I've compiled Apache 2.0.59 with OpenSSL 0.9.9[dev].
The server can run well with RSA cert but when I tried to run it with ECC cert, 
the server refused to start.
Log files are showing:
[Fri Nov 03 14:52:20 2006] [info] Init: Initializing OpenSSL library
[Fri Nov 03 14:52:20 2006] [info] Init: Seeding PRNG with 144 bytes of entropy
[Fri Nov 03 14:52:20 2006] [info] Init: Generating temporary RSA private keys 
(512/1024 bits)
[Fri Nov 03 14:52:21 2006] [info] Init: Generating temporary DH parameters 
(512/1024 bits)
[Fri Nov 03 14:52:21 2006] [debug] ssl_scache_dbm.c(406): Inter-Process Session 
Cache (DBM) Expiry: old: 0, new: 0, removed: 0
[Fri Nov 03 14:52:21 2006] [info] Init: Initializing (virtual) servers for SSL

[Fri Nov 03 14:52:20 2006] [info] Loading certificate & private key of 
SSL-aware server
[Fri Nov 03 14:52:20 2006] [debug] ssl_engine_pphrase.c(469): unencrypted 
UNKNOWN private key - pass phrase not required
[Fri Nov 03 14:52:21 2006] [info] Configuring server for SSL protocol
[Fri Nov 03 14:52:21 2006] [debug] ssl_engine_init.c(405): Creating new SSL 
context (protocols: SSLv2, SSLv3, TLSv1)
[Fri Nov 03 14:52:21 2006] [debug] ssl_engine_init.c(588): Configuring 
permitted SSL ciphers 
[ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL]
[Fri Nov 03 14:52:21 2006] [error] Oops, no RSA or DSA server certificate 
found?!

The only thing I've changed in ssl.conf is:
SSLCertificateFile conf/secp521r1.crt
SSLCertificateKeyFile conf/secp521r1.key

Anyone has similar problem? 

Thanks in advance!


                
__________________________________ 
What will the world find in 2020? 
Leave a part of your 2006 in the Yahoo! Time Capsule. Contribute now! 
http://timecapsule.yahoo.com/capsule.php?intl=sg

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to