Try the following step by step.. It should work... http://tud.at/programm/apache-ssl-win32-howto.php3
----- Original Message ----- From: [EMAIL PROTECTED] To: users@httpd.apache.org Sent: Friday, September 21, 2007 9:45 PM Subject: Re: [EMAIL PROTECTED] https can;t be good for work Hello, I have ever tried to the thing last time... BUT it is still the error message ! Thanks ! Edward. Serge Dubrouski wrote: You still have a CA certificate configured as a Server SSL certificate. That won't work. Get self signed SSL Server certificate. On 9/21/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: Hello to you, re-post there again: [Fri Sep 21 23:40:04 2007] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?) [Fri Sep 21 23:40:04 2007] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?) [Fri Sep 21 23:52:36 2007] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?) [Fri Sep 21 23:52:36 2007] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?) [Fri Sep 21 23:52:36 2007] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?) [Fri Sep 21 23:52:36 2007] [warn] RSA server certificate CommonName (CN) `localhost.localdomain' does NOT match server name!? [Fri Sep 21 23:52:36 2007] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?) [Fri Sep 21 23:52:36 2007] [warn] RSA server certificate CommonName (CN) `localhost.localdomain' does NOT match server name!? Edward. Serge Dubrouski wrote: What is the error message when you try selfsigned cert? On 9/21/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: Hello to you, I have ever tried to the self cert, but it is still problem... BTW, for the VH ( Virtual Host ) config, how to convert http to https ? Due to http need the 80 port, and https need the 443 port... Thanks ! Edward. Serge Dubrouski wrote: This guide tells you how to create your own Certificate Authority. You can't use CA cert as a server SSL cert you have to use it for signing server cert. See OpenSSL documentation for this or try to use this: http://httpd.apache.org/docs/2.2/ssl/ssl_faq.html#selfcert On 9/21/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: Hello, Following this guide ! http://httpd.apache.org/docs/2.2/ssl/ssl_faq.html#ownca Edward. Serge Dubrouski wrote: Where did you get you SSL certificate? Look like it's not the right one. On 9/21/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: Dear All, I can't to enable the https as the following : <VirtualHost webmail.ita.org.mo> Redirect / https://webmail.ita.org.mo:443 </VirtualHost> <VirtualHost webmail.ita.org.mo> DocumentRoot ... ServerName webmail.ita.org.mo ErrorLog ... TransferLog ... SSLEngine on SSLCertificateFile server.crt SSLCertificateKeyFile server.key <Files ~ "\.(cgi|shtml|phtml|php3?)$"> SSLOptions +StdEnvVars </Files> <Directory "/var/www/cgi-bin"> SSLOptions +StdEnvVars </Directory> SetEnvIf User-Agent ".*MSIE.*" \ nokeepalive ssl-unclean-shutdown \ downgrade-1.0 force-response-1.0 CustomLog /var/log/itawm-ssl_request_log \ "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b" </VirtualHost> error log of web server : [Fri Sep 21 22:42:44 2007] [warn] RSA server certificate CommonName (CN) `localhost' does NOT match server name!? [Fri Sep 21 22:42:44 2007] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?) [Fri Sep 21 22:42:44 2007] [warn] RSA server certificate CommonName (CN) `localhost' does NOT match server name!? [Fri Sep 21 22:43:29 2007] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?) [Fri Sep 21 22:43:29 2007] [warn] RSA server certificate CommonName (CN) `localhost' does NOT match server name!? [Fri Sep 21 22:43:29 2007] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?) [Fri Sep 21 22:43:29 2007] [warn] RSA server certificate CommonName (CN) `localhost' does NOT match server name!? ssl error log : [Fri Sep 21 22:43:29 2007] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?) [Fri Sep 21 22:43:29 2007] [warn] RSA server certificate CommonName (CN) `localhost.localdomain' does NOT match server name!? [Fri Sep 21 22:43:29 2007] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?) [Fri Sep 21 22:43:29 2007] [warn] RSA server certificate CommonName (CN) `localhost.localdomain' does NOT match server name!? So, what mistake about the config ? Remark : The ssl is self-signed SSL Certificate, and the Web Server come with FC6 System. Thanks ! Edward. --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] DISCLAIMER ========== This e-mail may contain privileged and confidential information which is the property of Persistent Systems Pvt. Ltd. It is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorized to read, retain, copy, print, distribute or use this message. If you have received this communication in error, please notify the sender and delete all copies of this message. Persistent Systems Pvt. Ltd. does not accept any liability for virus infected mails.
