Board index Unix Web Servers

apache +ssl +sslverifyclient +netscape=error?

apache +ssl +sslverifyclient +netscape=error?

Post by Norbert Wegene » Tue, 24 Nov 1998 04:00:00



I am working with apache +ssl. I have installed the apassl package from
suse5.3,
I can connect to the apache, but whenever I use another value than 0
for SSLVerify , my Netscape 4.0.5 gets the following error:
 A network error occured while Nescape was receiving data.
The error-log says the following:

/var/log/httpsd.error_log:
[Sun Nov 22 16:32:48 1998] created shared memory segment #2944[Sun Nov
22 16:32:48 1998] Server configured -- resuming normal operations
[Sun Nov 22 16:33:06 1998] SSL_Accept failed
[Sun Nov 22 16:33:06 1998] error:140890AC:SSL
routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned

Is this a problem of the client or the serverconfiguration?
Thanks
Norbert Wegener

--

SBS Essen                                   Fax: (49) 201 2661 768
Germany                                     Phone: (49) 201 2661 379
/********************************************************************
Unix is user friendly. It's just selective about who its friends are.
********************************************************************/

 
 
 
Top

apache +ssl +sslverifyclient +netscape=error?

Post by Sevo Still » Wed, 25 Nov 1998 04:00:00



> I can connect to the apache, but whenever I use another value than 0
> for SSLVerify , my Netscape 4.0.5 gets the following error:
>  A network error occured while Nescape was receiving data.
> [Sun Nov 22 16:33:06 1998] SSL_Accept failed
> [Sun Nov 22 16:33:06 1998] error:140890AC:SSL
> routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned

> Is this a problem of the client or the serverconfiguration?

Well, do you actually have a client certificate? The above looks like it
might be missing or invalid.

Sevo

--
Sevo Stille


 
 
 
Top

1. Can't convert my netscape ssl certificate for use with Apache-SSL

I am trying to convert my netscape certificate to use with Apache-SSL.

I run the ns_convert program like so:

# /usr/local/ssl/bin/ns_convert /usr3/ns-home/https-443.204.174.113.10/config httpd
read RSA private key
Enter Private Key password:
writing RSA private key

Your Netscape ServerKey has been converted, but there is a missing element
in SSLeay which does not allow for immediate conversion of your
ServerCert.

conversion.
You'll receive a converted certificate in the mail shortly, which you
should save in httpd.cert and install using "getcert httpd"

Then I receive the converted cert and try to install it....

/usr/local/ssl/certs# ls -al
total 4
drwxr-xr-x   2 root     system       512 Mar 22 00:30 ./
drwxr-xr-x   8 root     system       512 Mar 18 23:34 ../
-rw-r--r--   1 root     system      1255 Mar 22 00:30 httpd.cert

/usr/local/ssl/certs# getcert httpd
unable to load certificate
error:0D067083:asn1 encoding routines:ASN1_get_object:too long
error:0D092065:asn1 encoding routines:D2I_X509_PUBKEY:bad get object
error:0D08C070:asn1 encoding routines:D2I_X509_CINF:error stack
error:0D089070:asn1 encoding routines:D2I_X509:error stack
error:0906600D:PEM routines:PEM_ASN1_read:ASN1 lib

This is the error I am getting.  Anyone have any ideas?

I am running Apache-SSL-US 1.0.3+1.1 on OSF1 V3.2 on an alpha.  My
netscape server runs fine with the certificate.

Help.

Chris

/  Chris MacLean    Technical Group    Pacific Interconnect  \

2. Boot Error when trying to boot BSD via Win NTLDR

3. error: SSL apache with Netscape 4.05 on Linux

4. How can I assign static DNS addr?

5. apache + ssl + certificate +netscape = error?

6. HowTo setup Nnework board

7. Question: Running Apache SSL and Apache non-SSL on one server

8. quicken for free..and what's brian's address

9. Serving pages from non-SSL server through Netscape SSL

10. SSLeay, Apache-SSL, Netscape

11. Netscape to Apache SSL conversion

12. Apache SSL + Netscape 3.0 Gold = out of memory

13. Migrating SSL sites from Netscape Enterprise and MS IIS to apache, possible?


All times are UTC
Board index