On Wed, Oct 17, 2007 at 08:46:01PM +0700, Muhammad Reza wrote: > Dear List. > > I have problem running apache in chroot mode with ssl enable. > Apache in chroot mode running fine without ssl enable, but when i try to > start with mod_ssl enable, error occured with this message. > > beastie#chroot /chroot/httpd /usr/local/apache2/bin/httpd > Apache/2.2.6 mod_ssl/2.2.6 (Pass Phrase Dialog) > Some of your private key files are encrypted for security reasons. > In order to read them you have to provide the pass phrases. > > Server beastie.mra.co.id:443 (RSA) > Enter pass phrase:Apache:mod_ssl:Error: Private key not found. > **Stopped > > and with error log > > [Wed Oct 17 13:37:25 2007] [error] Init: Private key not found > [Wed Oct 17 13:37:25 2007] [error] SSL Library Error: 218710120 > error:0D094068:asn1 encoding routines:d2i_ASN1_SET:bad tag > [Wed Oct 17 13:37:25 2007] [error] SSL Library Error: 218529960 > error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag > [Wed Oct 17 13:37:25 2007] [error] SSL Library Error: 218595386 > error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error > [Wed Oct 17 13:37:25 2007] [error] SSL Library Error: 218734605 > error:0D09A00D:asn1 encoding routines:d2i_PrivateKey:ASN1 lib > [Wed Oct 17 13:38:32 2007] [error] Init: Private key not found > [Wed Oct 17 13:38:32 2007] [error] SSL Library Error: 218710120 > error:0D094068:asn1 encoding routines:d2i_ASN1_SET:bad tag > [Wed Oct 17 13:38:32 2007] [error] SSL Library Error: 218529960 > error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag > [Wed Oct 17 13:38:32 2007] [error] SSL Library Error: 218595386b > error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error > [Wed Oct 17 13:38:32 2007] [error] SSL Library Error: 218734605 > error:0D09A00D:asn1 encoding routines:d2i_PrivateKey:ASN1 lib > > If i escape from chrooted enviroment, apache with mod_ssl work fine > > beastie# /usr/local/apache2/bin/httpd > Apache/2.2.6 mod_ssl/2.2.6 (Pass Phrase Dialog) > Some of your private key files are encrypted for security reasons. > In order to read them you have to provide the pass phrases. > > Server www.example.com:443 (RSA) > Enter pass phrase: > > OK: Pass Phrase Dialog successful. > > Is there something missing here, please enlight me.
The first thing that comes to mind - are your keys inside the chroot area
you want to run apache in?
--
Daniel Bye
_
ASCII ribbon campaign ( )
- against HTML, vCards and X
- proprietary attachments in e-mail / \
pgpi9bMgoI0Uh.pgp
Description: PGP signature
