From owner-freebsd-questions@FreeBSD.ORG Tue Feb 17 23:54:41 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E610016A4CE for ; Tue, 17 Feb 2004 23:54:41 -0800 (PST) Received: from mx1.heronetwork.com (mail.heronetwork.com [216.254.62.176]) by mx1.FreeBSD.org (Postfix) with ESMTP id D20FC43D2D for ; Tue, 17 Feb 2004 23:54:41 -0800 (PST) (envelope-from sandshrimp@comcast.net) Received: by mx1.heronetwork.com (Postfix, from userid 1003) id E0FBDA6A16; Tue, 17 Feb 2004 23:54:40 -0800 (PST) Received: from comcast.net (c-24-19-3-98.client.comcast.net [24.19.3.98]) (using TLSv1 with cipher RC4-MD5 (128/128 bits)) (No client certificate requested) by mx1.heronetwork.com (Postfix) with ESMTP id 6993BA6A08; Tue, 17 Feb 2004 23:54:39 -0800 (PST) Message-ID: <40331A3B.70605@comcast.net> Date: Tue, 17 Feb 2004 23:54:35 -0800 From: Ryan Merrick User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.5) Gecko/20031218 X-Accept-Language: en-us, en MIME-Version: 1.0 To: ecrist@adtechintegrated.com References: <002901c3f598$ec181060$6401a8c0@Nomad> <20040218044827.GH2197@hardesty.saintaardvarkthecarpeted.com> <200402180017.08925.ecrist@adtechintegrated.com> In-Reply-To: <200402180017.08925.ecrist@adtechintegrated.com> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on nott.heronetwork.com X-Spam-Status: No, hits=0.0 required=8.0 tests=none autolearn=no version=2.60 cc: 'FreeBSD-questions' Subject: Re: Apache ssl certificates? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Feb 2004 07:54:42 -0000 Eric F Crist wrote: > On Tuesday 17 February 2004 10:48 pm, Saint Aardvark the Carpeted wrote: > >>Eric F Crist disturbed my sleep to write: >> >>>When I go the the server via https: I get a dialog asking >>>for me to accept a certificate, but it's still the snakeoil cert! What >>>am I doing wrong? >> >>I hate to ask the obvious, but have you restarted Apache? I know that's >>bit me a couple times... >> >>Hugh > > > That's a fair questions, but yes. I've checked my syntax and restarted > multiple times. I've even taken the old snake-oil certificate and it's > entire containing directory and moved it to a completely different part of > the system. What kills me more is that I've set these systems up before. > > Thanks for the replies... > Hi, More to the point, try stopping apache and then starting it. For some reason apache does not read the new certs on a apachectl restart. -- -Ryan Merrick sandshrimp@comcast.net