I might have had a similar problem, in my case the last line of my Thawte
certificate appeared to be longer than the rest, as if some line break
hadn't been copied (Apache 1.3.4/2.2.5 seg faulted on start-up). I could
resolve this by manually inserting a new line break using vi to cut the
last line to the right length.
Juergen
-----Original Message-----
From: Bodo Moeller [SMTP:[EMAIL PROTECTED]]
Sent: Monday, May 17, 1999 12:59 AM
To: [EMAIL PROTECTED]
Subject: Re: my thawte-cert is missing...somewhat ?
Christian Hammers <[EMAIL PROTECTED]>:
> I have a problem. I've just received a Thawte Apache-SSL certificate
> that I have created with openssl-0.9.2b. But whenever I start my
> apache_1.3.4 it writes:
> [crit] error:0906D06C:PEM routines:PEM_read_bio:no start line
> But my cert file looks like:
> -----BEGIN CERTIFICATE-----
> MIICvDCCAiUCAlh2MA0GCSqGSIb3DQEBBAUAMIHEMQswCQYDVQQGEwJaQTEVMBMG
> ...
> Z5V0agKrO9UzmWkNlpsGwFYXGNX9PdqWzjDIh7xtlYI=
> -----END CERTIFICATE-----
Maybe there are CRLFs instead of just LFs at the line-ends? Edit the
file e.g. with Emacs, and you'll see the ^M.
> Another self-certfied server has a cert file that looks like:
> ---------------------------------------
> Certificate:
> Data:
> Version: 3 (0x2)
> Serial Number: 1 (0x1)
> Signature Algorithm: md5WithRSAEncryption
> Issuer: C=DE, ST=NRW, L=Aachen, O=WESTEND GmbH, OU=CA,
> CN=Christian Hamm
> [EMAIL PROTECTED]
> -------------------------------------
> Is this ASCII stuff necessary ? How do I get it into my certificate ?
It is not necessary for the library, but it obviously helps humans to
see what is in the file. "openssl x509 -in file" reads and outputs a
certificate; there are various options for printing additional output
in readable form, e.g. "openssl x509 -in file -text" prints all of the
certificate as text, "openssl x509 -in file -subject" prints the owner
of the certificate, etc. Invoke "openssl x509" with an invalid option
(such as "-help" :-) to find out which options exist.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
