Hello everyone,
This is probably better directed to the mod_ssl folks but their majordomo is using SORBS and SORBS is blocking Yahoo mail accounts.
I have Apache 2.0.59 binaries (and required supporting components) from sunfreeware installed on two Solaris 9 9/04 servers. The two systems are identical in most respects. They differ in terms of patch levels.
On both servers I created self signed certificates for testing purposes. I have only made the bare minimum necessary edits to httpd.conf, and no edits at all to ssl.conf (Apache 2.0.59 from sunfreeware breaks SSL configuration off into a separate file).
Apache starts just fine on the one server, and chokes on the other server.
Good guy:
# ../ssl/bin/openssl req -new -x509 -nodes -out conf/ssl.crt/server.crt -keyout conf/ssl.key/server.key
.
.
.
# ../bin/apachectl startssl
# ps -ef | grep [a]pache2
nobody 12433 12428 0 01:04:25 ? 0:00 /usr/local/apache2/bin/httpd -k start -DSSL
nobody 12434 12428 0 01:04:25 ? 0:00 /usr/local/apache2/bin/httpd -k start -DSSL
nobody 12432 12428 0 01:04:25 ? 0:00 /usr/local/apache2/bin/httpd -k start -DSSL
nobody 12431 12428 0 01:04:25 ? 0:00 /usr/local/apache2/bin/httpd -k start -DSSL
nobody 12435 12428 0 01:04:25 ? 0:00 /usr/local/apache2/bin/httpd -k start -DSSL
root 12428 1 1 01:04:24 ? 0:01 /usr/local/apache2/bin/httpd -k start -DSSL
#
Bad guy:
# ../ssl/bin/openssl req -new -x509 -nodes -out conf/ssl.crt/server.crt -keyout conf/ssl.key/server.key
.
.
.
# ../bin/apachectl startssl
[Fri Mar 30 01:05:29 2007] [crit] [Fri Mar 30 01:05:29 2007] file vhost.c, line 190, assertion "rv == APR_SUCCESS" failed
Abort - core dumped
#
I used the same sunfreeware packages to install Apache, OpenSSL, zlib, libgcc etc.
Any ideas? This is meant to become my new production web server, replacing an older IBM HTTPD 2.0.47.1, but the machine that is failing is my prod box. It works on the dev/test box.
Thanks,
Mark
--
Georgia: Why am I not doing what they're doing?
Rube: Because you're doing what you're doing. When it's time for you to do something else you'll do that.
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
" from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|