openssl installing PEM format.

[chetanmadaan]

Hi -

i know there used to be a .key,.crt and some other files that are required for a SSL certificate installation.

I have a .pfx file which i somehow managed to convert to .PEM format.

now i have a .pem file and gd_bundle.crt file... i have no idea what edits to make to ssl.conf file to make this work...

anyone can shed some light on how i can install this .pem file?

[nbhadauria]

try this ..


SSLCACertificateFile /var/httpd/server/gd_bundle.crt
SSLCertificateFile /var/httpd/server/server.pem

[chetanmadaan]

opps... that didn't worked out and ended up taking the whole site down.

Thanks

[nbhadauria]

ohh

Can you share the error log is this a configure error or some thing else.

[chetanmadaan]

Here is what the SSL error log says:

[Mon Dec 05 07:43:59 2011] [error] Init: Unable to read pass phrase [Hint: key introduced or changed before restart?]
[Mon Dec 05 07:43:59 2011] [error] SSL Library Error: 218710117 error:0D094065:asn1 encoding routines:d2i_ASN1_SET:bad class
[Mon Dec 05 07:43:59 2011] [error] SSL Library Error: 218529960 error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
[Mon Dec 05 07:43:59 2011] [error] SSL Library Error: 218595386 error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error
[Mon Dec 05 07:43:59 2011] [error] SSL Library Error: 218734605 error:0D09A00D:asn1 encoding routines:d2i_PrivateKey:ASN1 lib

[nbhadauria]

Originally Posted by chetanmadaan

Here is what the SSL error log says:

[Mon Dec 05 07:43:59 2011] [error] Init: Unable to read pass phrase [Hint: key introduced or changed before restart?]

There is some problem with your passphrase ..

check your SSLPassPhraseDialog entry in ssl.conf