/ SSLEnable SSLCACertificatePath /usr/local/apache/certificate SSLCertificateFile /usr/local/apache/certificate/secure.209.249.22.50.crt SSLCertificateKeyFile /usr/local/apache/certificate/209.249.22.50.key </VirtualHost> ========== Thanks a lot for your help! Regards, Jivko To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199807311332.NAA11567>