On Thu, Dec 04, 2003, Daniel Needles wrote: > Dr. Henson, > Thanks for your earlier help. Although the command you specified did > generate a key, Explorer failed from my NT station to open the secure page. > It would give the standard Page Cannot Be Displayed Message. Even more wierd > if I specified: https://192.168.0.2:443 it would correctly complain it was a > bad request. When I ran apache without SSL, everything worked fine. > > I wiped the drive and reinstall Solaris 2.8, Jumbo patch, and the Random > patch. Then I tried reinstalling. This time I used Apache's make certificate > TYPE=custom command. I generate the server.key with the commands "cp > server.key server.key.orig; /usr/local/ssl/bin/openssl rsa -in > server.key.orig -out server.key." This also resulted in the same above > behavior. I finally ran netscape from the box against the box and got the > pop up "The server's certificate has an invalid signature. You will not be > able to connect to this site securely." Then nothing. > > What logs, symptoms, etc can I look into to try to diagnose and solve this > problem? I cannot find anything beyond these vague symptoms. > > Any help is most appreciated! >
Well first thing, if you haven't already is to see if 'make test' reports any problems. Run it a few times just to be sure. Next you can run the OpenSSL test web server. In the 'apps' directory you can do: openssl s_server -port 443 -www then connect to it with a browser. You will get warnings and other things but it should show an informational page. After that try it with the certificates you have created specifying their location with command line switches. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]