Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Message-ID: 
 <5593DA408212D511B0910002A513501F065591F6@phsexch20.mgh.harvard.edu>
From: "Kaplan, Andrew H." <AHKAPLAN@PARTNERS.ORG>
To: 'Boyle Owen' <Owen.Boyle@swx.com>
Cc: "'users@httpd.apache.org'" <users@httpd.apache.org>
Date: Mon, 9 Feb 2004 14:36:09 -0500 
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Subject: RE: [users@httpd] Problem Starting Apache with SSL

Owen --

I've made some progress -- The server does come up now. This is after I
recreated
the the server.csr, .key and .crt files along with the ca.key .crt =
files.
However
when I try to access the server from a client, the following error =
message
occurs:

Could not establish an encrypted connection because certificate =
presented by=20
<servername> is invalid or corrupted. Error Code: -8182.

What next?

-----Original Message-----
From: Boyle Owen [mailto:Owen.Boyle@swx.com]
Sent: Monday, February 09, 2004 8:16 AM
To: Kaplan, Andrew H.
Subject: FW: [users@httpd] Problem Starting Apache with SSL


-----Original Message-----
From: Boyle Owen=20
Sent: Montag, 9. Februar 2004 14:16
To: 'users@httpd.apache.org'
Subject: RE: [users@httpd] Problem Starting Apache with SSL


Didn't you get this earlier response?


> -----Original Message-----
> From: Boyle Owen=20
> Sent: Montag, 9. Februar 2004 10:26
> To: 'users@httpd.apache.org'
> Subject: RE: [users@httpd] Problem Starting Apache with SSL
>=20
>=20
> > -----Original Message-----
> > From: Kaplan, Andrew H. [mailto:AHKAPLAN@PARTNERS.ORG]
> >=20
> > I had temporarily brought down our Apache server (1.3.29)=20
> > (mod_ssl 2.18.16) to
> > reconfigure the httpd.conf file with some additional aliases.
> > When I went to restart the server, it was unable to do do. I=20
> > checked the
> > eror_log file, and came across the following messages:
> >=20
> > mod_ssl: Init: (servername:443) Unable to configure RSA=20
> > server private key
> > (OpenSSL library error follows)
> > OpenSSL: error:0B080074:x509 certificate=20
> > routines:X509_check_private_key:key
> > values mismatch
>=20
> You must have changed something with the certificates... Make=20
> sure the SSLKeyCertificateFile and SSLCertificateFile are the=20
> private and public keys of the same cert.
>=20
> BTW, you usually need a full stop/start to reload certs -=20
> restart or graceful is insufficient.
>=20
> Rgds,
> Owen Boyle
> Disclaimer: Any disclaimer attached to this message may be ignored.=20
>=20
> >=20
> > What do I need to do to correct this problem and get the=20
> > server back up and
> > running?
> >=20
> >=20
> ---------------------------------------------------------------------
> > The official User-To-User support forum of the Apache HTTP=20
> > Server Project.
> > See <URL:http://httpd.apache.org/userslist.html> for more info.
> > To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> >    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> > For additional commands, e-mail: users-help@httpd.apache.org
> >=20
> >=20
> Diese E-mail ist eine private und pers=F6nliche Kommunikation.=20
> Sie hat keinen Bezug zur B=F6rsen- bzw. Gesch=E4ftst=E4tigkeit der=20
> SWX Gruppe. This e-mail is of a private and personal nature.=20
> It is not related to the exchange or business activities of=20
> the SWX Group. Le pr=E9sent e-mail est un message priv=E9 et=20
> personnel, sans rapport avec l'activit=E9 boursi=E8re du Groupe SWX.
>

This message is for the named person's use only. It may contain
confidential, proprietary or legally privileged information. No
confidentiality or privilege is waived or lost by any mistransmission.
If you receive this message in error, please notify the sender urgently
and then immediately delete the message and any copies of it from your
system. Please also immediately destroy any hardcopies of the message.
You must not, directly or indirectly, use, disclose, distribute, print,
or copy any part of this message if you are not the intended recipient.
The sender's company reserves the right to monitor all e-mail
communications through their networks. Any views expressed in this
message are those of the individual sender, except where the message
states otherwise and the sender is authorised to state them to be the
views of the sender's company.=20


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org