Forum Moderators: phranque

Message Too Old, No Replies

how to run apache with openssl

         

associates

2:02 pm on Sep 22, 2005 (gmt 0)

10+ Year Member



Recently i have been trying to set up a secured website using apache in conjunction with openssl. I have modified my openssl configuration file "ssl.conf" to listen to port 443 and all the modification required to get it working. Then, i moved on to change the httpd.conf on my apache2 and loaded the ssl module by taking the comment mark off and did all that's needed. After that, i went to restart it and received an error message that said "The requested operation has failed".

However, if i went back to httpd.conf to put the comment back on for loadmodule ssl.. then, it'd work.

Could anyone help me where i did wrong or there is something else i need to add or modify to make apache2 able to run ssl module?

BTW, how do i find out where the error is?

YOur help is greatly appreciated.

jdMorgan

7:53 pm on Sep 22, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



associates,

Welcome to WebmasterWorld!

Check your server error log.

If necessary, adjust the detail-level in the file by setting LogLevel to a higher setting.

Jim

associates

12:26 am on Sep 23, 2005 (gmt 0)

10+ Year Member



Hi, JDMorgan

Thank you for your reply.

Yes, i can find the error_log ie. under logs folder. It says as follows:

[Thu Sep 15 15:37:50 2005] [error] Init: Pass phrase incorrect
[Thu Sep 15 15:37:50 2005] [error] SSL Library Error: 218710120 error:0D094068:asn1 encoding routines:d2i_ASN1_SET:bad tag
[Thu Sep 15 15:37:50 2005] [error] SSL Library Error: 218529960 error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
[Thu Sep 15 15:37:50 2005] [error] SSL Library Error: 218595386 error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error
[Thu Sep 15 15:37:50 2005] [error] SSL Library Error: 218734605 error:0D09A00D:asn1 encoding routines:d2i_PrivateKey:ASN1 lib

Sorry, i don't quite exactly understand this. If the passphrase incorrect..., it can't be because i just created it and didn't give any error in creating it in the first place.

By the way, is it allright to use my localhost instead of a proper host domain to test whether ssl connection is working? Because so far i've been using [localhost...] instead of for example [mysite.com....]

And also i've been following the step by step guidelines described from the following apache-ssl website.

[devx.com...]

This site shows how to create a self-signed certificate which is what i need because i intend to build a small intranet for my office use

Thank you for your help and look forward to hearing from you