hmm, you did stop and start your apache? because restart didn't work for me
either ...
you'll have to stop apache and wait, until no more processes are left and
then start it again.
cheers,
Stefan
-Ursprüngliche Nachricht-
Von: Murali K. Vemuri [mailto:[EMAIL PROTECTED]]
Gesendet: Dienst
Hi
Does anyone have a clue why ie6 and apache 1.3.19 with mod_ssl 2.8.4
(and openssl 0.9.6a) with a 128bit certificate may refuse to connect to
the server (i.e. it shows the typical error screen on ie).
The server has the usual settings - namely:
SSLSessionCache dbm:/var/cache/httpd/ssl_session_
"Murali K. Vemuri" wrote:
>
> hi,
> i could make a certificate in the way given by you.
> i copied the .crt and .key files into /etc/httpd/conf/ssl.crt/server.crt and
> ../ssl.key/server.key respectively and then restarted the httpd.
> after that i set the multi.crt ( i created like this instead
yeap.
when i say "/usr/local/apache/bin/httpd start" httpd gets started but, i get
some message also, which goes " could not determine server's fully qualified
domain name, using 127.0.0.1 for servername " " httpd started".
if i say " /usr/local/apache/bin/apachectl start" also, i
Hello.
Has anyone successfuly done Client Authentication using client
certificates with apache-openssl-modssl ? (server has self signed
certificate and Client has a GlobalSign Certificate)
or knows about a good tutorial?
thanks...
--
Marcelo Maraboli Rosselott
Ingeniero Civil Electroni
On Tue, Oct 23, 2001 at 07:44:35AM -0300, Marcelo Maraboli wrote:
> Hello.
>
> Has anyone successfuly done Client Authentication using client
> certificates with apache-openssl-modssl ? (server has self signed
> certificate and Client has a GlobalSign Certificate)
>
works just fine for me.
>
well.
i followed both the suggestions given by Boyle.
cleaning up the browser cache worked!
thanks a lot to Boyle
cheers
murali krishna vemuri
Owen Boyle wrote:
> "Murali K. Vemuri" wrote:
> >
> > hi,
> > i could make a certificate in the way given by you.
> > i copied the .crt an
Well that doesn't make a lot of senseso your saying that "configtest is
better at error checking than apache is at running?"
Here's the error I get:
Syntax error on line 1158 of /usr/local/apache/conf/httpd.conf:
Invalid command 'SSLEngine', perhaps mis-spelled or defined by a module not
inc
> >Well that doesn't make a lot of senseso your saying that
> >"configtest is
> >better at error checking than apache is at running?"
How do you think configtest works? - it's just an instance of apache
with an error trap and exit stuck on.
Actually I think you were mistaken when you told u
apachectl configtest is equivalent to httpd -t. Try doing
httpd -DSSL -t and see if you still get errors. Chances
are you have sections of your httpd.conf file that should
be wrapped in a section.
Andy
ComCity wrote:
>
> Well that doesn't make a lot of senseso your saying that "configtest
What does line 1158 of /usr/local/apache/conf/httpd.conf contain? Sure
looks here like yer compilation went wrong and ssl wasn't really included
into the resulting binary, though, again Owen and John will have a better
clue on this, but, that certainly looks like the error is telling you ssl
fai
>
> > >Well that doesn't make a lot of senseso your saying that
> > >"configtest is
> > >better at error checking than apache is at running?"
>
> How do you think configtest works? - it's just an instance of apache
> with an error trap and exit stuck on.
Exactly my point. It absolutely is ru
Instead of saying figure it out for yourself. Perhaps we could give
someone the answer they are looking for. With the understanding that
this list, modssl-users, is for helping each other understand what's
going on here. So, my 2cents is this: Check ssl_engine_log, error_log
and also make sure you
On Tue, Oct 23, 2001 at 09:49:22AM +0200, Martin B. Nielsen wrote:
>
> Does anyone have a clue why ie6 and apache 1.3.19 with mod_ssl 2.8.4
> (and openssl 0.9.6a) with a 128bit certificate may refuse to connect to
> the server (i.e. it shows the typical error screen on ie).
>
> The server has th
The commented out "Listen 443" and "Listen 80" are probably part of your
problem, however, I'd suspect that your httpd.conf is missing the following
from the relevant sections also:
LoadModule ssl_module modules/libssl.so
AddModule mod_ssl.c
-
John Airey
Internet systems support officer
Thank youAustin,Andy and Ron. I thought the purpose of the list was to
get helpI'm sorry if my question seemed stupid. It was not my intention
to post a stupid question in which I had not exhausted other resources or
throughly looked at what I could find on this. I searched the FAQ's an
On Tue, 23 Oct 2001 [EMAIL PROTECTED] wrote:
> The commented out "Listen 443" and "Listen 80" are probably part of your
> problem, however, I'd suspect that your httpd.conf is missing the following
> from the relevant sections also:
>
> LoadModule ssl_module modules/libssl.so
> AddModule
On Tue, Oct 23, 2001 at 03:19:42PM -0400, R. DuFresne wrote:
> On Tue, 23 Oct 2001 [EMAIL PROTECTED] wrote:
>
> > The commented out "Listen 443" and "Listen 80" are probably part of your
> > problem, however, I'd suspect that your httpd.conf is missing the following
> > from the relevant sections
On Tue, Oct 23, 2001 at 11:42:15AM -0700, ComCity wrote:
>
> --Heres what I found.
> I did a httpd -DSSL -t
> and it just said
> Syntax OK
>
> whereas the httpd -t gives the same previous error complaining about line
> 1158
if I'm reading the apachectl startup script correctly, the "restart" is
The commented lines have no effect in or out. This was occuring long before
these line comments were added. I just added those recently to find things
easier when editing the file to try with this issue. I added these comments
after the problem started...they where not there originally. Withou
What speciafically does yer configs line 1158 state?
It's the whole clue to the issue, as that is the speciafic line httpd is
pointing you to.
Thanks,
Ron DuFresne
On Tue, 23 Oct 2001, ComCity wrote:
> Thank youAustin,Andy and Ron. I thought the purpose of the list was to
> get help
Interestingcould this be the problem? As I said earlier
LoadModule ssl_module modules/libssl.so
is there and I thought AddModule mod_ssl.c was not. However, it is there,
it's just in a different place and split up. Could that be the problem?
This is on line 208 of httpd.conf
LoadM
On Tue, 23 Oct 2001, Mads Toftum wrote:
> On Tue, Oct 23, 2001 at 03:19:42PM -0400, R. DuFresne wrote:
> > On Tue, 23 Oct 2001 [EMAIL PROTECTED] wrote:
> >
> > > The commented out "Listen 443" and "Listen 80" are probably part of your
> > > problem, however, I'd suspect that your httpd.conf is m
Ok, so if I read this right
apachectl restart ...is not suppose to work and that's why it doesn't work
for me.
I made the changes you suggested to a copy of apachectl and it worked fine
as far as I can tell. The restart occurred and there was no error.
- Original Message -
Fro
>
> Sure it is. I gave you the urls in the httpd.conf file. Try them they both
> work
>
> http://209.10.62.26
> The ssl version of the site:
> https://209.10.62.26
Actually, I got an error connecting to the SSL site - identity certificate
name is not correct. And the session was not encry
Hi Mike,
the problem you are observing has a simple explanation. If you define
-DSSL as argument for apachectl or configtest or httpd the according
parts included in
.. are executed. If not defined, they are
ignored. Your LoadModule and AddModule statements are properly nested
with IfDefine
Hi Ron,
Apache does not load the source file mod_ssl.c. Therefore there is no
need for it to know where the source is.
The filename (without path) is part of the module structure (coded in
by the define STANDARD_MODULE_STUFF) used to register handlers,
commands etc. of a module into the core h
27 matches
Mail list logo