Hello: 

Any help that anyone can give me or if you can at least point me in the
right direction I would really appreciate it. I installed
libapache-mod-ssl (on a debian system) last week and I haven't been able
to get it to work. I got to the section in the readme file (from the
libapache-mod-ssl documentation) that said: 

" If you don't have a virtual host but just one default server, you
should call this new virtualhost <VirtualHost _default_:443>." 

This is after I had made the certificate and key, chosen a passphrase
and configured httpd.conf to add the module "mod_ssl.so" file. So I went
to the httpd.conf and all I did was add this block (as instructed by the
sample vhosts file): 

<VirtualHost _default_:443> 
<IfModule mod_ssl.c> 
SSLEngine on 
SSLCertificateFile /etc/apache/ssl.crt/server.crt 
SSLCertificateKeyFile /etc/apache/ssl.key/server.key 
<Files ~ "\.(cgi|shtml)$"> 
SSLOptions +StdEnvVars 
</Files> 
<Directory "/usr/lib/cgi-bin"> 
SSLOptions +StdEnvVars 
</Directory> 
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown 

</IfModule> 
</VirtualHost> 

So then when it was time to stop and start apache, I did it through
Webmin and this is what I got: 

Failed to start apache: 
Starting web server: apacheApache/1.3.26 mod_ssl/2.8.9 (Pass Phrase 
Dialog) 
Some of your private key files are encrypted for security reasons. In
order to read them you have to provide us with the pass phrases. 

Server 192.168.1.8:443 (RSA) 
Enter pass phrase: 
Apache:mod_ssl:Error: Private key not found. 
**Stopped 
failed 

So I couldn't start Apache through the Webmin module (the samething also
happens when I reboot the server and it tries to start the apache
service, it will hang in that part of the boot up process until I enter
in the passphrase then it will continue booting), so then I went to the
command line and again I got the part that says "Enter pass phrase:" and
since I was in the command line I was able to enter it in, and apache
started fine. However, when I try to access apache through
https://localhost or https://host-ip-address or https://host.domain.com
it doesn't work it just gives me the page cannot be displayed error. It
only works if I access the server through regular "http://"; and not
through "https://"; so my 3 big questions are: 

1. How can I make it so that it doesn't ask me the pass phrase every
time I start apache? And if I do disable the pass phrase feature does
that mean that SSL is not started? 

But most importantly: 
2. Why are the references to any https:// address to the web server not
work even after I start apache in the command line and enter in the pass
phrase as I am prompted to do so? How come only the http:// references
work? 

3. Since the virtualHost configuration described above what can I
changed so that it will work properly, I want to be able to enable SSL
for the default server. How do I do that? and what virtualhosts do I
have to make? for instance: do I have to make all of the following 
<virtualhost localhost:443>, <virtualhost localhost:80>, <virtualhost
host-ip:443>, <virtualhost hostname:443>...etc? 

One last thing is that I checked my /var/log/apache/error.log file and I
had the following lines in there.. 

[Sun Jul 27 15:43:42 2003] [notice] suEXEC mechanism enabled (wrapper:
/usr/lib/apache/suexec) 
[Sun Jul 27 15:43:42 2003] [notice] Accept mutex: sysvsem (Default:
sysvsem) 
[Sun Jul 27 16:10:45 2003] [notice] caught SIGTERM, shutting down 
[Sun Jul 27 16:10:47 2003] [error] mod_ssl: Init: Private key not found
(OpenSSL library error follows) 
[Sun Jul 27 16:10:47 2003] [error] OpenSSL: error:0D084069:asn1 encoding
routines:d2i_ASN1_SET:bad tag 
[Sun Jul 27 16:10:47 2003] [error] OpenSSL: error:0D09D082:asn1 encoding
routines:d2i_RSAPrivateKey:parsing 
[Sun Jul 27 16:10:47 2003] [error] OpenSSL: error:0D09B00D:asn1 encoding
routines:d2i_PrivateKey:ASN1 lib 
[Sun Jul 27 16:16:38 2003] [error] mod_ssl: Init: Private key not found
(OpenSSL library error follows) 
[Sun Jul 27 16:16:38 2003] [error] OpenSSL: error:0D084069:asn1 encoding
routines:d2i_ASN1_SET:bad tag 
[Sun Jul 27 16:16:38 2003] [error] OpenSSL: error:0D09D082:asn1 encoding
routines:d2i_RSAPrivateKey:parsing 
[Sun Jul 27 16:16:38 2003] [error] OpenSSL: error:0D09B00D:asn1 encoding
routines:d2i_PrivateKey:ASN1 lib 
[Sun Jul 27 18:31:07 2003] [error] (2)No such file or directory:
mod_mime_magic: can't read magic file /etc/apache/share/magic 
[Sun Jul 27 18:31:07 2003] [error] (2)No such file or directory:
mod_mime_magic: can't read magic file /etc/apache/share/magic 

What is happening with this mod_ssl and OpenSSL lines in there, what do
they mean? is it relate it to the problem I mentione above about the
private key not being found when I try to start apache through webmin? 

I really hate asking all these questions and coming accross like I
havent done my homework but I have been searching the net, mailing lists
and people's configurations and I have seen some of the errors that I am
getting but I cant find any posted solutions. Again I would appreciate
ANY type of help, I been looking at this for a few days now I searched
on the net and I can't seem to find what the problem is. Thanx a lot!


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to