RE: [Cialug] Web server down after creating SSL certificatesigning request.

["Chris Hettinger" <chettinger@xxxxxxxxxxxx>]

Here is what I was doing:

* Logged in as SU
$ service httpd start
Starting httpd:              <-hung (or maybe I didn't give it long enough?)

I wasn't seeing a prompt for a password, should I try after logging in as root specifically not as SU ??

-----Original Message-----
From: cialug-admin@xxxxxxxxxx [mailto:cialug-admin@xxxxxxxxxx]On Behalf
Of Dave J. Hala Jr.
Sent: Tuesday, December 02, 2003 1:58 PM
To: Cialug
Subject: Re: [Cialug] Web server down after creating SSL
certificatesigning request.


When you start the httpd daemon, its probably prompting you for cert
password.  Try starting your web server as root from the command line
and see if you get the prompt for the password as apache starts up.



On Tue, 2003-12-02 at 13:52, Chris Hettinger wrote:
> Last week I was working creating the Certificate Signing Request (CSR) so I have my SSL certificate created. Following the insturctions from the apache docs, I created the files server.key, server.csr, and server.crt.  The files, of the same names, that were there originally I moved to a bkp folder, before creating my versions.
> 
> Today I found that the web server was down, after doing a $ service httpd stop  |  start, it hung on the start. I broke free of and when checking the SSL error log I found this:
> 
> [Mon Dec 01 13:34:43 2003] [error] Init: Unable to read pass phrase [Hint: key introduced or changed before restart?]
> [Mon Dec 01 13:34:43 2003] [error] SSL Library Error: 218710120 error:0D094068:asn1 encoding routines:d2i_ASN1_SET:bad tag
> [Mon Dec 01 13:34:43 2003] [error] SSL Library Error: 218529960 error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
> [Mon Dec 01 13:34:43 2003] [error] SSL Library Error: 218595386 error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error
> [Mon Dec 01 13:34:43 2003] [error] SSL Library Error: 218734605 error:0D09A00D:asn1 encoding routines:d2i_PrivateKey:ASN1 lib
> 
> 
> I get this still after removing the files I created and replacing the original crt, csr, and key files.
> 
> * I removed the files I created because the process for the certificate request was never completed, so I removed the files I had created and replaced the originals.
> 
> 
> I don't know how to fix it, so the webserver will start again. Any ideas?
> 
> 
> -Chris Hettinger, Web Specialist
> -IFMC/ENCOMPASS
> -www.encompas.com
> -(515) 279-8730
> 
> 
> 
> CONFIDENTIALITY NOTICE:  This communication, including any attachment, may contain confidential information and is intended only for the individual or entity to whom it is addressed.  Any review, dissemination, or copying of this communication by anyone other than the intended recipient is strictly prohibited.  If you are not the intended recipient, please contact the sender by reply email, delete and destroy all copies of the original message.'
> 
> _______________________________________________
> Cialug mailing list
> Cialug@xxxxxxxxxx
> http://cialug.org/mailman/listinfo/cialug
-- 

"...Unix, MS-DOS and Windows NT (also known as the Good, the Bad, and the Ugly)"

OSIS
Dave J. Hala Jr.
641.485.1606


_______________________________________________
Cialug mailing list
Cialug@xxxxxxxxxx
http://cialug.org/mailman/listinfo/cialug


CONFIDENTIALITY NOTICE:  This communication, including any attachment, may contain confidential information and is intended only for the individual or entity to whom it is addressed.  Any review, dissemination, or copying of this communication by anyone other than the intended recipient is strictly prohibited.  If you are not the intended recipient, please contact the sender by reply email, delete and destroy all copies of the original message.'

_______________________________________________
Cialug mailing list
Cialug@xxxxxxxxxx
http://cialug.org/mailman/listinfo/cialug