Joe Novielli wrote:
>
> I'm trying to generating a self signed certificate that expires in 30000
> days with:
>
> openssl req -new -x509 -nodes -out httpsd.pem -keyout httpsd.pem -days 30000
>
> (Note: not sure if I MUST use a openssl.cnf file - I don't use it in the
> above statement).
>
> In my httpsd.conf file, when I specify:
>
> SSLCACertificateFile /opt/apache-1.3.6-SSL/cert/httpsd.pem
> SSLCertificateFile /opt/apache-1.3.6-SSL/cert/httpsd.pem
> ##Commented out## SSLCertificateKeyFile /opt/apache-1.3.6-SSL/cert/somekey.key
>
> I'm also trying to use gcache in my httpsd.conf file, with:
> SSLCacheServerPath /opt/apache-1.3.6-SSL/bin/gcache
> SSLCacheServerPort 1234
>
> The server starts, but the error log gives me
>
> [Thu Aug 5 18:09:02 1999] [info] removed PID file
> /opt/apache-1.3.6-SSL/logs/httpsd.pid (pid=5092)
> [Thu Aug 5 18:09:02 1999] [notice] caught SIGTERM, shutting down
> [Thu Aug 5 18:09:14 1999] gcache started
> [Thu Aug 5 18:09:14 1999] [debug] apache_ssl.c(355): Random input
> /dev/urandom(1024) -> 0
> [Thu Aug 5 18:09:14 1999] [error] Cannot resolve host name heap --- ignoring!
This is because you are using my example configuration too literally: my
machine is called heap.
> [Thu Aug 5 18:09:14 1999] gcache started
> [Thu Aug 5 18:09:15 1999] [notice] Apache/1.3.6 Ben-SSL/1.36 (Unix)
> configured -- resuming normal operations
> [Thu Aug 5 18:09:15 1999] [info] Server built: Aug 4 1999 16:11:01
> [Thu Aug 5 18:09:26 1999] [debug] apache_ssl.c(355): Random input
> /dev/urandom(1024) -> 0
> [Thu Aug 5 18:09:26 1999] [error] SSL_accept failed
> [Thu Aug 5 18:09:26 1999] [error] error:1407609C:SSL
> routines:SSL23_GET_CLIENT_HELLO:http request
>
> I there something I am doing wrong???
You are making an HTTP request on an HTTPS port.
Cheers,
Ben.
--
http://www.apache-ssl.org/ben.html
"My grandfather once told me that there are two kinds of people: those
who work and those who take the credit. He told me to try to be in the
first group; there was less competition there."
- Indira Gandhi
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
