how to get certificates for Apache-SSL?

how to get certificates for Apache-SSL?

Post by same » Tue, 28 Nov 1995 04:00:00

From C2's Apache/SSL INSTALL documentation:

To generate keys/certificates/certificate requests:

/usr/local/ssl/bin/genkey httpd

When you receive the response from your CA, run

/usr/local/ssl/bin/getcert httpd

        on the file. (Send the response to stdin)

        If you have any further questions feel free to mail me. (There
may be bugs in the scripts... they are still in beta test.)

>server. I can't find anything in the various doc files discussing how
>to get certificates, and I know it can't be as simple as just asking
>Verisign for them... could somebody who's been through this process

sameer                                          Voice:   510-601-9777
Community ConneXion                             FAX:     510-601-9734
The Internet Privacy Provider                   Dialin:  510-658-6376


1. Can't convert my netscape ssl certificate for use with Apache-SSL

I am trying to convert my netscape certificate to use with Apache-SSL.

I run the ns_convert program like so:

# /usr/local/ssl/bin/ns_convert /usr3/ns-home/https-443. httpd
read RSA private key
Enter Private Key password:
writing RSA private key

Your Netscape ServerKey has been converted, but there is a missing element
in SSLeay which does not allow for immediate conversion of your

You'll receive a converted certificate in the mail shortly, which you
should save in httpd.cert and install using "getcert httpd"

Then I receive the converted cert and try to install it....

/usr/local/ssl/certs# ls -al
total 4
drwxr-xr-x   2 root     system       512 Mar 22 00:30 ./
drwxr-xr-x   8 root     system       512 Mar 18 23:34 ../
-rw-r--r--   1 root     system      1255 Mar 22 00:30 httpd.cert

/usr/local/ssl/certs# getcert httpd
unable to load certificate
error:0D067083:asn1 encoding routines:ASN1_get_object:too long
error:0D092065:asn1 encoding routines:D2I_X509_PUBKEY:bad get object
error:0D08C070:asn1 encoding routines:D2I_X509_CINF:error stack
error:0D089070:asn1 encoding routines:D2I_X509:error stack
error:0906600D:PEM routines:PEM_ASN1_read:ASN1 lib

This is the error I am getting.  Anyone have any ideas?

I am running Apache-SSL-US 1.0.3+1.1 on OSF1 V3.2 on an alpha.  My
netscape server runs fine with the certificate.



/  Chris MacLean    Technical Group    Pacific Interconnect  \

2. oops with 2.5.47-mm2

3. Apache-SSL and problems with SSL certificate

4. electronic file (tiff) headers

5. Old machine Tomcat+SSL, new machine Apache+SSL - new certificates needed?

6. I'm taking the Solaris 2.6 exam in two weeks

7. Apache-SSL: Multiple Certificates With Virtual Servers?

8. tftp problem

9. Can't make certificates for Apache-SSL

10. Apache-SSL:"No Certificate set..."

11. ANNOUNCE: Apache-SSL Certificates Available

12. Does upgrading Apache-SSL require new certificate request?

13. Apache-SSL : certificate file