how to get certificates for Apache-SSL?

by same » Tue, 28 Nov 1995 04:00:00

From C2's Apache/SSL INSTALL documentation:

--
To generate keys/certificates/certificate requests:

/usr/local/ssl/bin/genkey httpd

When you receive the response from your CA, run

/usr/local/ssl/bin/getcert httpd

on the file. (Send the response to stdin)
--

If you have any further questions feel free to mail me. (There
may be bugs in the scripts... they are still in beta test.)

>server. I can't find anything in the various doc files discussing how
>to get certificates, and I know it can't be as simple as just asking
>Verisign for them... could somebody who's been through this process

--
sameer Voice: 510-601-9777
Community ConneXion FAX: 510-601-9734
The Internet Privacy Provider Dialin: 510-658-6376

Top

1. Can't convert my netscape ssl certificate for use with Apache-SSL

I am trying to convert my netscape certificate to use with Apache-SSL.

I run the ns_convert program like so:

# /usr/local/ssl/bin/ns_convert /usr3/ns-home/https-443.204.174.113.10/config httpd
read RSA private key
Enter Private Key password:
writing RSA private key

Your Netscape ServerKey has been converted, but there is a missing element
in SSLeay which does not allow for immediate conversion of your
ServerCert.

conversion.
You'll receive a converted certificate in the mail shortly, which you
should save in httpd.cert and install using "getcert httpd"

Then I receive the converted cert and try to install it....

/usr/local/ssl/certs# ls -al
total 4
drwxr-xr-x 2 root system 512 Mar 22 00:30 ./
drwxr-xr-x 8 root system 512 Mar 18 23:34 ../
-rw-r--r-- 1 root system 1255 Mar 22 00:30 httpd.cert

/usr/local/ssl/certs# getcert httpd
unable to load certificate
error:0D067083:asn1 encoding routines:ASN1_get_object:too long
error:0D092065:asn1 encoding routines:D2I_X509_PUBKEY:bad get object
error:0D08C070:asn1 encoding routines:D2I_X509_CINF:error stack
error:0D089070:asn1 encoding routines:D2I_X509:error stack
error:0906600D:PEM routines:PEM_ASN1_read:ASN1 lib

This is the error I am getting. Anyone have any ideas?

I am running Apache-SSL-US 1.0.3+1.1 on OSF1 V3.2 on an alpha. My
netscape server runs fine with the certificate.

Help.

Chris

/ Chris MacLean Technical Group Pacific Interconnect \

2. oops with 2.5.47-mm2

3. Apache-SSL and problems with SSL certificate

4. electronic file (tiff) headers

5. Old machine Tomcat+SSL, new machine Apache+SSL - new certificates needed?

6. I'm taking the Solaris 2.6 exam in two weeks

7. Apache-SSL: Multiple Certificates With Virtual Servers?

8. tftp problem