Hello,
I’m running a small Apache Webser with SSL (I’ve built my own CA and I use
self created certificates) for testing-purposes and everything works as
expected. (Apache 2.2.3 and OpenSSL 0.9.8d on SUSE 10.2) But today I
stumbled across the following observation. Please take a look at my
following ssl-global.conf.
As you can see I use the directive AddType application/x-x509-ca-cert .crt
but at the end my certificates have got .pem form.
This might be a dump question but I’m rather new in the Apache-world and so
I wonder why I don’t need an AddType application/x-x509-ca-cert .pem
directive.
Or does .crt include .pem? I’ve found a lot of howtos to build
.pem-certificates but I wasn’t able to find a document where AddType
application/x-x509-ca-cert .pem is used.
my ssl-global.conf:
<IfDefine SSL>
<IfDefine !NOSSL>
<IfModule mod_ssl.c>
AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl .crl
SSLPassPhraseDialog builtin
SSLSessionCache shmcb:/var/lib/apache2/ssl_scache(512000)
SSLSessionCacheTimeout 600
SSLMutex default
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
<VirtualHost _default_:443>
ServerName 192.168.0.5:443
ErrorLog /opt/myownca/ssl_error_log
TransferLog /opt/myownca/ssl_access_log
SSLEngine on
SSLCiphersuite HIGH:MEDIUM
SSLProtocol all
SSLCertificateFile /opt/myownca/certificates/01.pem
SSLCertificateKeyFile /home/somewhere/certificatekey.pem
# SSLCertificateChainFile /opt/myown/cacert.pem
</VirtualHost>
</IfModule>
</IfDefine>
</IfDefine>
I hope that you’ll be able to help me.
Best regards domi
--
View this message in context:
http://www.nabble.com/*.pem-certificates-and-the-directive%3A-AddType-application-x-x509-ca-cert-.crt-tf3402178.html#a9474487
Sent from the Apache HTTP Server - Users mailing list archive at Nabble.com.
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
" from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
