I got a similar error once and it apparently related to the format of the
key/cert file.... I had downloaded in win/dos, and it was saved as one big
line........I edited it to add the newlines, and then it worked fine.....
Jim Warren Connecting America
[EMAIL PROTECTED] www.coam.net
Phone: 702-648-0390 Fax: 702-631-3303
Direct: 648-2712
On Wed, 16 Feb 2000, Sergio Salvi wrote:
> Date: Wed, 16 Feb 2000 21:43:52 -0200
> From: Sergio Salvi <[EMAIL PROTECTED]>
> Reply-To: [EMAIL PROTECTED]
> To: [EMAIL PROTECTED]
> Cc: [EMAIL PROTECTED], [EMAIL PROTECTED]
> Subject: "expecting an asn1 sequence" error - HELP!
>
> Hi guys!
>
> I'm having the following problem when trying to start apache 1.3.11 with
> mod_ssl 2.5.0 and openssl 0.9.4:
>
> mod_ssl: Init: Unable to read server certificate from file
> /usr/local/ssl/certs/compras.uol.com.br.gid (OpenSSL library error
> follows)
> OpenSSL: error:0D09F007:asn1 encoding routines:d2i_X509:expecting an
> asn1 sequence
>
> In my apache conf file:
>
> ---
> SSLEnable
> SSLCertificateFile /usr/local/ssl/certs/server.gid
> SSLCertificateKeyFile /usr/local/ssl/private/server.key
> SSLCertificateChainFile /usr/local/ssl/certs/verisign.chain
> SSLLogLevel trace
> ---
>
> Where server.gid is a base64 pem encoded global id certificate and
> "verisign.chain" is the chain file that I've got from Verisign. I can do
> a "openssl verify verisign.chain" but when I try a "openssl verify
> server.gid" I got the error:
>
> server.gid: unable to load certificate file
> 927:error:0D0A2007:asn1 encoding routines:d2i_X509_CINF:expecting an
> asn1 sequence:x_cinf.c:106:address=1131914 offset=0
> 927:error:0D09F004:asn1 encoding routines:d2i_X509:nested asn1
> error:x_x509.c:99:address=1131912 offset=2
> 927:error:0906700D:PEM routines:PEM_ASN1_read_bio:ASN1
> lib:pem_lib.c:239:
>
> Anyone who had this problem solved it ? I hope so :) But how ?
>
> Thanks in advance!
> Sergio Salvi.
> Sao Paulo/SP/Brazil.
> ______________________________________________________________________
> OpenSSL Project http://www.openssl.org
> User Support Mailing List [EMAIL PROTECTED]
> Automated List Manager [EMAIL PROTECTED]
>
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
