httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Daniel Lopez <dan...@rawbyte.com>
Subject Re: [users@httpd] Apache-ssl
Date Sun, 25 May 2003 19:56:02 GMT

Unless you are doing client authentication, you can eliminate the directives
SSLCACertificatePath and SSLCACertificateFile.

Can you tell us what you get from

./usr/local/ssl/install/bin/openssl req -noout -text  -in /root/only/path/to/xxx_xxx_com.crt


Can you also make sure there are  no other places in the config file that
you are configuring SSL, in case it is interfering.

Cheers

Daniel




> Untrusted Authority and Invalid Name.
> 
> I've attached a jpg of the view certificate.
> 
> The certificate details seem to be the same as would be in a template:
> 
> E = root@localhost.localdomain
> CN = localhost.localdomain
> OU = SomeOrganizationalUnit
> O = SomeOrganization
> L = SomeCity
> S = SomeState
> C = --
> 
> Thanks
> Nigel
> 
> MIS Web Design
> http://www.miswebdesign.com/
> 
> > -----Original Message-----
> > From: Beau Hebert [mailto:bhebert@c-quential.com]
> > Sent: 23 May 2003 15:00
> > To: users@httpd.apache.org
> > Subject: RE: [users@httpd] Apache-ssl
> >
> >
> > Which Security Alert are you receiving (i.e. Untrusted Authority,
> > Invalid Date, Invalid Name)?
> >
> > Beau
> >
> > -----Original Message-----
> > From: Nigel Peck - MIS Web Design [mailto:nigel@miswebdesign.com]
> > Sent: Friday, May 23, 2003 6:13 AM
> > To: users@httpd.apache.org
> > Subject: [users@httpd] Apache-ssl
> >
> > I'm running RedHat 7.3, Apache 1.3.27 with Apache-ssl 1.48.
> >
> > I installed Apache-ssl and the server starts up fine but when I visit it
> > I
> > get a security warning from IE and the CA root certificate appears to be
> > from localhost.localdomain, I am using the apache bundle provided by the
> > certificate provider.
> >
> > Any ideas?
> >
> > Thanks
> > Nigel
> >
> > httpsd.conf:
> >
> > SSLRandomFile file /dev/urandom 1024
> >
> > SSLCACertificatePath /path/to/bundle
> >
> > SSLCacheServerPort 12345
> > SSLCacheServerPath bin/gcache
> > SSLSessionCacheTimeout 3600
> >
> > SSLCACertificateFile /path/to/bundle/ca_new.txt
> > SSLCertificateFile /root/only/path/to/xxx_xxx_com.crt
> > SSLCertificateKeyFile /root/only/path/to/myserver.key
> >
> >
> > ---------------------------------------------------------------------
> > The official User-To-User support forum of the Apache HTTP Server
> > Project.
> > See <URL:http://httpd.apache.org/userslist.html> for more info.
> > To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> >    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> > For additional commands, e-mail: users-help@httpd.apache.org
> >
> >
> >
> >
> > ---------------------------------------------------------------------
> > The official User-To-User support forum of the Apache HTTP Server Project.
> > See <URL:http://httpd.apache.org/userslist.html> for more info.
> > To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> >    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> > For additional commands, e-mail: users-help@httpd.apache.org
> >


> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org

-- 
Teach Yourself Apache 2 -- http://apacheworld.org/ty24/

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message