Jean-Marc:
I hate to be totally stupid but what is the CRL and where are the CA
PEM files supposed to be located? What does the directory where those
PEM files are located supposed to look like? Sorry for all the bone-
headed questions but I have not been able to trace this down!
Thanks
Paul E Wilt
Principal Software Engineer
____________________________________________________
XanEdu, Inc. ( a division of Bell+Howell Information&Learning)
http://www.XanEdu.com
mailto:[EMAIL PROTECTED]
mailto:[EMAIL PROTECTED]
300 North Zeeb Rd Phone: (734) 975-6021 (800)
521-0600 x6021
Ann Arbor, MI 48106 Fax: (734) 973-0737
____________________________________________________
-----Original Message-----
From: Jean-Marc Desperrier [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, December 06,2000 1:46 PM
To: [EMAIL PROTECTED]
Subject: Re: Experiencing error when installing a Verisign certificate!
"Wilt, Paul" wrote:
> [04/Dec/2000 12:09:21 5411938] [info] Init: Initializing OpenSSL library
> [04/Dec/2000 12:09:21 5411938] [info] Init: Loading certificate & private
> key of SSL-aware server storefront.xanedu.com:8443
There apache loads your server and private key.
It work ok : No error.
I can tell there is no password on your private key, or there would be log
that
says the password has been read from user.
> [04/Dec/2000 12:09:24 5523600] [error] Init: (storefront.xanedu.com:8443)
> Unable to configure verify locations for client authentication (OpenSSL
> library error follows)
There apache tries to load the PEM certificate of the CA that must be used
for
user verification in SSLv3.
It doesn't work.
There seem to be a problem with the end of line.
> [04/Dec/2000 12:09:24 5523600] [error] OpenSSL: error:0B084009:x509
> certificate routines:X509_load_cert_crl_file:missing asn1 eos
I must say I'm not completely sure if it's the loading of the CA certficates
that fails, or the loading of the CRL that's associated to that CA.
Anyway this should help you to search in the right direction.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
