mod_ssl Certificate Issue.

[jferris]

Hello,

We are having a strange problem, and I was hoping that someone might have experienced this problem as well and could offer some guidance.

The Web Server that we have setup is Apache 1.3.14 running on Linux Mandrake 7.2. Apache runs just fine. Mod_ssl is also setup on Apache. When running a secure server using the generic key and certificate that is installed with our distribution, everything also runs fine.

When we take the certificate and key from our current production machine (which is operating fine) and place them onto the new machine (which will be replacing our current production machine), SSL does not work. Apache does not even start properly. Instead of httpd giving a status of [OK], it gives a status of [PASSED]. However, httpd never starts.

Inspecting the ssl-error_log, there are three messages generated from the server's attempted startup:

error:0D084069:asn1 encoding routines:d2_ASN1_SET:bad tag
error:0D09D082:asn1 encoding routines:d2_RSAPrivateKeyarsing
error:0D084069:asn1 encoding routines:d2_PrivateKey:ASN1 lib

We have followed the debuging steps from Thawte (the provider of our certificate) to no avail. When we use OpenSSL to compare the key and certificate the values that are supposed to match do. The most frustrating part is that it already works on another machine.

Thawte also told us that there is no problem with the versions of Mandrake or Apache that we are running.

If someone out there could help resolve this issue, it would be greatly appreciated.

Thank you,

Joseph M. Ferris
jferris@desertdocs.com

 

[jferris]

We figured out our problems regarding this problem, and it was a silly mistake on our part - but I though that I would share my experience with everyone. After working with this problem for the last day, or so - we made it to the progress point of it appearing to "hang up".

The issue was the we were using the built-in passphrase dialog and it was waiting for the password without a prompt. We just created a Perl Script that is kicked off that dumps the password to stdout and passes a carriage return. Problem solved.

Thank you for anyone who took the time to read this.

Joseph