On Fri, May 18, 2001 at 11:58:02AM +1200, Damon Maria wrote:
> Since I haven't gotten too much of a response yet (expect for thanks to
> Juha) I'll post my VirtualHost in httpd.conf, which I probably should
> have done in the first place.
>
> If I uncomment the SSLCertificateChainFile line then the following
> appears in the log and apache won't start...
>
> "[error] mod_ssl: Init: (www.motorweb.co.nz:443) Failed to configure CA
> certificate chain!"
>
> I've copied my original message at the bottom of this one which contains
> the contents of /etc/httpd/conf/ssl.crt/intermediate_ca.crt (as I got it
> from Verisign's site).
Without going through mod_ssl's source: did you try to put the complete
chain into the ChainFile? The server cert is in its own file. For my
server (www.aet.tu-cottbus.de) I have an intermediate and a root CA
certificate. Both are concatenated together into the chain file.
With respect to the error message, mod_ssl can write more messages
than that into e.g. an ssl_engine_log. Did you check all possible
logfiles?
Best regards,
Lutz
--
Lutz Jaenicke [EMAIL PROTECTED]
BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/
Lehrstuhl Allgemeine Elektrotechnik Tel. +49 355 69-4129
Universitaetsplatz 3-4, D-03044 Cottbus Fax. +49 355 69-4153
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]