I did that and used the sign.sh and got this back?!?!?
-------
[SHELL ssl]# ./bin/sign.sh ./bin/server.csr
CA signing: ./bin/server.csr -> ./bin/server.crt:
Using configuration from ca.config
./ca.key: No such file or directory
trying to load CA private key
27322:error:02001002:system library:fopen:No such file or
directory:bss_file.c:245:fopen('./ca.key','r
')
27322:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:247:
CA verifying: ./bin/server.crt <-> CA cert
Error loading file ca.crt
27323:error:02001002:system library:fopen:No such file or
directory:bss_file.c:104:fopen('ca.crt','r')
27323:error:2006D002:BIO routines:BIO_new_file:system lib:bss_file.c:106:
27323:error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system
lib:by_file.c:273:
usage: verify [-verbose] [-CApath path] [-CAfile file] [-purpose purpose] cert1 cert2
...
recognized usages:
sslclient SSL client
sslserver SSL server
nssslserver Netscape SSL server
smimesign S/MIME signing
smimeencrypt S/MIME encryption
crlsign CRL signing
any Any Purpose
----- Original Message -----
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>; "Niklas Fondberg" <[EMAIL PROTECTED]>
Sent: Wednesday, December 06, 2000 5:09 AM
Subject: Re: generate a new key
> Addressed to: [EMAIL PROTECTED]
> "Niklas Fondberg" <[EMAIL PROTECTED]>
>
> ** Reply to note from "Niklas Fondberg" <[EMAIL PROTECTED]> Wed, 6 Dec 2000
>10:19:49 +0100
> >
> > How do one proceed to generate a new key? I have only the (bogus?)
> > key generated at compile time.
>
>
> See:
>
> http://www.modssl.org/docs/2.7/ssl_faq.html#ToC28
>
>
>
>
> > How does a minimal virtual host setting look like in
> httpd.conf?
>
>
> Very Minimal
>
>
> <VirtualHost 111.222.333.444:443>
> ServerAdmin [EMAIL PROTECTED]
> DocumentRoot /path/to/document/root
> ServerName www.domaind.tld
>
> SSLEnable
>
> SSLCertificateFile /path/to/certificate/file.crt
> SSLCertificateKeyFile /path/to/certificate/file.key
>
> SSLVerifyClient none
>
> SetEnvIf User-Agent ".*msie.*" \
> nokeepalive ssl-unclean-shutdown \
> downgrade-1.0 force-response-1.0
>
> </VirtualHost>
>
>
> Rick Widmer
> Internet Marketing Specialists
> http://www.developersdesk.com
>
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
