by Szymon Juraszczy » Fri, 11 Dec 1998 04:00:00
Does anyone know how to generate SSL certificate valid longer than one
month ? I'm using Apache-ssl 1.2.6 and the tool for generating certificates
(ssl-certificate) has no options to extend the default validity time (one
month). Thanks in advance for any help.
Greetings,
-- __
/ // / _ \/ __/ _ / // (_-< Network systems administrator
\___/\___/_/ \_, /\_,_/___/ Student of Software Engineering
/___/ tel. +48 603 785 240
1. Can't convert my netscape ssl certificate for use with Apache-SSL
I am trying to convert my netscape certificate to use with Apache-SSL.
I run the ns_convert program like so:
# /usr/local/ssl/bin/ns_convert /usr3/ns-home/https-443.204.174.113.10/config httpd
read RSA private key
Enter Private Key password:
writing RSA private key
Your Netscape ServerKey has been converted, but there is a missing element
in SSLeay which does not allow for immediate conversion of your
ServerCert.
conversion.
You'll receive a converted certificate in the mail shortly, which you
should save in httpd.cert and install using "getcert httpd"
Then I receive the converted cert and try to install it....
/usr/local/ssl/certs# ls -al
total 4
drwxr-xr-x 2 root system 512 Mar 22 00:30 ./
drwxr-xr-x 8 root system 512 Mar 18 23:34 ../
-rw-r--r-- 1 root system 1255 Mar 22 00:30 httpd.cert
/usr/local/ssl/certs# getcert httpd
unable to load certificate
error:0D067083:asn1 encoding routines:ASN1_get_object:too long
error:0D092065:asn1 encoding routines:D2I_X509_PUBKEY:bad get object
error:0D08C070:asn1 encoding routines:D2I_X509_CINF:error stack
error:0D089070:asn1 encoding routines:D2I_X509:error stack
error:0906600D:PEM routines:PEM_ASN1_read:ASN1 lib
This is the error I am getting. Anyone have any ideas?
I am running Apache-SSL-US 1.0.3+1.1 on OSF1 V3.2 on an alpha. My
netscape server runs fine with the certificate.
Help.
Chris
/ Chris MacLean Technical Group Pacific Interconnect \
2. Sun Cobalt Qube & Free Zip Drive - You want?
3. Old machine Tomcat+SSL, new machine Apache+SSL - new certificates needed?
4. Urgent: Linux drivers for RangeLAN2
5. Apache-SSL won't compile: Can't find ssl.h!
6. Changing Screen res in KDE on Suse 7.0
8. Re; comp.os.linux.advocacy disaster. How do we remove Paddy McCrocket?
10. Question: Running Apache SSL and Apache non-SSL on one server
11. Apache-SSL: Multiple Certificates With Virtual Servers?
12. Can't make certificates for Apache-SSL
13. how to get certificates for Apache-SSL?