I ran the command below and I did receive an error so it looks like something 
is indeed wrong with the SSL Certificate. If anyone has any ideas how what I 
can look at regarding this error I would appreciate it. Thanks
 
2705:error:0906D06C:PEM routines:PEM_read_bio:no start 
line:pem_lib.c:662:Expecting: TRUSTED CERTIFICATE

________________________________

From: [EMAIL PROTECTED] on behalf of Dr. Stephen Henson
Sent: Sun 10/8/2006 12:01 PM
To: openssl-users@openssl.org
Subject: Re: Openssl Error + Apache



On Sat, Oct 07, 2006, [EMAIL PROTECTED] wrote:

> Hi there ~
> 
> I have an Apache installation running mod_ssl and would like to setup another 
> VirtualHost that runs under SSL on a different port (e.g. 8443). The default 
> site on port 443 is running fine with SSL. The new certificate I have 
> installed for the second site appears to be incorrect or the version of 
> OpenSSL I have is not up to date. This causes Apache to crash. Can someone 
> look at the error(s) below and please tell me where to start or how to fix it?
> 
> Errors:
> [Fri Oct  6 13:37:21 2006] [error] mod_ssl: Init: Unable to read server 
> certificate from file /apache/conf
>
> /mycertificatename.crt (OpenSSL library error follows)
>
> [Fri Oct  6 13:37:21 2006] [error] OpenSSL: error:0D0680A8:asn1 encoding 
> routines:ASN1_CHECK_TLEN:wrong tag
>
> [Fri Oct  6 13:37:21 2006] [error] OpenSSL: error:0D07803A:asn1 encoding 
> routines:ASN1_ITEM_EX_D2I:nested
>
> asn1 error
>
> Thanks in advance
> 

That indicates it doesn't like the certificate file in mycertificatename.crt.
It may be corrupt or in the wrong format. Try the command:

openssl x509 -in mycertificatename.crt

to see if you get the same error.

Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Funding needed! Details on homepage.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to