Michael Katz wrote: > > Trying to get SSL running for the first time. Using Apache 1.2.23, > openssl-0.9.6c, mod_ssl-2.8.7-1.3.23. > > After creating the virtual host and restarting apache I get the following > errors: > > [Mon Mar 18 09:22:56 2002] [error] mod_ssl: Init: > (secure.raeinternet.com:443) U > nable to configure verify locations for client authentication (OpenSSL > library e > rror follows) > [Mon Mar 18 09:22:56 2002] [error] OpenSSL: error:0906D066:PEM > routines:PEM_read_bio:bad end line > [Mon Mar 18 09:22:56 2002] [error] OpenSSL: error:0B084009:x509 certificate > routines:X509_load_cert_crl_file:missing asn1 eos > [Mon Mar 18 09:23:04 2002] [error] mod_ssl: Init: > (secure.raeinternet.com:443) Unable to configure verify locations for client > authentication (OpenSSL library error follows) > [Mon Mar 18 09:23:04 2002] [error] OpenSSL: error:0906D066:PEM > routines:PEM_read_bio:bad end line > > I have seen other have found this error but I could not find a solution. >
That sounds like there's a corrupted certificate somewhere in the trusted certificate store. If you can place a printf() in the function X509_load_cert_crl_file() and see which file is causing that problem. I suppose in future versions of OpenSSL we could add some additional error information which logs the file causing the error. Steve. -- Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/ Personal Email: [EMAIL PROTECTED] Senior crypto engineer, Gemplus: http://www.gemplus.com/ Core developer of the OpenSSL project: http://www.openssl.org/ Business Email: [EMAIL PROTECTED] PGP key: via homepage. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
