Return-Path: Delivered-To: apmail-httpd-users-archive@www.apache.org Received: (qmail 20027 invoked from network); 1 Dec 2004 21:27:36 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199) by minotaur-2.apache.org with SMTP; 1 Dec 2004 21:27:36 -0000 Received: (qmail 50572 invoked by uid 500); 1 Dec 2004 21:27:07 -0000 Delivered-To: apmail-httpd-users-archive@httpd.apache.org Received: (qmail 50551 invoked by uid 500); 1 Dec 2004 21:27:07 -0000 Mailing-List: contact users-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: users@httpd.apache.org list-help: list-unsubscribe: list-post: Delivered-To: mailing list users@httpd.apache.org Received: (qmail 50532 invoked by uid 99); 1 Dec 2004 21:27:06 -0000 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests= X-Spam-Check-By: apache.org Received-SPF: pass (hermes.apache.org: local policy includes SPF record at spf.trusted-forwarder.org) Received: from smtp005.mail.ukl.yahoo.com (HELO smtp005.mail.ukl.yahoo.com) (217.12.11.36) by apache.org (qpsmtpd/0.28) with SMTP; Wed, 01 Dec 2004 13:27:05 -0800 Received: from unknown (HELO ?81.98.165.128?) (beya?net1@81.98.165.128 with plain) by smtp005.mail.ukl.yahoo.com with SMTP; 1 Dec 2004 21:27:00 -0000 Mime-Version: 1.0 (Apple Message framework v619) In-Reply-To: <004001c4d7e8$a224ed10$0100a8c0@MEDIONPC> References: <8337ED1A-4301-11D9-8A30-0003938366A4@jibeya.com> <1101892963.4628.35.camel@localhost> <5963098E-437B-11D9-8A30-0003938366A4@jibeya.com> <1101894303.4635.38.camel@localhost> <963783A8-4380-11D9-8A30-0003938366A4@jibeya.com> <00a801c4d79b$660df530$0100a8c0@MEDIONPC> <010501c4d7bc$137b7ce0$0100a8c0@MEDIONPC> <015001c4d7c8$807615b0$0100a8c0@MEDIONPC> <5680882A-43BC-11D9-A375-0003938366A4@jibeya.com> <018901c4d7ce$95a463f0$0100a8c0@MEDIONPC> <01c601c4d7dc$4b99e3d0$0100a8c0@MEDIONPC> <8A3681A7-43D0-11D9-A0BC-0003938366A4@jibeya.com> <7A970C66-43D1-11D9-A0BC-0003938366A4@jibeya.com> <5CB3B220-43D3-11D9-A0BC-0003938366A4@jibeya.com> <029301c4d7e1$e e7b06b0$0100a8c0@MEDIONPC> <02cf01c4d7e 5$433efaa0$0100a8c0@MEDIONPC> <004001c4d7e8$a224ed10$0100a8c0@MEDIONPC> Content-Type: multipart/mixed; boundary=Apple-Mail-39--924831067 Message-Id: From: Andrew M Date: Wed, 1 Dec 2004 21:27:00 +0000 To: users@httpd.apache.org X-Mailer: Apple Mail (2.619) X-Virus-Checked: Checked Subject: Re: [users@httpd] mod_jk2 https X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N --Apple-Mail-39--924831067 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII; format=flowed ralph, I have recreated a key with no encryption but now get the following message in the terminal window: ./apachectl start (13)Permission denied: make_sock: could not bind to address 0.0.0.0:443 no listening sockets available, shutting down Unable to open logs or ./apachectl startssl (13)Permission denied: make_sock: could not bind to address 0.0.0.0:443 no listening sockets available, shutting down Unable to open logs I have attached my new key regards Andrew --Apple-Mail-39--924831067 Content-Transfer-Encoding: 7bit Content-Type: application/octet-stream; x-unix-mode=0644; name="server.key" Content-Disposition: attachment; filename=server.key -----BEGIN RSA PRIVATE KEY----- MIICWwIBAAKBgQC69KDfqV2KvE2kfEnLJlVN9NTZK2s/2KWC8aSW7FeG23cMui/I E6VC97CRQmBxO9O4DQCA7ZpMMsd4kxtRuXQ+9AmpSsObYFR5b6p1gdmk3DTiml/W 6nu023rzxTORpdOAmEJOgGdK7teCzUP0uf1PjVlmhcf4M2jK06C1JdEPlQIDAQAB AoGAHUVx7rLgz3j+GxPOpf0BfCwqKzpuF1f/Sgo1f9/PMHEqKZb5JjVVOa/4ODYR TYlVc8qtWoJZFzcYHhvCOkB0H6ZLUooDrwiXRwPYULs+RV+Snbfw8uyjEkJ/SdWP gsOJxYQebEuMQ7450PFueYErEFKEbpmraF3R7llqjLZ7SsECQQDywil6RRpbWSHC 1YsdwIyXmJgpbMpHQwiMRgqYP/cMFp2d33ueRzzqHoaJjN/s/sZU48vYsZV5YFsB wHAg0kZlAkEAxSc+nV5RnB01N70TN+N9Q8mXMeMV4QUOeAjEoRrQvQCL6MxyYcZB s0AtzoUioZ54g+kqDfasvoQtxYdmDQ25cQJAMfnu+BEJ4Ax1etrjjPh6+SqdCMow yoLuW5J/0+A3R/HP+RRtKqSX0cr+/4pU/0FkK03KRY4pq5c+pRms+9TOUQJAIdrp X7CwpvRFDTtEr5Y7Dobxlbl/KlLp9ybaTSgDrFEJtYJWKgAXjCZ7NzmZhtNlspE5 jYhMhbLBAWiM17UBoQJAA4X71XWWa63Gb+AOZySkh9sIU1H0tlpcaaG3koTuT9d4 7zJCbWVMh4kxXRJ/kVsWZBC/7dbvi1XpI+agGwrHyA== -----END RSA PRIVATE KEY----- --Apple-Mail-39--924831067 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed On 1 Dec 2004, at 20:59, Ralf Glauberman wrote: > like i sayed, your key-file is encrypted, try to use a unencrypted one. > > ----- Original Message ----- From: "Andrew M" > To: > Sent: Wednesday, December 01, 2004 9:45 PM > Subject: Re: [users@httpd] mod_jk2 https > > >> Ralph, >> my test key and certificate look fine to me, take a look. >> >> >> regards >> >> Andrew >> >> > > > ----------------------------------------------------------------------- > --------- > > >> >> On 1 Dec 2004, at 20:35, Ralf Glauberman wrote: >> >>> make sure your key-file and crt-file exist, belong together, are >>> valid >>> and readable for apache. >>> try a non-encripted certificate/key. >>> the key-file should look like this: >>> -----BEGIN RSA PRIVATE KEY----- >>> ... >>> -----END RSA PRIVATE KEY----- >>> the cert should look like this: >>> Certificate: >>> Data: >>> Version: 1 (0x0) >>> Serial Number: 4 (0x4) >>> Signature Algorithm: md5WithRSAEncryption >>> Issuer: ... >>> Validity >>> Not Before: Jun 21 12:51:40 2004 GMT >>> Not After : Dec 18 12:51:40 2004 GMT >>> Subject: ... >>> Subject Public Key Info: >>> Public Key Algorithm: rsaEncryption >>> RSA Public Key: (1024 bit) >>> Modulus (1024 bit): >>> ... other stuff >>> -----BEGIN CERTIFICATE----- >>> ... >>> ----END CERTIFICATE----- >>> >>> >>> ----- Original Message ----- From: Andrew M >>> To: users@httpd.apache.org >>> Sent: Wednesday, December 01, 2004 9:23 PM >>> Subject: Re: [users@httpd] mod_jk2 https >>> >>> >>> Ralph, >>> I removed all the IfDefine tags from both the http.conf and ssl.conf >>> files and then shut down. The server will now not boot up when I ask >>> it to, and when I check the error logs I get the following: >>> >>> [Wed Dec 01 20:19:23 2004] [error] Init: Unable to read pass phrase >>> [Hint: key introduced or changed before restart?] >>> [Wed Dec 01 20:19:23 2004] [error] SSL Library Error: 218710120 >>> error:0D094068:asn1 encoding routines:d2i_ASN1_SET:bad tag >>> [Wed Dec 01 20:19:23 2004] [error] SSL Library Error: 218529960 >>> error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag >>> [Wed Dec 01 20:19:23 2004] [error] SSL Library Error: 218595386 >>> error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 >>> error >>> [Wed Dec 01 20:19:23 2004] [error] SSL Library Error: 218734605 >>> error:0D09A00D:asn1 encoding routines:d2i_PrivateKey:ASN1 lib >>> >>> regards >>> >>> Andrew >>> >>> >>> On 1 Dec 2004, at 20:11, Ralf Glauberman wrote: >>> >>> >>> make sure you have removed every ifdefined in both configs, stop the >>> server, look at ps -aux to see if all childs have exited, if not kill >>> them. then start apache again. look at the error_log to see if there >>> are any problems. >>> >>> ----- Original Message ----- From: Andrew M >>> To: users@httpd.apache.org >>> Sent: Wednesday, December 01, 2004 8:58 PM >>> Subject: Re: [users@httpd] mod_jk2 https >>> >>> >>> Ralph, >>> already done. See message below. i attach version2 serv-info details >>> again. >>> Once I remove the tags, if I try to reboot the server it will not >>> shutdown, and I also cannot access the server at all! >>> >>> regards >>> >>> Andrew >>> >>> >>> >>> >>> >>> >>> On 1 Dec 2004, at 19:44, Andrew M wrote: >>> >>> >>> Ralph, >>> looking at the server-info myself, I was unable to see the ssl module >>> being pulled in. I did the following: >>> >>> # >>> LoadModule ssl_module modules/mod_ssl.so >>> # >>> >>> and now I can see the ssl_mod component being pulled in to the >>> server-info. Is there an issue with these tags? Anyway, I enclose >>> version 2 of the server-info >>> >>> regards >>> >>> Andrew >>> >>> >>> On 1 Dec 2004, at 19:38, Andrew M wrote: >>> >>> >>> Ralph, >>> as requested, i have attached the server information.. ;-) >>> >>> regards >>> >>> Andrew >>> >>> On 1 Dec 2004, at 19:31, Ralf Glauberman wrote: >>> >>> >>> i'm really sorry, but i did a mistake: it has to be server-info, not >>> server-status. could you please try this? >>> >>> ----- Original Message ----- From: Andrew M >>> To: users@httpd.apache.org >>> Sent: Wednesday, December 01, 2004 7:13 PM >>> Subject: Re: [users@httpd] mod_jk2 https >>> >>> >>> Ralf, >>> I have attached the information you requested as a html file. >>> >>> regards >>> >>> Andrew >>> >>> >>> >>> >>> >>> >>> >>> On 1 Dec 2004, at 17:52, Ralf Glauberman wrote: >>> >>> >>> >>> SetHandler server-status >>> Order deny,allow >>> Deny from all >>> Allow from 127.0.0.1 >>> >>> >>> >>> >>> >>> >>> >>> >>> --------------------------------------------------------------------- >>> The official User-To-User support forum of the Apache HTTP Server >>> Project. >>> See for more info. >>> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org >>> " from the digest: users-digest-unsubscribe@httpd.apache.org >>> For additional commands, e-mail: users-help@httpd.apache.org >>> >>> --------------------------------------------------------------------- >>> The official User-To-User support forum of the Apache HTTP Server >>> Project. >>> See for more info. >>> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org >>> " from the digest: users-digest-unsubscribe@httpd.apache.org >>> For additional commands, e-mail: users-help@httpd.apache.org >>> >>> >>> >>> >>> +The home of urban music >>> + http://www.beyarecords.com >>> >>> --------------------------------------------------------------------- >>> The official User-To-User support forum of the Apache HTTP Server >>> Project. >>> See for more info. >>> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org >>> " from the digest: users-digest-unsubscribe@httpd.apache.org >>> For additional commands, e-mail: users-help@httpd.apache.org >>> >>> >>> +The home of urban music >>> + http://www.beyarecords.com >>> >>> --------------------------------------------------------------------- >>> The official User-To-User support forum of the Apache HTTP Server >>> Project. >>> See for more info. >>> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org >>> " from the digest: users-digest-unsubscribe@httpd.apache.org >>> For additional commands, e-mail: users-help@httpd.apache.org >>> >>> >>> >>> >>> >>> >>> --------------------------------------------------------------------- >>> The official User-To-User support forum of the Apache HTTP Server >>> Project. >>> See for more info. >>> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org >>> " from the digest: users-digest-unsubscribe@httpd.apache.org >>> For additional commands, e-mail: users-help@httpd.apache.org >>> >>> --------------------------------------------------------------------- >>> The official User-To-User support forum of the Apache HTTP Server >>> Project. >>> See for more info. >>> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org >>> " from the digest: users-digest-unsubscribe@httpd.apache.org >>> For additional commands, e-mail: users-help@httpd.apache.org >>> >>> --------------------------------------------------------------------- >>> The official User-To-User support forum of the Apache HTTP Server >>> Project. >>> See for more info. >>> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org >>> " from the digest: users-digest-unsubscribe@httpd.apache.org >>> For additional commands, e-mail: users-help@httpd.apache.org >>> >>> >> >> >> > > > ----------------------------------------------------------------------- > --------- > > >> --------------------------------------------------------------------- >> The official User-To-User support forum of the Apache HTTP Server >> Project. >> See for more info. >> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org >> " from the digest: users-digest-unsubscribe@httpd.apache.org >> For additional commands, e-mail: users-help@httpd.apache.org > > > --------------------------------------------------------------------- > The official User-To-User support forum of the Apache HTTP Server > Project. > See for more info. > To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org > " from the digest: users-digest-unsubscribe@httpd.apache.org > For additional commands, e-mail: users-help@httpd.apache.org > > --Apple-Mail-39--924831067 Content-Type: text/plain; charset=us-ascii --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See for more info. To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org " from the digest: users-digest-unsubscribe@httpd.apache.org For additional commands, e-mail: users-help@httpd.apache.org --Apple-Mail-39--924831067--