I am generating my own keys and certs for Apache/mod_ssl. I can connect via s_client fine. Using Netscape on Linux pops up a dialog that says "The security library has encountered an improperly-formatted DER message." and the Apache error_log says: [Tue Dec 26 11:11:35 2000] [error] mod_ssl: SSL handshake failed (server os390.caveosystems.com:8443, client 10.139.16.1) (OpenSSL library error follows) [Tue Dec 26 11:11:35 2000] [error] OpenSSL: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate [Hint: Subject CN in certificate not server name or identical to CA!?] I think this is a low-level cert issue so I'm trying here before modssl-users. The certs and keys are attached. Any ideas? Thanks much. /r$
-----BEGIN RSA PRIVATE KEY----- MIICXgIBAAKBgQDIPoRwN7E/vq69SMv8GeSa5fhLgpx51ejgUXPUqsjh25t6MKHIWTw8s8TB34kG Svr5AP0e4nqbbl34gcIKuzcG0EEZ0YDjHR7+0d0QBDKeXhZ3WbL6CYZyJtQ9awBTgPyu1mTiYrIv vNIAkr4PnWQfVVSfD68sCW1oh/3oOc7CHwIDAQABAoGAIXmyEkB9NTbfZ21gDIkXmn2PgLAZEJUe FUIIpyjV5EweNdMjeKbSVyOGZRLFiXPHeREdP6iE7q8Irp6incCmdgUg3tp4n6MNDkQDD5m39ec9 KKWIZM51FFsL8OoCkWQhIK6+nx6PxC3Ik9lDK3XEnP4iY6HMtUoS/xlw+6Zb9YECQQD3sh6zVrUQ xHFfRbNlrjGiVfrrUQMrJ7KBPlksXrt8P42fqkPyqi12CcxViRGcR8TQvYfSX26UjojWT0efBWjx AkEAzvUjaqGUHpArqJU4nfd9G8MbEkuqQR5JIWtdtAj611l6MfqBV6m7fMl5dBgAUaz4+FBj4E5c AFA4GfylGzdcDwJBAOogoGpODCpENRGj9ZWoGNxkPyBM3BzfkhgeUfXhuYARJpIEQ+PNPdl0G4PC YzYAlKXmcMrGT+T18Zv5Ji7G01ECQQCeqGuoWYq2C4yMxykKYSs2V1KvqfYxycgCqM7DMIctBNma 6xKxY9vqBILpr2S/OL39j5Oh6DC7xMPdmEPzI3OdAkEAjyyE/+V4hQm3f/uVFdonZOn9YBrPhG4c QeQDCRE4XkkhjHCA5lMEptX6rx8SI5GfiAn3m3DGxGAbIuA21YRGQQ== -----END RSA PRIVATE KEY-----
-----BEGIN CERTIFICATE----- MIICRzCCAbCgAwIBAgIBATANBgkqhkiG9w0BAQUFADBNMQswCQYDVQQGEwJ1czEW MBQGA1UEChMNQ2F2ZW8gU3lzdGVtczEUMBIGA1UECxMLRGV2ZWxvcG1lbnQxEDAO BgNVBAMTB0hhbmNvY2swHhcNMDAxMjI2MDQwODU0WhcNMDExMjI2MDQwODU0WjBN MQswCQYDVQQGEwJ1czEWMBQGA1UEChMNQ2F2ZW8gU3lzdGVtczEUMBIGA1UECxML RGV2ZWxvcG1lbnQxEDAOBgNVBAMTB0hhbmNvY2swgZ8wDQYJKoZIhvcNAQEBBQAD gY0AMIGJAoGBAMIAd8iqqSy5bQ9yrZTZC3i6Ovmn/dJrAV+K7HwCrtBaKPTFi5CK UCiCGzWpFesB94LD7/Itky1ip/9q5cUcCNAaXta1kXxNZeS57vI6zqTAo+hEgoxr 4X7tBDpbh5f7m/vWl7Y4n3vgajPBI+6i73ODNcpY2pqjYUYDFj6ymga/AgMBAAGB AgAxggIAMaMvMC0wKwYDVR0RBCQwIoEgd2VibWFzdGVyQG9zMzkwLmNhdmVvc3lz dGVtcy5jb20wDQYJKoZIhvcNAQEFBQADgYEAXxukZrKG1qxnszOnGZcE6xV0ye/c pUcy/Fy6VoGJN7HSAzEYjOdowi7widzPtuqK+Gu1ZXS5c3xZ5gMFjIM8YUyz6lrI VAPHiv/AC3zGWsEYByTed5MF3ZJuJLCxk4QJmH2m8l0X1vVLaSDjk7qoNb8cbr3u Rhrffc4vK+YvK2c= -----END CERTIFICATE-----
-----BEGIN CERTIFICATE----- MIICaTCCAdKgAwIBAgIBAjANBgkqhkiG9w0BAQUFADBNMQswCQYDVQQGEwJ1czEW MBQGA1UEChMNQ2F2ZW8gU3lzdGVtczEUMBIGA1UECxMLRGV2ZWxvcG1lbnQxEDAO BgNVBAMTB0hhbmNvY2swHhcNMDAxMjI2MDQwODU1WhcNMDExMjIxMDQwODU1WjBc MQswCQYDVQQGEwJ1czEWMBQGA1UEChMNQ2F2ZW8gU3lzdGVtczEUMBIGA1UECxML RGV2ZWxvcG1lbnQxHzAdBgNVBAMTFm9zMzkwLmNhdmVvc3lzdGVtcy5jb20wgZ8w DQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAMg+hHA3sT++rr1Iy/wZ5Jrl+EuCnHnV 6OBRc9SqyOHbm3owochZPDyzxMHfiQZK+vkA/R7ieptuXfiBwgq7NwbQQRnRgOMd Hv7R3RAEMp5eFndZsvoJhnIm1D1rAFOA/K7WZOJisi+80gCSvg+dZB9VVJ8PrywJ bWiH/eg5zsIfAgMBAAGBAgAxggIAMaNCMEAwEQYJYIZIAYb4QgEBBAQDAgZAMCsG A1UdEQQkMCKBIHdlYm1hc3RlckBvczM5MC5jYXZlb3N5c3RlbXMuY29tMA0GCSqG SIb3DQEBBQUAA4GBAH0ag0mXgmW767RR8dKn+rbJjKVzZW6JAgW88L+1iYBfSoqN j7GsnZjzKy8/hvsWiTpQqS2LC6sVe8Q2sh17+AwHmUqa6GpvQpbBQjKPjsz23z9T tZGsXBfl7B+wJSSPqY/C0ZTnArhpBZDbLlhf0rS6kusUqMCmf4ZPvTJnKhKj -----END CERTIFICATE-----