Re: Issue setting up a Verisign certificate
Lou Picciano <[email protected]> Mon, 27 Jul 2009 19:40:49 +0000 (UTC)
| Newsgroups | gmane.comp.apache.mod-ssl.user |
|---|---|
| Message-ID | <1851536291.6146701248723649974.JavaMail.root@sz0093a.westchester.pa.mail.comcast.net> |
------=_Part_298706_1381593665.1248723649973 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Robin, Be sure Verisign's 'root' certificate is installed in your browser's certificate store - this is probably already done by default. Then, verify what this is pointing to (from your own log file): Unable to read server certificate from file /etc/apache2/secure.canadaeast.com.public.crt Verify that your apache config file doesn't have one of the 'alternate' certificate pointer directives activated. Various configurations 'bundle' certs together in concatenated form, for example. Be sure also that your VerifyDepth is set appropriately... Looks like a depth of at least 3 levels to me. ----- Original Message ----- From: "Robin" <[email protected]> To: [email protected] Sent: Monday, July 27, 2009 3:25:53 PM GMT -05:00 US/Canada Eastern Subject: Issue setting up a Verisign certificate I have generated a CSR, sent it to Verisign and they sent me back a cer file that I have renamed to public.crt. As per their support instructions I installed their Intermediate CA (https://knowledge.verisign.com/support/ssl-certificates-support/index?page=content&id=AR193) My virtualhost configuration is as follows: SSLEngine on SSLCertificateFile /etc/apache2/public.crt SSLCertificateKeyFile /etc/apache2/private.key SSLCACertificateFile /etc/apache2/interm.crt I am getting this error when trying to start Apache: [Mon Jul 27 16:05:07 2009] [error] Init: Unable to read server certificate from file /etc/apache2/secure.canadaeast.com.public.crt [Mon Jul 27 16:05:07 2009] [error] SSL Library Error: 218529960 error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag [Mon Jul 27 16:05:07 2009] [error] SSL Library Error: 218595386 error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error Any thoughts, because I am at a loss and am not interested in wait on how 35 minutes to speak to their support people. Thanks! ______________________________________________________________________ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [email protected] Automated List Manager [email protected] ------=_Part_298706_1381593665.1248723649973 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable <html><head><style type=3D'text/css'>p { margin: 0; }</style></head><body><= div style=3D'font-family: Arial; font-size: 12pt; color: #000000'>Robin,<br= ><br>Be sure Verisign's 'root' certificate is installed in your browser's c= ertificate store - this is probably already done by default.<br><br>Then, v= erify what this is pointing to (from your own log file): <br>Unable to read= server certificate from file /etc/apache2/secure.canadaeast.com.public.crt= <br><br>Verify that your apache config file doesn't have one of the 'altern= ate' certificate pointer directives activated. Various configurations= 'bundle' certs together in concatenated form, for example.<br><br>Be sure = also that your VerifyDepth is set appropriately... Looks like a= depth of at least 3 levels to me.<br><br>----- Original Message -----<br>F= rom: "Robin" <[email protected]><br>To: modssl-users@modssl= .org<br>Sent: Monday, July 27, 2009 3:25:53 PM GMT -05:00 US/Canada Eastern= <br>Subject: Issue setting up a Verisign certificate<br><br>I have generate= d a CSR, sent it to Verisign and they sent me back a<br>cer file that I hav= e renamed to public.crt. As per their support<br>instructions I insta= lled their Intermediate CA<br>(https://knowledge.verisign.com/support/ssl-c= ertificates-support/index?page=3Dcontent&id=3DAR193)<br><br>My virtualh= ost configuration is as follows:<br><br> SSLEngine on<br> &= nbsp;SSLCertificateFile /etc/apache2/public.crt<br> SSLCertifica= teKeyFile /etc/apache2/private.key<br> SSLCACertificateFile /etc= /apache2/interm.crt<br><br>I am getting this error when trying to start Apa= che:<br><br>[Mon Jul 27 16:05:07 2009] [error] Init: Unable to read server<= br>certificate from file /etc/apache2/secure.canadaeast.com.public.crt<br>[= Mon Jul 27 16:05:07 2009] [error] SSL Library Error: 218529960<br>error:0D0= 680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag<br>[Mon Jul 27 16:05= :07 2009] [error] SSL Library Error: 218595386<br>error:0D07803A:asn1 encod= ing routines:ASN1_ITEM_EX_D2I:nested asn1<br>error<br><br>Any thoughts, bec= ause I am at a loss and am not interested in wait on<br>how 35 minutes to s= peak to their support people.<br><br>Thanks!<br>___________________________= ___________________________________________<br>Apache Interface to OpenSSL = (mod_ssl) ww= w.modssl.org<br>User Support Mailing List  = ; [email protected]<br>Autom= ated List Manager &= nbsp; [email protected]<br></div></bod= y></html> ------=_Part_298706_1381593665.1248723649973-- ______________________________________________________________________ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [email protected] Automated List Manager [email protected]