Re: [us...@httpd] SSL on Apache 2.2.14

2009-12-02 Thread John J. Consolati
hat you are statically linking them in. Are you sure that you are picking up the OpenSSL version and not Sun's default installed version in /lib ? Can you post your build command? Personally, I like dynamic linking, so that you can upgrade to a new OpenSSL, without having to redo ev

Re: [us...@httpd] SSL on Apache 2.2.14

2009-11-30 Thread John J. Consolati
I assume that you are statically linking them in. Are you sure that you are picking up the OpenSSL version and not Sun's default installed version in /lib ? Can you post your build command? Personally, I like dynamic linking, so that you can upgrade to a new OpenSSL, without having

Re: [us...@httpd] SSL on Apache 2.2.14

2009-11-27 Thread Sander Temme
you are picking up the >> OpenSSL version and not Sun's default installed version in /lib ? Can you >> post your build command? Personally, I like dynamic linking, so that you >> can upgrade to a new OpenSSL, without having to redo everything that uses it. >> >&

Re: [us...@httpd] SSL on Apache 2.2.14

2009-11-27 Thread Sander Temme
you >> post your build command? Personally, I like dynamic linking, so that you >> can upgrade to a new OpenSSL, without having to redo everything that uses it. >> >> Dan >> >> >> Please respond to users@httpd.apache.org >> >> >> To:

Re: [us...@httpd] SSL on Apache 2.2.14

2009-11-26 Thread Crypto Sal
On 11/25/2009 03:03 PM, John J. Consolati wrote: Just checked into it further, and the ldd might not be a problem (I think?) The LD_LIBRARY_PATH env variable is being set to a location where the /wrong/path files are. Is that a good enough solution? As far as the Apache configuration, it is

RE: [us...@httpd] SSL on Apache 2.2.14

2009-11-26 Thread daniel . goulder
"John J. Consolati" ] Sent: 25 November 2009 22:25 To: users@httpd.apache.org Subject: Re: [us...@httpd] SSL on Apache 2.2.14 Here are the build commands I've tried: ./configure --prefix=/home/consolati1/apache/httpd-2.2.14/installed -- enable-static-support --enable-ssl --with-

Re: [us...@httpd] SSL on Apache 2.2.14

2009-11-25 Thread Dan_Mitton
users@httpd.apache.org cc: (bcc: Dan Mitton/YD/RWDOE) Subject: Re: [us...@httpd] SSL on Apache 2.2.14 LSN: Not Relevant User Filed as: Not a Record Here are the build commands I've tried: ./configure --prefix=/home/consolati1/apache/httpd-2.2.14/installed -- enable-static-suppo

Re: [us...@httpd] SSL on Apache 2.2.14

2009-11-25 Thread John J. Consolati
e to a new OpenSSL, without having to redo everything that uses it. Dan Please respond to users@httpd.apache.org To:users@httpd.apache.org cc: (bcc: Dan Mitton/YD/RWDOE) Subject:Re: [us...@httpd] SSL on Apache 2.2.14 LSN: Not Relevant User Filed as: Not a Record D

Re: [us...@httpd] SSL on Apache 2.2.14

2009-11-25 Thread Dan_Mitton
tpd.apache.org cc: (bcc: Dan Mitton/YD/RWDOE) Subject:Re: [us...@httpd] SSL on Apache 2.2.14 LSN: Not Relevant User Filed as: Not a Record Dan, The error occurs on both Safari and Firefox on Apache 2.2.14. We don't have IE in our environment. Both Safari and Firefox wor

Re: [us...@httpd] SSL on Apache 2.2.14

2009-11-25 Thread John J. Consolati
c, you will not have a mod_ssl.so. Otherwise, mod_ssl.so should normally be in your apache's modules subdirectory. Do you only get the error on Firefox and not IE? Dan Please respond to users@httpd.apache.org To: users@httpd.apache.org cc: (bcc: Dan Mitton/YD/RWDOE) Su

Re: [us...@httpd] SSL on Apache 2.2.14

2009-11-25 Thread Dan_Mitton
. Dan Please respond to users@httpd.apache.org To: users@httpd.apache.org cc: (bcc: Dan Mitton/YD/RWDOE) Subject:[us...@httpd] SSL on Apache 2.2.14 LSN: Not Relevant User Filed as: Not a Record Hello, Hopefully someone will be able to help, as I've been working on

Re: [us...@httpd] SSL on Apache 2.2.14

2009-11-25 Thread Dan_Mitton
mod_ssl.so. Otherwise, mod_ssl.so should normally be in your apache's modules subdirectory. Do you only get the error on Firefox and not IE? Dan Please respond to users@httpd.apache.org To: users@httpd.apache.org cc: (bcc: Dan Mitton/YD/RWDOE) Subject:Re: [us...@httpd] SS

Re: [us...@httpd] SSL on Apache 2.2.14

2009-11-25 Thread John J. Consolati
patches installed... What release/patch level are you using? Danny From: "John J. Consolati" [mailto:"John J. Consolati" ] Sent: 25 November 2009 17:23 To: users@httpd.apache.org Subject: [us...@httpd] SSL on Apache 2.2.14 Hello, Hopefull

Re: [us...@httpd] SSL on Apache 2.2.14

2009-11-25 Thread John J. Consolati
ake sure you have a recent version of Solaris or the latest patches installed... What release/patch level are you using? Danny From: "John J. Consolati" [mailto:"John J. Consolati" ] Sent: 25 November 2009 17:23 To: users@httpd.apache.org Subject:

Re: [us...@httpd] SSL on Apache 2.2.14

2009-11-25 Thread Sander Temme
uk wrote: > >> This sounds like a Solaris bug. >> >> Make sure you have a recent version of Solaris or the latest patches >> installed... >> >> What release/patch level are you using? >> >> Danny >> >> >

Re: [us...@httpd] SSL on Apache 2.2.14

2009-11-25 Thread John J. Consolati
talled... What release/patch level are you using? Danny From: "John J. Consolati" [mailto:"John J. Consolati" ] Sent: 25 November 2009 17:23 To: users@httpd.apache.org Subject: [us...@httpd] SSL on Apache 2.2.14 Hello, Hopefully someone

Re: [us...@httpd] SSL on Apache 2.2.14

2009-11-25 Thread Sander Temme
On Nov 25, 2009, at 9:23 AM, John J. Consolati wrote: > Hopefully someone will be able to help, as I've been working on this problem > for quite a while and have hit a wall. I'm trying to upgrade Apache 2.0.47 > to 2.2.14, and I need SSL support. Everything seems to build and compile > okay,

RE: [us...@httpd] SSL on Apache 2.2.14

2009-11-25 Thread daniel . goulder
d.apache.org Subject: [us...@httpd] SSL on Apache 2.2.14 Hello, Hopefully someone will be able to help, as I've been working on this problem for quite a while and have hit a wall. I'm trying to upgrade Apache 2.0.47 to 2.2.14, and I need SSL support. Everything seems to build

RE: [us...@httpd] SSL on Apache 2.2.14

2009-11-25 Thread daniel . goulder
2009 17:23 To: users@httpd.apache.org Subject: [us...@httpd] SSL on Apache 2.2.14 Hello, Hopefully someone will be able to help, as I've been working on this problem for quite a while and have hit a wall. I'm trying to upgrade Apache 2.0.47 to 2.2.14, and I need SSL support. Everythi

[us...@httpd] SSL on Apache 2.2.14

2009-11-25 Thread John J. Consolati
Hello, Hopefully someone will be able to help, as I've been working on this problem for quite a while and have hit a wall. I'm trying to upgrade Apache 2.0.47 to 2.2.14, and I need SSL support. Everything seems to build and compile okay, but when I try to access my site running on 2.2.1

RE: [us...@httpd] ssl on apache

2009-05-07 Thread Julien Gerhards
Hi Maybe try : - put myhost in your /etc/hosts - Servername myhost in your conf -Message d'origine- De : Melanie Pfefer [mailto:melanie_pfe...@yahoo.co.uk] Envoyé : jeudi 7 mai 2009 14:50 À : users@httpd.apache.org Objet : Re: [us...@httpd] ssl on apache Hi, Just not to take the

Re: [us...@httpd] ssl on apache

2009-05-07 Thread Melanie Pfefer
(CN) `myhost’ does NOT match server name!? The certificate request has myhost as CN. Any idea what is missing? thank you --- On Thu, 7/5/09, Krist van Besien wrote: > From: Krist van Besien > Subject: Re: [us...@httpd] ssl on apache > To: users@httpd.apache.org > Date: Thursday, 7

Re: [us...@httpd] ssl on apache

2009-05-07 Thread Krist van Besien
On Thu, May 7, 2009 at 2:31 PM, Melanie Pfefer wrote: > > Hi Krist, > > I am proxying (I think): > > RewriteRule ^/(abc.*) https://tomcat:port/$1 [P,L] > > Yes it is ssl to ssl Odd then that it works after you removed the tomcat server's certificate from the apache server. Apache needs to be able

Re: [us...@httpd] ssl on apache

2009-05-07 Thread Melanie Pfefer
Hi Krist, I am proxying (I think): RewriteRule ^/(abc.*) https://tomcat:port/$1 [P,L] Yes it is ssl to ssl thanks --- On Thu, 7/5/09, Krist van Besien wrote: > From: Krist van Besien > Subject: Re: [us...@httpd] ssl on apache > To: users@httpd.apache.org > Date: Thursday, 7

Re: [us...@httpd] ssl on apache

2009-05-07 Thread Krist van Besien
On Thu, May 7, 2009 at 2:04 PM, Melanie Pfefer wrote: > > Hi > > Things went OK now. > I can access apache on the secure port and using a real certificate. > > Now, I want to redirect to tomcat that is also on ssl. Tomcat has a > self-signed and expired certificate. > > The redirection went OK wi

Re: [us...@httpd] ssl on apache

2009-05-07 Thread Melanie Pfefer
ote: > From: Krist van Besien > Subject: Re: [us...@httpd] ssl on apache > To: users@httpd.apache.org > Date: Thursday, 7 May, 2009, 2:30 PM > On Thu, May 7, 2009 at 11:23 AM, > Melanie Pfefer > > wrote: > > > > Hi. > > > > I am getting this error

Re: [us...@httpd] ssl on apache

2009-05-07 Thread Krist van Besien
On Thu, May 7, 2009 at 11:23 AM, Melanie Pfefer wrote: > > Hi. > > I am getting this error after I received the certificate from the root CA: > > [error] Init: Unable to read server certificate from file > /usr/local/apache/conf/ssl/server.crt > [error] SSL Library Error: 218529960 error:0D0680A8

Re: [us...@httpd] ssl on apache

2009-05-07 Thread Davide Bianchi
Melanie Pfefer wrote: > Is it a problem with the certificate or something I should change in > httpd.conf? > > openssl x509 -noout -text -in /usr/local/apache/conf/ssl/server.crt > unable to load certificate > 25764:error:0906D06C:PEM routines:PEM_read_bio:no start > line:pem_lib.c:647:Expecting

Re: [us...@httpd] ssl on apache

2009-05-07 Thread Melanie Pfefer
wrote: > From: Prasanna Ram Venkatachalam > Subject: Re: [us...@httpd] ssl on apache > To: users@httpd.apache.org > Date: Thursday, 7 May, 2009, 11:28 AM > Yes Correct! > > > On Thu, May 7, 2009 at 1:50 PM, > Melanie Pfefer > wrote: > > > Hi > >

Re: [us...@httpd] ssl on apache

2009-05-07 Thread Prasanna Ram Venkatachalam
ianchi > wrote: > > > From: Davide Bianchi > > Subject: Re: [us...@httpd] ssl on apache > > To: users@httpd.apache.org > > Date: Thursday, 7 May, 2009, 11:10 AM > > Melanie Pfefer wrote: > > > Hi, > > > > > > I had an official signatur

Re: [us...@httpd] ssl on apache

2009-05-07 Thread Melanie Pfefer
certificate called server.crt. Correct? Then I use this server.crt and the server.key in apache. Correct? Thank you --- On Thu, 7/5/09, Davide Bianchi wrote: > From: Davide Bianchi > Subject: Re: [us...@httpd] ssl on apache > To: users@httpd.apache.org > Date: Thursday, 7 May, 20

Re: [us...@httpd] ssl on apache

2009-05-07 Thread Davide Bianchi
Melanie Pfefer wrote: > Hi, > > I had an official signature from the root CA. > > Now how to generate the server.key and server.crt? If you have a 'key' that is used to sign the certificate, simply use THAT key to sign the certificate instead of using the key you generated yourself. Otherwise,

[us...@httpd] ssl on apache

2009-05-07 Thread Melanie Pfefer
Hi, I had an official signature from the root CA. Now how to generate the server.key and server.crt? What I did so far is using a self-signed certificate: file.pem was generated by keytool openssl req -new -x509 -key file.pem openssl genrsa -des3 -out server.key 2048 thanks,