I'm trying to get two vhosts on separate public IPs using separate secure
certificates working on an apache server (mods and version in log below).
The operating system is Mandrake 10.  The sites work perfectly without the
secure certificates as IP based vhosts.

I've been playing with the Vhosts.conf trying to get the directives right
but haven't figured out the problem.  I now have the SSL directives
commented out on one of the sites and I'm getting the following errors in
error_log on my apache server on the other site when I try to do a graceful
restart:

-- Snip Begin
[Fri Aug 13 21:52:32 2004] [notice] Graceful restart requested, doing
restart
[Fri Aug 13 21:52:41 2004] [notice] Digest: generating secret for digest
authentication ...
[Fri Aug 13 21:52:41 2004] [notice] Digest: done
[Fri Aug 13 21:52:41 2004] [error] Init: Unable to read pass phrase [Hint:
key introduced or changed before restart?]
[Fri Aug 13 21:52:41 2004] [error] SSL Library Error: 218710120
error:0D094068:lib(13):func(148):reason(104)
[Fri Aug 13 21:52:41 2004] [error] SSL Library Error: 218529960
error:0D0680A8:lib(13):func(104):reason(168)
[Fri Aug 13 21:52:41 2004] [error] SSL Library Error: 218595386
error:0D07803A:lib(13):func(120):reason(58)
[Fri Aug 13 21:52:41 2004] [error] SSL Library Error: 218734605
error:0D09A00D:lib(13):func(154):reason(13)

[Fri Aug 13 21:55:53 2004] [notice] suEXEC mechanism enabled (wrapper:
/usr/sbin/apache2-suexec)
[Fri Aug 13 21:55:53 2004] [notice] Digest: generating secret for digest
authentication ...
[Fri Aug 13 21:55:53 2004] [notice] Digest: done
[Fri Aug 13 21:55:53 2004] [notice] Apache-AdvancedExtranetServer/2.0.48
(Mandrake Linux/6mdk) mod_perl/1.99_11 Perl/v5.8.3 mod_ssl/2.0.48
OpenSSL/0.9.7c PHP/4.3.4 configured -- resuming normal operations
-- Snip End

It appears that I have damanged the certificates in some way.  I've googled
for all the keywords in SSL Library Errors and "Unable to read pass phrase"
but can't seem to find an answer.  A document that discusses multiple secure
certs on a single server would be welcome.

The Vhosts.conf for the site that is generating the erros has the following
SSL directives:

<VirtualHost 192.168.1.103:443>
DocumentRoot /home/domainname_com/public_html
ServerName www.domainname.com
SSLEngine on
SSLCertificateFile /etc/httpd/2.0/conf/ssl.crt/www.domainname.com.cer
SSLCertificateKeyFile /etc/httpd/2.0/conf/ssl.key/www.domainname.com.key
SSLCertificateChainFile /etc/httpd/2.0/conf/ssl.crt/sf_issuing.cer
RewriteEngine On
RewriteOptions inherit
Alias /awstatsicons "/home/domainname_com/public_html/icon/"
ScriptAlias /awstats/ "home/domainname_com/public_html/cgi-bin/"
Setenv VLOG /home/domainname_com/logs
# ErrorLogs /home/domainname_com/logs/test2-error_log
</VirtualHost>

I'm at a loss and would appreciate any guidance.


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to