On Thu, Jun 09, 2016 at 01:19:50PM -0500, Troy Frericks wrote:
> On the latest OpenBSD (5.9/amd64 at digitalocean.com), I'm able to start
> httpd without
> SSL using a simple httpd.conf file (below), but when I add SSL, I get error
> in the messages log.
> 
> I've focused on this error: [/bsd: httpd(40862): syscall 5 "wpath"]
> 

You need to remove the password from your TLS private key. httpd is
breaking its pledge when it tries to prompt for the password, but even
if it could prompt it doesn't support it anyway (it would give a
slightly more helpful error though).


--
Carlin


> I've spent hours googeling, and found only one mention that this may be a
> kernel bug.
> I've checked theOpenBSD 5.9 patch list, the OpenBSD 5.9 -current changes
> log.
> 
> I've struck out, seeking assistance... which is greatly appreciated!
> 
> I've also requested assistance here. Had some helpful suggestions, but it's
> still not working.
> https://stackoverflow.com/questions/37681532/httpd-with-ssl-will-not-start-on-openbsd-5-9-amd64
> 
> Here is my httpd.conf file for the non-ssl configuration. The ssl
> configuration is accomplished by
> uncommenting out all the current comments, and I did then comment out the
> 'root' for the port 80 section.
> 
> # cat /etc/httpd.conf
>   interface="egress"
>   domain="infmgr.com"
>   prefork 3
>   types { include "/usr/share/misc/mime.types" }
>   #server $domain {
>   #    listen on $interface tls port 443
>   #    tls {
>   #        certificate "/etc/ssl/server.crt"
>   #        key "/etc/ssl/private/server.key"
>   #    }
>   #    hsts
>   #    root "/htdocs/infmgr.com" # chrooted at /var/www/
>   #}
>   server $domain {
>       listen on $interface port 80
>       root "/htdocs/infmgr.com" # chrooted at /var/www/
>   #    block return 301 "https://$SERVER_NAME$REQUEST_URI";
>   }
> 
> Troy.
> #

Reply via email to