You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by qing qing <qf...@yahoo.ca> on 2003/06/20 21:55:17 UTC

[users@httpd] Problem to chroot jail Apache2 with SSI

hello,
I encoutered such a problem:
I'd like to chroot apache2 in jail with ssl enabled.
When I run
chroot /chroot /chroot/usr/local/apache2/bin/httpd -k
start

where /chroot is the jail directory I used.
There will be an error message says,
mod_ssl:Error: Private key not found.

But if I run the apache without chroot, 
/chroot/usr/local/apache2/bin/httpd -k start
it works fine. the problem seems not missing the key.

Does someone has suggestions?
Thanks

Qing

______________________________________________________________________ 
Post your free ad now! http://personals.yahoo.ca

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] Problem to chroot jail Apache2 with SSI

Posted by Tim Wort <ti...@pobox.com>.
On Fri, 20 Jun 2003, qing qing wrote:

> hello,
> I encoutered such a problem:
> I'd like to chroot apache2 in jail with ssl enabled.
> When I run
> chroot /chroot /chroot/usr/local/apache2/bin/httpd -k
> start
>
> where /chroot is the jail directory I used.
> There will be an error message says,
> mod_ssl:Error: Private key not found.
>
> But if I run the apache without chroot,
> /chroot/usr/local/apache2/bin/httpd -k start
> it works fine. the problem seems not missing the key.

What is the path to the key? When you run chroot the path to the key will
need to be relative to /chroot



>
> Does someone has suggestions?
> Thanks
>
> Qing
>
> ______________________________________________________________________
> Post your free ad now! http://personals.yahoo.ca
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
>

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
=        Inkling Research Inc.      =
=    Tim.Wort@InklingResearch.com   =
=        Tim.Wort@pobox.com         =
=                                   =
=       Sun Certified Security      =
=           Administrator           =
=                                   =
=        Eschew Obfuscation         =
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org