I am generating my own keys and certs for Apache/mod_ssl.  I can connect
via s_client fine.  Using Netscape on Linux pops up a dialog that says
"The security library has encountered an improperly-formatted DER
message." and the Apache error_log says:
        [Tue Dec 26 11:11:35 2000] [error] mod_ssl: SSL handshake failed
        (server os390.caveosystems.com:8443, client 10.139.16.1) (OpenSSL
        library error follows)
        [Tue Dec 26 11:11:35 2000] [error] OpenSSL: error:14094412:SSL
        routines:SSL3_READ_BYTES:sslv3 alert bad certificate [Hint: Subject
        CN in certificate not server name or identical to CA!?]

I think this is a low-level cert issue so I'm trying here before
modssl-users.
The certs and keys are attached.  Any ideas?  Thanks much.
        /r$
-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Reply via email to