It means that the file that it's attempting to read does not have the proper format of a .crt. Take a look of your cert in notepad, does the first line shows something like ---BEGIN CERTIFICATE---- . If no, then regenerate your cert.
SS --- [EMAIL PROTECTED] wrote: > I ran the command below and I did receive an error > so it looks like something is indeed wrong with the > SSL Certificate. If anyone has any ideas how what I > can look at regarding this error I would appreciate > it. Thanks > > 2705:error:0906D06C:PEM routines:PEM_read_bio:no > start line:pem_lib.c:662:Expecting: TRUSTED > CERTIFICATE > > ________________________________ > > From: [EMAIL PROTECTED] on behalf of > Dr. Stephen Henson > Sent: Sun 10/8/2006 12:01 PM > To: openssl-users@openssl.org > Subject: Re: Openssl Error + Apache > > > > On Sat, Oct 07, 2006, [EMAIL PROTECTED] wrote: > > > Hi there ~ > > > > I have an Apache installation running mod_ssl and > would like to setup another VirtualHost that runs > under SSL on a different port (e.g. 8443). The > default site on port 443 is running fine with SSL. > The new certificate I have installed for the second > site appears to be incorrect or the version of > OpenSSL I have is not up to date. This causes Apache > to crash. Can someone look at the error(s) below and > please tell me where to start or how to fix it? > > > > Errors: > > [Fri Oct 6 13:37:21 2006] [error] mod_ssl: Init: > Unable to read server certificate from file > /apache/conf > > > > /mycertificatename.crt (OpenSSL library error > follows) > > > > [Fri Oct 6 13:37:21 2006] [error] OpenSSL: > error:0D0680A8:asn1 encoding > routines:ASN1_CHECK_TLEN:wrong tag > > > > [Fri Oct 6 13:37:21 2006] [error] OpenSSL: > error:0D07803A:asn1 encoding > routines:ASN1_ITEM_EX_D2I:nested > > > > asn1 error > > > > Thanks in advance > > > > That indicates it doesn't like the certificate file > in mycertificatename.crt. > It may be corrupt or in the wrong format. Try the > command: > > openssl x509 -in mycertificatename.crt > > to see if you get the same error. > > Steve. > -- > Dr Stephen N. Henson. Email, S/MIME and PGP keys: > see homepage > OpenSSL project core developer and freelance > consultant. > Funding needed! Details on homepage. > Homepage: http://www.drh-consultancy.demon.co.uk > ______________________________________________________________________ > OpenSSL Project > http://www.openssl.org > User Support Mailing List > openssl-users@openssl.org > Automated List Manager > [EMAIL PROTECTED] > > > ______________________________________________________________________ > OpenSSL Project > http://www.openssl.org > User Support Mailing List > openssl-users@openssl.org > Automated List Manager > [EMAIL PROTECTED] > __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
