Hi all.
I've a problem configuring my Apache 2.0.53-9 on a SuSe 9.3
The problem is that when I try to configure Apache with SSL support I
can't access the https://my_server_host I've created my own CA
certificates and my server and client certificates and I've signed all
with my CA certificate.
I've configured the vhost-ssl.conf like this:
<IfDefine SSL>
<IfDefine !NOSSL>
<VirtualHost _default_:443>
DocumentRoot "/srv/www/htdocs"
ServerName my_server_host:443
ErrorLog /var/log/apache2/error_log
TransferLog /var/log/apache2/access_log
SSLEngine on
SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
SSLCertificateFile /etc/apache2/ssl.crt/my.certificate.crt
SSLCertificateKeyFile /etc/apache2/ssl.key/my.certificate.key
SSLCertificateChainFile /etc/apache2/ssl.crt/ca.crt
SSLCACertificatePath /etc/apache2/ssl.crt
SSLCACertificateFile /etc/apache2/ssl.crt/ca.crt
SSLVerifyClient require
SSLVerifyDepth 1
</VirtualHost>
</IfDefine>
</IfDefine>
When I try to access the page https://my_server_host I have this log in
my /var/log/apache2/error_log file:
[Wed Oct 12 15:20:41 2005] [info] Connection to child 0 established
(server my_server_host:443, client 127.0.0.1)
[Wed Oct 12 15:20:41 2005] [info] Seeding PRNG with 136 bytes of entropy
[Wed Oct 12 15:20:41 2005] [debug] ssl_engine_kernel.c(1786): OpenSSL:
Handshake: start
[Wed Oct 12 15:20:41 2005] [debug] ssl_engine_kernel.c(1794): OpenSSL:
Loop: before/accept initialization
[Wed Oct 12 15:20:41 2005] [debug] ssl_engine_io.c(1621): OpenSSL: read
11/11 bytes from BIO#820fc18 [mem: 8217298] (BIO dump follows)
.............
[Wed Oct 12 15:20:41 2005] [debug] ssl_engine_kernel.c(1794): OpenSSL:
Loop: SSLv3 read client hello A
[Wed Oct 12 15:20:41 2005] [debug] ssl_engine_kernel.c(1794): OpenSSL:
Loop: SSLv3 write server hello A
[Wed Oct 12 15:20:41 2005] [debug] ssl_engine_kernel.c(1794): OpenSSL:
Loop: SSLv3 write certificate A
[Wed Oct 12 15:20:41 2005] [debug] ssl_engine_kernel.c(1178): handing
out temporary 1024 bit DH key
[Wed Oct 12 15:20:41 2005] [debug] ssl_engine_kernel.c(1794): OpenSSL:
Loop: SSLv3 write key exchange A
[Wed Oct 12 15:20:41 2005] [debug] ssl_engine_kernel.c(1794): OpenSSL:
Loop: SSLv3 write certificate request A
[Wed Oct 12 15:20:41 2005] [debug] ssl_engine_kernel.c(1794): OpenSSL:
Loop: SSLv3 flush data
[Wed Oct 12 15:20:43 2005] [debug] ssl_engine_io.c(1621): OpenSSL: read
5/5 bytes from BIO#820fc18 [mem: 8217298] (BIO dump follows)
.............
[Wed Oct 12 15:20:43 2005] [info] Connection to child 1 established
(server 10.0.0.119:443, client 127.0.0.1)
[Wed Oct 12 15:20:43 2005] [info] Seeding PRNG with 136 bytes of entropy
[Wed Oct 12 15:20:43 2005] [debug] ssl_engine_kernel.c(1786): OpenSSL:
Handshake: start
[Wed Oct 12 15:20:43 2005] [debug] ssl_engine_kernel.c(1794): OpenSSL:
Loop: before/accept initialization
[Wed Oct 12 15:20:43 2005] [debug] ssl_engine_io.c(1621): OpenSSL: read
11/11 bytes from BIO#820fc18 [mem: 8217298] (BIO dump follows)
............
[Wed Oct 12 15:20:43 2005] [debug] ssl_engine_kernel.c(1794): OpenSSL:
Loop: SSLv3 read client hello A
[Wed Oct 12 15:20:43 2005] [debug] ssl_engine_kernel.c(1794): OpenSSL:
Loop: SSLv3 write server hello A
[Wed Oct 12 15:20:43 2005] [debug] ssl_engine_kernel.c(1794): OpenSSL:
Loop: SSLv3 write certificate A
[Wed Oct 12 15:20:43 2005] [debug] ssl_engine_kernel.c(1178): handing
out temporary 1024 bit DH key
[Wed Oct 12 15:20:43 2005] [debug] ssl_engine_kernel.c(1794): OpenSSL:
Loop: SSLv3 write key exchange A
[Wed Oct 12 15:20:43 2005] [debug] ssl_engine_kernel.c(1794): OpenSSL:
Loop: SSLv3 write certificate request A
[Wed Oct 12 15:20:43 2005] [debug] ssl_engine_kernel.c(1794): OpenSSL:
Loop: SSLv3 flush data
[Wed Oct 12 15:20:43 2005] [debug] ssl_engine_io.c(1621): OpenSSL: read
5/5 bytes from BIO#820fc18 [mem: 8217298] (BIO dump follows)
...........
[Wed Oct 12 15:20:44 2005] [notice] child pid 6330 exit signal
Segmentation fault (11)
[Wed Oct 12 15:20:44 2005] [notice] child pid 6331 exit signal
Segmentation fault (11)
Naturally I start apache server with the ssl options.
What can be the problem?!?!?
Thanks
Mattia
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
" from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|