David,
Have you looked at the modssl FAQ? It is at
http://www.modssl.org/docs/2.8/ssl_faq.html#ToC28
The FAQ contains instructions for using openssl to create a certificate.
They should work. The instructions that you mention look pretty similar but
you never know.
If you could send me the certificate that you generated, I would be happy to
take a look at it for you and try it on my test web server that has a self
signed cert.
Richard
Richard W. Lane
Science Applications International Corporation (SAIC)
7125 Columbia Gateway Dr. 300
Columbia, MD 21046
(410)953-6854 (Desk)
(410)953-7001 (fax)
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Thursday, July 12, 2001 10:38 AM
To: [EMAIL PROTECTED]
Subject: Expired Certificate
Folks,
The certificate at one of our web sites has expired. It's a self-signed
certificate and we want to create another. The problem is when we try to
sign the new certificate by running sign.sh we get the following error
message:
error 7 at 0 depth lookup: certificate signature failure.
I found some instructions at
http://www.iu.hio.no/~mark/WebCourse/node25.html
which implied we could ignore this error but if we do we get a message
saying "The server's certificate has an invalid signature".
I even got hold of a set of perl scripts for creating a certificate from
the openssl.org web site. They produced the same error.
What's likely to be causing this, please, and how can we get round it?
I don't know what versions of anything were installed on this machine, but
the installation appears to date from July 1999, if that helps
TIA for your advice,
Dave Smith
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]