ssl error
 

Hi,
we tried to configure the ssl.we got the ssl certificate from rapidsslonline.com.
we put the certifcate to /usr/local/apache2/conf/ssl.crt/server.crt.
then we generate the key

openssl genrsa -des3 -out server.key 1024 at /usr/local/apache2/conf/ssl.key/server.key

[root@server1 bin]# ./apachectl startssl
The startssl option is no longer supported.
Please edit httpd.conf to include the SSL configuration settings
and then use apachectl start.
[root@server1 bin]#

And we added the entries in httpd.conf

Listen 443

<IfModule ssl_module>
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
#SSLConfiguration Nov-02-2009
SSLCertificateFile /usr/local/apache2/conf/ssl.crt/server.crt
SSLCertificateFile /usr/local/apache2/conf/ssl.crt/server.key
</IfModule>

Also I dunno if you still having problem with the SSL cert I just spotted one thing in your config. The line before you close the ifModule where you configure the server.key file. Does'nt it have to read

just a Key betweeen Certificate and File....

Cheers zhjim

Please tell us which distribution you are configuring.

It would help if you showed the failure as found in your message log.

hi
thanks for that.


[root@server1 bin]# ./apachectl -version
Server version: Apache/2.2.14 (Unix)
Server built: Nov 2 2009 13:43:28

i could n't understand your words.please tell again

The question(s) asked by wfh:
1)
are you using Ubuntu, Redhat, Slackware or ...
2)
do you get any errors (check /var/log/httpd/... or /var/log/apache/....) when (re)starting apache and post them here

Hi nagavinodh,

Are you configuring Debian? RedHat? CentOS? Slackware?

Have you found errors in your logfiles when you attempt to start apache? Perhaps your distribution keeps logs at "/var/log/apache2/ssl/error_ssl.log" or "/var/log/httpd/ssl_error_log".

Search the tail of your error log (it might have a different name, but certainly "error" is part of the filename).

I just wanted to point out that there might be an error in your configuration. I normaly use a diffrent option with the .key file of the cert.

Original configuration
what I think it should look like
I don't know if this causes any error...