LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 08-04-2004, 12:28 PM   #1
belorion
Member
 
Registered: Aug 2003
Distribution: Slackware 10.0
Posts: 124

Rep: Reputation: 16
Apache mod_ssl error


I am trying to setup a secure webdav for personal use on a server at home (I want to host out my Mozilla Calendar information so I can sync between school and work and home).

Apache is up and running fine. SSL appears to be running as well.

netstat -tpan | grep 443 returns:
tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN 12842/httpd

However, if I try to access it all via https://, I get the following error:

[Wed Aug 04 10:31:01 2004] [warn] RSA server certificate CommonName (CN) `localhost' does NOT match server name!?

Now, in httpd.conf, my ServerName directive is localhost. However, I've tried a ton of different names. I've tried 192.168.0.103, which is it's local ipaddress on the LAN. I've tried the IP address that I use to access the server remotely (my cable modem IP, the firewall redirects to my server). I've tried turning

UseCanonicalName

both on and off. Each time I change the ServerName entry in httpd.conf, I make a new .pem file with that info, and replace the old. So, in other words, I've gotten the above error each time with my CN being localhost, 192.168.0.103, my WAN IP... I just can't figure it out.

I'm not sure how to check what ServerName the server ends up using, i.e. what CommonName is trying to compare itself against ...

Any suggestions?

EDIT: I also get the following error at the same time:
[Wed Aug 04 10:48:00 2004] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)

EDIT: I am using RedHat 9, and the command
$> rpm -qa | grep httpd
returns:
httpd-devel-2.0.40-21.11
redhat-config-httpd-1.0.1-18
httpd-manual-2.0.40-21.11
httpd-2.0.40-21.11

The command
$> rpm -qa | grep -i ssl
returns:
openssl-0.9.7a-20.2
openssl-devel-0.9.7a-20.2
pyOpenSSL-0.5.1-8
mod_ssl-2.0.40-21.11


Last edited by belorion; 08-04-2004 at 12:37 PM.
 
Old 08-04-2004, 01:00 PM   #2
belorion
Member
 
Registered: Aug 2003
Distribution: Slackware 10.0
Posts: 124

Original Poster
Rep: Reputation: 16
Okay, so I got rid of the CN error. I had missed a ServerName directive in the ssl.conf file.

However, I am still getting the following error:

[Wed Aug 04 11:10:01 2004] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)

I'm not sure what it means, or how to fix it. Any suggestions?
 
Old 08-04-2004, 02:16 PM   #3
belorion
Member
 
Registered: Aug 2003
Distribution: Slackware 10.0
Posts: 124

Original Poster
Rep: Reputation: 16
Figured it out. Silly me. It was working just fine... but the port was being blocked.

I sure feel silly!
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Apache 2.0 and mod_ssl pimp1911 Linux - Security 4 02-03-2006 03:36 PM
apache mod_ssl startup failed with no error messages! aaronvegh Linux - Networking 2 06-06-2005 07:44 PM
Apache - Mod_SSL Mr_Munkey Linux - Software 0 12-27-2004 09:52 AM
mod_ssl and apache 2 xfurious_mindx Linux - Newbie 0 07-21-2004 03:49 PM
apache domain for mod_ssl gvrglife Linux - Networking 1 02-24-2003 10:46 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 09:35 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration