You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Bhavesh Shah <bs...@citadon.com> on 2004/05/14 01:12:03 UTC
[users@httpd] Apache 2 configuration With SSL on Win 2K
Hi,
I need help in configuring Apache 2 Web Server with SSL on windows 2000.
I downloaded and installed Apache_2.0.49-Openssl_0.9.7d-win32.zip from
http://hunter.campbus.com <http://hunter.campbus.com> .
But somehow am not able to make it work with SSL however port 80 works
fine.
Below is my ssl.conf file
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
<IfDefine SSL>
Listen 443
AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl .crl
#SSLPassPhraseDialog builtin
SSLPassPhraseDialog exec:conf/passphrase.bat
SSLSessionCache dbm:logs/ssl_scache
SSLSessionCacheTimeout 300
#SSLMutex file:logs/ssl_mutex
SSLMutex default
<VirtualHost _default_:443>
# General setup for the virtual host
DocumentRoot "E:/Program Files/apache/htdocs"
ServerName www.bshah.com:443
ServerAdmin netops@citadon.com
ErrorLog logs/error_log
TransferLog logs/access_log
LogLevel info
SSLEngine on
SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
SSLCertificateFile conf/ssl/crt/www.bshah.com.crt
SSLCertificateFile conf/ssl/key/www.bshah.com.key
<Files ~ "\.(cgi|shtml|phtml|php3?)$">
SSLOptions +StdEnvVars
</Files>
<Directory "c:/apache/cgi">
SSLOptions +StdEnvVars
</Directory>
SetEnvIf User-Agent ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
CustomLog logs/ssl_request_log \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>
</IfDefine>
Below is the error I am receiving
[Thu May 13 13:42:54 2004] [error] Init: Private key not found
[Thu May 13 13:42:54 2004] [error] SSL Library Error: 218710120
error:0D094068:asn1 encoding routines:d2i_ASN1_SET:bad tag
[Thu May 13 13:42:54 2004] [error] SSL Library Error: 218529960
error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
[Thu May 13 13:42:54 2004] [error] SSL Library Error: 218595386
error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error
[Thu May 13 13:42:54 2004] [error] SSL Library Error: 218734605
error:0D09A00D:asn1 encoding routines:d2i_PrivateKey:ASN1 lib
[Thu May 13 13:43:29 2004] [info] Loading certificate & private key of
SSL-aware server
If I comment out directive SSLPassPhraseDialog exec:conf/passphrase.bat
and uncomment "SSLPassPhraseDialog builtin"
I get the following error:
[Thu May 13 13:43:29 2004] [error] Init: SSLPassPhraseDialog builtin is
not supported on Win32 (key file E:/Program
Files/Apache/conf/ssl/crt/www.bshah.com.crt)
Any Help is greatly appreciated and once again sorry for the trouble.
Regards
Bhavesh
Re: [users@httpd] Apache 2 configuration With SSL on Win 2K
Posted by Geoff Hartman <ge...@fivepack.net>.
I had a similar problem and eventually had to end up using certs & keys from a Linux machine. Fortunately this is only for internal testing, so I would be very curious to see how to go about this properly...
----- Original Message -----
From: Bhavesh Shah
To: users@httpd.apache.org
Sent: Thursday, May 13, 2004 4:12 PM
Subject: [users@httpd] Apache 2 configuration With SSL on Win 2K
Hi,
I need help in configuring Apache 2 Web Server with SSL on windows 2000.
I downloaded and installed Apache_2.0.49-Openssl_0.9.7d-win32.zip from http://hunter.campbus.com.
But somehow am not able to make it work with SSL however port 80 works fine.
Below is my ssl.conf file
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
<IfDefine SSL>
Listen 443
AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl .crl
#SSLPassPhraseDialog builtin
SSLPassPhraseDialog exec:conf/passphrase.bat
SSLSessionCache dbm:logs/ssl_scache
SSLSessionCacheTimeout 300
#SSLMutex file:logs/ssl_mutex
SSLMutex default
<VirtualHost _default_:443>
# General setup for the virtual host
DocumentRoot "E:/Program Files/apache/htdocs"
ServerName www.bshah.com:443
ServerAdmin netops@citadon.com
ErrorLog logs/error_log
TransferLog logs/access_log
LogLevel info
SSLEngine on
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
SSLCertificateFile conf/ssl/crt/www.bshah.com.crt
SSLCertificateFile conf/ssl/key/www.bshah.com.key
<Files ~ "\.(cgi|shtml|phtml|php3?)$">
SSLOptions +StdEnvVars
</Files>
<Directory "c:/apache/cgi">
SSLOptions +StdEnvVars
</Directory>
SetEnvIf User-Agent ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
CustomLog logs/ssl_request_log \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>
</IfDefine>
Below is the error I am receiving
[Thu May 13 13:42:54 2004] [error] Init: Private key not found
[Thu May 13 13:42:54 2004] [error] SSL Library Error: 218710120 error:0D094068:asn1 encoding routines:d2i_ASN1_SET:bad tag
[Thu May 13 13:42:54 2004] [error] SSL Library Error: 218529960 error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
[Thu May 13 13:42:54 2004] [error] SSL Library Error: 218595386 error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error
[Thu May 13 13:42:54 2004] [error] SSL Library Error: 218734605 error:0D09A00D:asn1 encoding routines:d2i_PrivateKey:ASN1 lib
[Thu May 13 13:43:29 2004] [info] Loading certificate & private key of SSL-aware server
If I comment out directive SSLPassPhraseDialog exec:conf/passphrase.bat and uncomment "SSLPassPhraseDialog builtin"
I get the following error:
[Thu May 13 13:43:29 2004] [error] Init: SSLPassPhraseDialog builtin is not supported on Win32 (key file E:/Program Files/Apache/conf/ssl/crt/www.bshah.com.crt)
Any Help is greatly appreciated and once again sorry for the trouble.
Regards
Bhavesh
Re: [users@httpd] Apache 2 configuration With SSL on Win 2K
Posted by hunter <th...@sympatico.ca>.
On Thu, 2004-05-13 at 19:12, Bhavesh Shah wrote:
> Hi,
>
> I need help in configuring Apache 2 Web Server with SSL on windows 2000.
>
> I downloaded and installed Apache_2.0.49-Openssl_0.9.7d-win32.zip from
> http://hunter.campbus.com <http://hunter.campbus.com> .
>
> But somehow am not able to make it work with SSL however port 80 works
> fine.
>
> Below is my ssl.conf file
>
>
>
> SSLRandomSeed startup builtin
>
> SSLRandomSeed connect builtin
>
>
>
> <IfDefine SSL>
>
>
>
> Listen 443
>
>
>
> AddType application/x-x509-ca-cert .crt
>
> AddType application/x-pkcs7-crl .crl
>
>
>
> #SSLPassPhraseDialog builtin
>
> SSLPassPhraseDialog exec:conf/passphrase.bat
>
>
>
> SSLSessionCache dbm:logs/ssl_scache
>
> SSLSessionCacheTimeout 300
>
>
>
> #SSLMutex file:logs/ssl_mutex
>
> SSLMutex default
>
>
>
> <VirtualHost _default_:443>
>
>
>
> # General setup for the virtual host
>
> DocumentRoot "E:/Program Files/apache/htdocs"
>
> ServerName www.bshah.com:443
>
> ServerAdmin netops@citadon.com
>
> ErrorLog logs/error_log
>
> TransferLog logs/access_log
>
> LogLevel info
>
>
>
> SSLEngine on
>
> SSLCipherSuite
> ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
>
>
>
> SSLCertificateFile conf/ssl/crt/www.bshah.com.crt
>
>
>
> SSLCertificateFile conf/ssl/key/www.bshah.com.key
>
>
>
> <Files ~ "\.(cgi|shtml|phtml|php3?)$">
>
> SSLOptions +StdEnvVars
>
> </Files>
>
> <Directory "c:/apache/cgi">
>
> SSLOptions +StdEnvVars
>
> </Directory>
>
>
>
> SetEnvIf User-Agent ".*MSIE.*" \
>
> nokeepalive ssl-unclean-shutdown \
>
> downgrade-1.0 force-response-1.0
>
>
>
> CustomLog logs/ssl_request_log \
>
> "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
>
>
>
> </VirtualHost>
>
>
>
> </IfDefine>
>
>
>
>
>
> Below is the error I am receiving
>
>
>
> [Thu May 13 13:42:54 2004] [error] Init: Private key not found
>
> [Thu May 13 13:42:54 2004] [error] SSL Library Error: 218710120
> error:0D094068:asn1 encoding routines:d2i_ASN1_SET:bad tag
>
> [Thu May 13 13:42:54 2004] [error] SSL Library Error: 218529960
> error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
>
> [Thu May 13 13:42:54 2004] [error] SSL Library Error: 218595386
> error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error
>
> [Thu May 13 13:42:54 2004] [error] SSL Library Error: 218734605
> error:0D09A00D:asn1 encoding routines:d2i_PrivateKey:ASN1 lib
>
> [Thu May 13 13:43:29 2004] [info] Loading certificate & private key of
> SSL-aware server
>
>
>
> If I comment out directive SSLPassPhraseDialog exec:conf/passphrase.bat
> and uncomment "SSLPassPhraseDialog builtin"
>
> I get the following error:
>
> [Thu May 13 13:43:29 2004] [error] Init: SSLPassPhraseDialog builtin is
> not supported on Win32 (key file E:/Program
> Files/Apache/conf/ssl/crt/www.bshah.com.crt)
>
>
>
> Any Help is greatly appreciated and once again sorry for the trouble.
>
> Regards
>
> Bhavesh
>
>
>
Bhavesh,
Plain text please.
I build the code for http://hunter.campbus.com and
http://tor.ath.cx/~hunter/apache/
Try downloading the zip labeled SAMPLE_SSL... from the archive site
(tor.ath.cx). It is based on an older version but it will give you ideas
on how to get it working. Note: I do not have a lot of experience using
SSL so what is in the sample is not authorative - it works though. It is
a starting place. Ask questions on the list after you get it working.
Chris
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org