You are viewing a plain text version of this content. The canonical link for it is here.
Posted to cvs@httpd.apache.org by rj...@apache.org on 2020/08/18 09:47:35 UTC
svn commit: r1880958 - /httpd/httpd/trunk/docs/manual/mod/mod_ssl.xml
Author: rjung
Date: Tue Aug 18 09:47:35 2020
New Revision: 1880958
URL: http://svn.apache.org/viewvc?rev=1880958&view=rev
Log:
Document limitations for private key format in
SSLProxyMachineCertificateFile and
SSLProxyMachineCertificatePath. PR 63935.
[skip ci]
Modified:
httpd/httpd/trunk/docs/manual/mod/mod_ssl.xml
Modified: httpd/httpd/trunk/docs/manual/mod/mod_ssl.xml
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/docs/manual/mod/mod_ssl.xml?rev=1880958&r1=1880957&r2=1880958&view=diff
==============================================================================
--- httpd/httpd/trunk/docs/manual/mod/mod_ssl.xml (original)
+++ httpd/httpd/trunk/docs/manual/mod/mod_ssl.xml Tue Aug 18 09:47:35 2020
@@ -1847,6 +1847,13 @@ contain a PEM-encoded certificate and ma
<note type="warning">
<p>Currently there is no support for encrypted private keys</p>
</note>
+<note type="warning">
+<p>Only keys encoded in PKCS1 RSA, DSA or EC format are supported.
+Keys encoded in PKCS8 format, ie. starting with
+"<code>-----BEGIN PRIVATE KEY-----</code>",
+must be converted, eg. using
+"<code>openssl rsa -in private-pkcs8.pem -outform pem</code>".</p>
+</note>
<example><title>Example</title>
<highlight language="config">
SSLProxyMachineCertificatePath "/usr/local/apache2/conf/proxy.crt/"
@@ -1877,6 +1884,13 @@ or additionally to <code>SSLProxyMachine
<note type="warning">
<p>Currently there is no support for encrypted private keys</p>
</note>
+<note type="warning">
+<p>Only keys encoded in PKCS1 RSA, DSA or EC format are supported.
+Keys encoded in PKCS8 format, ie. starting with
+"<code>-----BEGIN PRIVATE KEY-----</code>",
+must be converted, eg. using
+"<code>openssl rsa -in private-pkcs8.pem -outform pem</code>".</p>
+</note>
<example><title>Example</title>
<highlight language="config">
SSLProxyMachineCertificateFile "/usr/local/apache2/conf/ssl.crt/proxy.pem"