Apache-SSL and problems with SSL certificate

Apache-SSL and problems with SSL certificate

Post by Szymon Juraszczy » Fri, 11 Dec 1998 04:00:00


  Does anyone know how to generate SSL certificate valid longer than one
month ? I'm using Apache-ssl 1.2.6 and the tool for generating certificates
(ssl-certificate) has no options to extend the default validity time (one
month). Thanks in advance for any help.

--   __

/ // / _ \/ __/ _ / // (_-<   Network systems administrator
\___/\___/_/  \_, /\_,_/___/   Student of Software Engineering
             /___/              tel. +48 603 785 240


1. Can't convert my netscape ssl certificate for use with Apache-SSL

I am trying to convert my netscape certificate to use with Apache-SSL.

I run the ns_convert program like so:

# /usr/local/ssl/bin/ns_convert /usr3/ns-home/https-443. httpd
read RSA private key
Enter Private Key password:
writing RSA private key

Your Netscape ServerKey has been converted, but there is a missing element
in SSLeay which does not allow for immediate conversion of your

You'll receive a converted certificate in the mail shortly, which you
should save in httpd.cert and install using "getcert httpd"

Then I receive the converted cert and try to install it....

/usr/local/ssl/certs# ls -al
total 4
drwxr-xr-x   2 root     system       512 Mar 22 00:30 ./
drwxr-xr-x   8 root     system       512 Mar 18 23:34 ../
-rw-r--r--   1 root     system      1255 Mar 22 00:30 httpd.cert

/usr/local/ssl/certs# getcert httpd
unable to load certificate
error:0D067083:asn1 encoding routines:ASN1_get_object:too long
error:0D092065:asn1 encoding routines:D2I_X509_PUBKEY:bad get object
error:0D08C070:asn1 encoding routines:D2I_X509_CINF:error stack
error:0D089070:asn1 encoding routines:D2I_X509:error stack
error:0906600D:PEM routines:PEM_ASN1_read:ASN1 lib

This is the error I am getting.  Anyone have any ideas?

I am running Apache-SSL-US 1.0.3+1.1 on OSF1 V3.2 on an alpha.  My
netscape server runs fine with the certificate.



/  Chris MacLean    Technical Group    Pacific Interconnect  \

2. Sun Cobalt Qube & Free Zip Drive - You want?

3. Old machine Tomcat+SSL, new machine Apache+SSL - new certificates needed?

4. Urgent: Linux drivers for RangeLAN2

5. Apache-SSL won't compile: Can't find ssl.h!

6. Changing Screen res in KDE on Suse 7.0

7. Apache-ssl or mod-ssl?

8. Re; comp.os.linux.advocacy disaster. How do we remove Paddy McCrocket?

9. Apache-SSL or mod-SSL?

10. Question: Running Apache SSL and Apache non-SSL on one server

11. Apache-SSL: Multiple Certificates With Virtual Servers?

12. Can't make certificates for Apache-SSL

13. how to get certificates for Apache-SSL?