[LUNI] Setting up Apache with an SSL certificate

[Robert Jacobsen]

Martin,

Please excuse me for butting in on your discussion, but your footnote
left me no choice but to respond!    ;-)

As you know, the reason user groups exist is to have a meaningful dialog
about specific system/programming issues related to the subject the user
group covers.

You're right! Posting incorrect information is one way to get
the discussion going, often in a more heated manner and most often with a
much more input from subscribers. It may be deemed underhanded, sneaky
or just plain time wasting. Believe me, it was done unintentionally by
someone working with @ 3 hrs sleep.

However, my blunder aside, this is a not-very-well-known tactic that I have
used before, mostly in meetings where the attendees aren't paying attention.

I learned it from a senior consultant friend of mine at one of the big 5
firms: He simply calls it "stirring up the pot". And it works!

I do thank you for your candor. I take no offense! It again shows me that the
LUNI site has some of the most knowledgeable people. People who aren't
afraid to let it all hang out (as long as it's not done in an insulting manner!). That's
good, because eventually the person who asked the question may get a much
better understanding of their issue from 15 or 20 in-depth responses than from
5 or 6 responses that just touch the surface!

I've been working with Java for 4 years now and have worked extensively with
Javascript. I know what it's all about! And I'm not new to Linux!

The C vs. C++ thing can be answered in a number of ways. My answer was
addressing the application programming model instead of the systems programming
model. Our company is doing some investigation into running Linux on our
zSeries mainframe and the shop has mostly C++ and Java people. So it was in that
light that I answered the question. I know that currently a good number of Linux
apps, including GNOME and KDE, are C-based, but for new apps our company
(and many others in the financial industry) are looking at Java (and some C++) and
would like to see their apps running under Linux, perhaps on their mainframes. For
some companies, this would help them eliminate the Unix or NT server farms they
now have to maintain.

The question posed was such a good one, however, and because of my
blunder, it got a lot of good responses (and still is).

So, from now on, when you see one of my answers, ask yourself: Is RJ half asleep
again? Could be. Just give your answer, say Oh Dear! and move on! Hey, if nothing
else, it keeps life interesting and the site buzzing with discussion!

Regards.

RJ  (Aahz)    *<8-)


Martin Maney wrote:

> On Thu, Mar 07, 2002 at 04:32:00PM -0500, Jeff Jirsa wrote:
> > [Thu Mar  7 15:36:33 2002] [error] mod_ssl: Init: Unable to read server
> > certific
> > ate from file /etc/httpd/conf/ssl/key/server.key (OpenSSL library error
> > follows)
> > [Thu Mar  7 15:36:33 2002] [error] OpenSSL: error:0D09F007:asn1 encoding
> > routine
> > s:d2i_X509:expecting an asn1 sequence
>
> > Anybody have any idea what's wrong???
>
> Assuming you've checked that the key file exoists where apache is lookign
> for it, and that it's the right kind of key, I would suggest you consider
> the file permissions.  Is apache running as a non-privilged user?  DOes that
> user have read access to the certificate?
>
> HTH.
>
> --
> The most effective way to get information from usenet is not to ask
> a question; it is to post incorrect information.  -- Aahz's Law
>
> ______________________________________________________________________
> Linux Users Of Northern Illinois - Technical Discussion
> luni at luni.org
> http://luni.org/mailman/listinfo/luni
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://luni.org/pipermail/luni/attachments/20020308/da71ab8d/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: rjacobsen.vcf
Type: text/x-vcard
Size: 188 bytes
Desc: Card for Robert Jacobsen
Url : http://luni.org/pipermail/luni/attachments/20020308/da71ab8d/attachment.vcf