Hello, I’m running a small Apache Webser with SSL (I’ve built my own CA and I use self created certificates) for testing-purposes and everything works as expected. (Apache 2.2.3 and OpenSSL 0.9.8d on SUSE 10.2) But today I stumbled across the following observation. Please take a look at my following ssl-global.conf. As you can see I use the directive AddType application/x-x509-ca-cert .crt but at the end my certificates have got .pem form. This might be a dump question but I’m rather new in the Apache-world and so I wonder why I don’t need an AddType application/x-x509-ca-cert .pem directive. Or does .crt include .pem? I’ve found a lot of howtos to build .pem-certificates but I wasn’t able to find a document where AddType application/x-x509-ca-cert .pem is used. my ssl-global.conf: <IfDefine SSL> <IfDefine !NOSSL> <IfModule mod_ssl.c> AddType application/x-x509-ca-cert .crt AddType application/x-pkcs7-crl .crl SSLPassPhraseDialog builtin SSLSessionCache shmcb:/var/lib/apache2/ssl_scache(512000) SSLSessionCacheTimeout 600 SSLMutex default SSLRandomSeed startup builtin SSLRandomSeed connect builtin <VirtualHost _default_:443> ServerName 192.168.0.5:443 ErrorLog /opt/myownca/ssl_error_log TransferLog /opt/myownca/ssl_access_log SSLEngine on SSLCiphersuite HIGH:MEDIUM SSLProtocol all SSLCertificateFile /opt/myownca/certificates/01.pem SSLCertificateKeyFile /home/somewhere/certificatekey.pem # SSLCertificateChainFile /opt/myown/cacert.pem </VirtualHost> </IfModule> </IfDefine> </IfDefine> I hope that you’ll be able to help me. Best regards domi -- View this message in context: http://www.nabble.com/*.pem-certificates-and-the-directive%3A-AddType-application-x-x509-ca-cert-.crt-tf3402178.html#a9474487 Sent from the Apache HTTP Server - Users mailing list archive at Nabble.com. --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|