[CentOS] Re: self signed ssl cert on C5

2007-10-25 Thread Tom Diehl
On Thu, 25 Oct 2007, Kenneth Porter wrote: --On Thursday, October 25, 2007 2:54 PM -0400 Tom Diehl <[EMAIL PROTECTED]> wrote: SSL3_GET_CLIENT_CERTIFICATE Isn't that for when you need the client to prove who he his? Are you requiring client SSL certs? It looks like the client is failing to

[CentOS] Re: self signed ssl cert on C5

2007-10-25 Thread Tom Diehl
On Thu, 25 Oct 2007, Kai Schaetzl wrote: Tom Diehl wrote on Thu, 25 Oct 2007 14:54:19 -0400 (EDT): error 18 at 0 depth lookup:self signed certificate OK (roadrunner pts1) # Am I correct that the above error is normal for a self signed cert? Seems so, yes. I get the same. I think your cert i

[CentOS] Re: self signed ssl cert on C5

2007-10-25 Thread Tom Diehl
On Thu, 25 Oct 2007, Paul Heinlein wrote: On Thu, 25 Oct 2007, Tom Diehl wrote: Ok, So I changed the Makefile from localhost to match the actual hostname of the machine. I then ran "make testcert" as suggested above and answered the questions as appropriate. It then generated the cert without

Re: [CentOS] Re: self signed ssl cert on C5

2007-10-25 Thread Kenneth Porter
--On Thursday, October 25, 2007 2:54 PM -0400 Tom Diehl <[EMAIL PROTECTED]> wrote: SSL3_GET_CLIENT_CERTIFICATE Isn't that for when you need the client to prove who he his? Are you requiring client SSL certs? It looks like the client is failing to provide a good cert. __

Re: [CentOS] Re: self signed ssl cert on C5

2007-10-25 Thread Paul Heinlein
On Thu, 25 Oct 2007, Tom Diehl wrote: Ok, So I changed the Makefile from localhost to match the actual hostname of the machine. I then ran "make testcert" as suggested above and answered the questions as appropriate. It then generated the cert without errors. I then modified ssl.conf to point

[CentOS] Re: self signed ssl cert on C5

2007-10-25 Thread Tom Diehl
On Thu, 25 Oct 2007, Brian Mathis wrote: On 10/25/07, Tom Diehl <[EMAIL PROTECTED]> wrote: Hi, Does anyone have a pointer to correct documentation for generating and installing a self signed ssl cert for use on httpd on a C-5 machine? The docs say to use genkey but AFAIK upstream rm'd crypto-