Very Computer

I am trying to convert my netscape certificate to use with Apache-SSL.

I run the ns_convert program like so:

# /usr/local/ssl/bin/ns_convert /usr3/ns-home/https-443.204.174.113.10/config httpd
read RSA private key
Enter Private Key password:
writing RSA private key

Your Netscape ServerKey has been converted, but there is a missing element
in SSLeay which does not allow for immediate conversion of your
ServerCert.

conversion.
You'll receive a converted certificate in the mail shortly, which you
should save in httpd.cert and install using "getcert httpd"

Then I receive the converted cert and try to install it....

/usr/local/ssl/certs# ls -al
total 4
drwxr-xr-x   2 root     system       512 Mar 22 00:30 ./
drwxr-xr-x   8 root     system       512 Mar 18 23:34 ../
-rw-r--r--   1 root     system      1255 Mar 22 00:30 httpd.cert

/usr/local/ssl/certs# getcert httpd
unable to load certificate
error:0D067083:asn1 encoding routines:ASN1_get_object:too long
error:0D092065:asn1 encoding routines:D2I_X509_PUBKEY:bad get object
error:0D08C070:asn1 encoding routines:D2I_X509_CINF:error stack
error:0D089070:asn1 encoding routines:D2I_X509:error stack
error:0906600D:PEM routines:PEM_ASN1_read:ASN1 lib

This is the error I am getting.  Anyone have any ideas?

I am running Apache-SSL-US 1.0.3+1.1 on OSF1 V3.2 on an alpha.  My
netscape server runs fine with the certificate.

Help.

Chris

/  Chris MacLean    Technical Group    Pacific Interconnect  \

|
| I am trying to convert my netscape certificate to use with Apache-SSL.
|
| I run the ns_convert program like so:
|
| # /usr/local/ssl/bin/ns_convert /usr3/ns-home/https-443.204.174.113.10/config httpd
| read RSA private key
| Enter Private Key password:
| writing RSA private key
|
| Your Netscape ServerKey has been converted, but there is a missing
| element in SSLeay which does not allow for immediate conversion of
| your ServerCert.  The ServerCert has been sent to

| converted certificate in the mail shortly, which you should save in
| httpd.cert and install using "getcert httpd"

fishy!

-Bj?rn
--

 <URL:http://www.pvv.unit.no/~borud/>  | as damage and routes around it."
 UNIX person, one of "them"            |         - John Gilmore