Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (asf.osuosl.org: local policy)
Message-ID: <002f01c5ef26$6cc32050$2800a8c0@zenith>
From: "herauthon" <herauthon@home.nl>
To: <users@httpd.apache.org>
References: <1586.150.101.239.218.1132627496.squirrel@webmail.exetel.com.au>
Date: Tue, 22 Nov 2005 06:34:35 +0100
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Subject: Re: [users@httpd] Migrating from IIS to Apache - how to keep the SSL
 certificate?

Suspicious whitespace sequence : Avast Alert


Sender:  vk01@exemail.com.au
Recipient:  users@httpd.apache.org
Subject:  Re: [users@httpd] Migrating from IIS to Apache - how to keep the
SSL certificate?

----- Original Message ----- 
From: <vk01@exemail.com.au>
To: <users@httpd.apache.org>
Sent: Tuesday, November 22, 2005 3:44 AM
Subject: [users@httpd] Migrating from IIS to Apache - how to keep the SSL
certificate?


> Hi,
>
> We are considering a migration from IIS to apache2 on a win2k server. I
> got mod_ssl up and running with a self-signed sertificate but I hit the
> wall when I tried to reuse our existing certificate signed from a CA.
> Unfortunately this is a show stopper.
>
> I have only a .cer file:
>
> openssl x509 -in <hostname>.crt -text
>
> Certificate:
>     Data:
>         Version: 3 (0x2)
>         Serial Number:
>             20:...
>         Signature Algorithm: sha1WithRSAEncryption
>         Issuer: C=...
>         Validity
>             Not Before: ...
>             Not After : ...
>         Subject: C=...
>         Subject Public Key Info:
>             Public Key Algorithm: rsaEncryption
>             RSA Public Key: (1024 bit)
>                 Modulus (1024 bit):
>                     00:...
>                 Exponent: ...
>         X509v3 extensions:
>             X509v3 Authority Key Identifier:
>                 keyid:36:...
>
>             X509v3 Subject Key Identifier:
>                 7D:..
>             X509v3 Key Usage: critical
>                 Digital Signature, Key Encipherment
>             X509v3 Basic Constraints: critical
>                 CA:FALSE
>             X509v3 Extended Key Usage:
>                 TLS Web Server Authentication, TLS Web Client
Authentication
>             X509v3 Certificate Policies:
>                 Policy: 1.3...
>                   CPS: https://...
>
>             X509v3 CRL Distribution Points:
>                 URI:http://...
>                 URI:http://...
>                 email:...
>
>             Netscape Cert Type:
>                 SSL Client, SSL Server
>     Signature Algorithm: sha1WithRSAEncryption
>         18:...
> -----BEGIN CERTIFICATE-----
> MIIF...
> -----END CERTIFICATE-----
>
> I copied the <hostname>.crt to Apache2\conf\ssl but when I started Apache
> I got :
>
> [Tue Nov 22 10:56:20 2005] [error] Init: SSLPassPhraseDialog builtin is
> not supported on Win32 (key file C:/Program Files/Apache
> Group/Apache2/conf/ssl/<hostname>.crt)
>
> I do not have neither the certificate signing request not the private key
> for this certificate. Is it possible to reuse it in Apache? How?
>
> TIA
>
> Vesselin
>
>
>
>
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org