On Fri, Mar 19, 1999, [EMAIL PROTECTED] wrote:
> "Ralf S. Engelschall" <[EMAIL PROTECTED]> writes:
>
> > *) The SSLCertificateFile and SSLCertificateKeyFile directives now can read
> > PEM (=DER+Base64+headers), DER+Base64 (without headers) and plain DER
> > format certificate and private key files. This is mostly provided for
> > convinience reasons.
>
> I haven't spent much more time on this, sorry, but I still cannot get this
> to work. Using Ralf's patch from last week, there appears to be a problem
> with how the private key is being read.
>
> Just for kicks, I went and got the latest versions of mod_ssl and OpenSSL
> via rsync last night and tried again. (I built directly out of pkg.apache.)
> This time I dump core on startup.
>
> I would appreciate it if someone who has this working successfully, try
> this out with the provided _sample_ server cert and key. The second cert is
> the ca cert used to issue the server cert. And let me know how it goes.
>
> [...]
> -----BEGIN ENCRYPTED PRIVATE KEY-----
> MIIBeDAaBgkqhkiG9w0BBQMwDQQIS0XKnH4OhTICAQUEggFY7p+anDqPJaJbDQMC
> CSqitvjPRt1kg1O98O4bnB+GYiGMZPeFEB537OvRsyrhOpDHaV/JD+c4eMwshgVU
> UUbaXqURzSi2vIV8LfCHUzjtQciJSjL721MHeyhN1z+rILFD8CmXDB2DV/NYjb28
> uVuU7ESIUnfKakRTJz6npj58DvpLJ/DaHJUp9/ap+EYrKgxFf3+A6Nnvr3vRLq1p
> HYngIgSqWDCD9csCrGv9Yu1KCU+ht35nLHbf2+AnLgDtTxHZM2tEh6yhMt/9298L
> HeTygTgcPHjsRd5uv6J3DSQm3Hx90lHrvXCgliL7x1zXbZWKW50D1ZFke2QGJzW9
> l5xZJ7mVMEgjp8KNB/dx2kwE+zeFCQUZYkfnoy36iCsshVZVV5lQEyL553jL71y5
> xdLxh6q/RhVO/UEnFM9Jk0QjxcVwIoNhjhc08ZmaeODm9QnWRCqtb9A7G9c=
> -----END ENCRYPTED PRIVATE KEY-----
Yeah, the problem is that OpenSSL doesn't know these "ENCRYPTED PRIVATE KEY"
headers. Mod_ssl cannot change this, of course. The question now is: From
where do they come, i.e. which program created this format? And what's in
this container? Just a Base64-encoded DER key?
Ralf S. Engelschall
[EMAIL PROTECTED]
www.engelschall.com
______________________________________________________________________
Apache Interface to SSLeay (mod_ssl) www.engelschall.com/sw/mod_ssl/
Official Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
