hat you are statically linking them in. Are you sure
that you are picking up the OpenSSL version and not Sun's default
installed version in /lib ? Can you post your build command?
Personally, I like dynamic linking, so that you can upgrade to a
new OpenSSL, without having to redo ev
I
assume that you are statically linking them in. Are you sure that
you are picking up the OpenSSL version and not Sun's default
installed version in /lib ? Can you post your build command?
Personally, I like dynamic linking, so that you can upgrade to a
new OpenSSL, without having
you are picking up the
>> OpenSSL version and not Sun's default installed version in /lib ? Can you
>> post your build command? Personally, I like dynamic linking, so that you
>> can upgrade to a new OpenSSL, without having to redo everything that uses it.
>>
>&
you
>> post your build command? Personally, I like dynamic linking, so that you
>> can upgrade to a new OpenSSL, without having to redo everything that uses it.
>>
>> Dan
>>
>>
>> Please respond to users@httpd.apache.org
>>
>>
>> To:
On 11/25/2009 03:03 PM, John J. Consolati wrote:
Just checked into it further, and the ldd might not be a problem (I
think?)
The LD_LIBRARY_PATH env variable is being set to a location where the
/wrong/path files are. Is that a good enough solution?
As far as the Apache configuration, it is
"John J.
Consolati" ]
Sent: 25 November 2009 22:25
To: users@httpd.apache.org
Subject: Re: [us...@httpd] SSL on Apache 2.2.14
Here are the build commands I've tried:
./configure --prefix=/home/consolati1/apache/httpd-2.2.14/installed --
enable-static-support --enable-ssl --with-
users@httpd.apache.org
cc: (bcc: Dan Mitton/YD/RWDOE)
Subject: Re: [us...@httpd] SSL on Apache 2.2.14
LSN: Not Relevant
User Filed as: Not a Record
Here are the build commands I've tried:
./configure --prefix=/home/consolati1/apache/httpd-2.2.14/installed --
enable-static-suppo
e to a new OpenSSL,
without having to redo everything that uses it.
Dan
Please respond to users@httpd.apache.org
To:users@httpd.apache.org
cc: (bcc: Dan Mitton/YD/RWDOE)
Subject:Re: [us...@httpd] SSL on Apache 2.2.14
LSN: Not Relevant
User Filed as: Not a Record
D
tpd.apache.org
cc: (bcc: Dan Mitton/YD/RWDOE)
Subject:Re: [us...@httpd] SSL on Apache 2.2.14
LSN: Not Relevant
User Filed as: Not a Record
Dan,
The error occurs on both Safari and Firefox on Apache 2.2.14. We
don't have IE in our environment. Both Safari and Firefox wor
c, you will not have a mod_ssl.so. Otherwise, mod_ssl.so
should normally be in your apache's modules subdirectory.
Do you only get the error on Firefox and not IE?
Dan
Please respond to users@httpd.apache.org
To: users@httpd.apache.org
cc: (bcc: Dan Mitton/YD/RWDOE)
Su
John,
This is a (very) short explanation of the error code at:
http://www.mozilla.org/projects/security/pki/nss/ref/ssl/sslerr.html
and this one has a possible cause:
http://serverfault.com/questions/63167/sslerrorbadmacalert-error-in-firefox
You might want to Google the message for more info.
mod_ssl.so. Otherwise, mod_ssl.so should normally be in
your apache's modules subdirectory.
Do you only get the error on Firefox and not IE?
Dan
Please respond to users@httpd.apache.org
To: users@httpd.apache.org
cc: (bcc: Dan Mitton/YD/RWDOE)
Subject:Re: [us...@httpd] SS
Just checked into it further, and the ldd might not be a problem (I
think?)
The LD_LIBRARY_PATH env variable is being set to a location where the /
wrong/path files are. Is that a good enough solution?
As far as the Apache configuration, it is correct to my knowledge...I
followed the appr
Here is the complete command:
openssl s_server -cert /erd/www/erd/server/apache/httpd-2.2.14/
installed/conf/ssl.crt/www-erdc.crt -key /erd/www/erd/server/apache/
httpd-2.2.14/installed/conf/ssl.key/www-erdc.secureprivate.key -
CAfile /erd/www/erd/server/apache/httpd-2.2.14/installed/conf/ssl.
On Nov 25, 2009, at 10:17 AM, John J. Consolati wrote:
> Thank you for the reply.
>
> Unfortunately, upgrading Solaris isn't an option. Here is the version I have
> to work with (quite old..):
>
> bash-2.05# cat /etc/release
>Solaris 9 4/04 s9s_u6wos_08a SPARC
>
Thank you for the reply.
Unfortunately, upgrading Solaris isn't an option. Here is the version
I have to work with (quite old..):
bash-2.05# cat /etc/release
Solaris 9 4/04 s9s_u6wos_08a SPARC
Copyright 2004 Sun Microsystems, Inc. All Rights Reserved.
On Nov 25, 2009, at 9:23 AM, John J. Consolati wrote:
> Hopefully someone will be able to help, as I've been working on this problem
> for quite a while and have hit a wall. I'm trying to upgrade Apache 2.0.47
> to 2.2.14, and I need SSL support. Everything seems to build and compile
> okay,
Also what compiler are you using?
Sometimes if you use GCC on Solaris APR gets upset.
Try Sun Studio if you're not already using it.
From: "John J. Consolati" [mailto:"John J.
Consolati" ]
Sent: 25 November 2009 17:23
To: users@httpd.apache.org
Subject: [us.
This sounds like a Solaris bug.
Make sure you have a recent version of Solaris or the latest patches
installed...
What release/patch level are you using?
Danny
From: "John J. Consolati" [mailto:"John J.
Consolati" ]
Sent: 25 November 2009 17:23
To: users@h
Hi
Maybe try :
- put myhost in your /etc/hosts
- Servername myhost in your conf
-Message d'origine-
De : Melanie Pfefer [mailto:melanie_pfe...@yahoo.co.uk]
Envoyé : jeudi 7 mai 2009 14:50
À : users@httpd.apache.org
Objet : Re: [us...@httpd] ssl on apache
Hi,
Just not to take the
(CN) `myhost’ does NOT match server
name!?
The certificate request has myhost as CN. Any idea what is missing?
thank you
--- On Thu, 7/5/09, Krist van Besien wrote:
> From: Krist van Besien
> Subject: Re: [us...@httpd] ssl on apache
> To: users@httpd.apache.org
> Date: Thursday, 7
On Thu, May 7, 2009 at 2:31 PM, Melanie Pfefer
wrote:
>
> Hi Krist,
>
> I am proxying (I think):
>
> RewriteRule ^/(abc.*) https://tomcat:port/$1 [P,L]
>
> Yes it is ssl to ssl
Odd then that it works after you removed the tomcat server's
certificate from the apache server. Apache needs to be able
Hi Krist,
I am proxying (I think):
RewriteRule ^/(abc.*) https://tomcat:port/$1 [P,L]
Yes it is ssl to ssl
thanks
--- On Thu, 7/5/09, Krist van Besien wrote:
> From: Krist van Besien
> Subject: Re: [us...@httpd] ssl on apache
> To: users@httpd.apache.org
> Date: Thursday, 7
On Thu, May 7, 2009 at 2:04 PM, Melanie Pfefer
wrote:
>
> Hi
>
> Things went OK now.
> I can access apache on the secure port and using a real certificate.
>
> Now, I want to redirect to tomcat that is also on ssl. Tomcat has a
> self-signed and expired certificate.
>
> The redirection went OK wi
ote:
> From: Krist van Besien
> Subject: Re: [us...@httpd] ssl on apache
> To: users@httpd.apache.org
> Date: Thursday, 7 May, 2009, 2:30 PM
> On Thu, May 7, 2009 at 11:23 AM,
> Melanie Pfefer
>
> wrote:
> >
> > Hi.
> >
> > I am getting this error
On Thu, May 7, 2009 at 11:23 AM, Melanie Pfefer
wrote:
>
> Hi.
>
> I am getting this error after I received the certificate from the root CA:
>
> [error] Init: Unable to read server certificate from file
> /usr/local/apache/conf/ssl/server.crt
> [error] SSL Library Error: 218529960 error:0D0680A8
Melanie Pfefer wrote:
> Is it a problem with the certificate or something I should change in
> httpd.conf?
>
> openssl x509 -noout -text -in /usr/local/apache/conf/ssl/server.crt
> unable to load certificate
> 25764:error:0906D06C:PEM routines:PEM_read_bio:no start
> line:pem_lib.c:647:Expecting
wrote:
> From: Prasanna Ram Venkatachalam
> Subject: Re: [us...@httpd] ssl on apache
> To: users@httpd.apache.org
> Date: Thursday, 7 May, 2009, 11:28 AM
> Yes Correct!
>
>
> On Thu, May 7, 2009 at 1:50 PM,
> Melanie Pfefer
> wrote:
>
>
> Hi
>
>
ianchi
> wrote:
>
> > From: Davide Bianchi
> > Subject: Re: [us...@httpd] ssl on apache
> > To: users@httpd.apache.org
> > Date: Thursday, 7 May, 2009, 11:10 AM
> > Melanie Pfefer wrote:
> > > Hi,
> > >
> > > I had an official signatur
certificate called server.crt. Correct?
Then I use this server.crt and the server.key in apache. Correct?
Thank you
--- On Thu, 7/5/09, Davide Bianchi wrote:
> From: Davide Bianchi
> Subject: Re: [us...@httpd] ssl on apache
> To: users@httpd.apache.org
> Date: Thursday, 7 May, 20
Melanie Pfefer wrote:
> Hi,
>
> I had an official signature from the root CA.
>
> Now how to generate the server.key and server.crt?
If you have a 'key' that is used to sign the certificate, simply use
THAT key to sign the certificate instead of using the key you generated
yourself.
Otherwise,
31 matches
Mail list logo
