From owner-freebsd-current Fri May 5 21:38:52 2000 Delivered-To: freebsd-current@freebsd.org Received: from mail.hiwaay.net (fly.HiWAAY.net [208.147.154.56]) by hub.freebsd.org (Postfix) with ESMTP id 49F0737B877; Fri, 5 May 2000 21:38:49 -0700 (PDT) (envelope-from sprice@hiwaay.net) Received: from localhost (sprice@localhost) by mail.hiwaay.net (8.10.1/8.10.1) with ESMTP id e464ckm26135; Fri, 5 May 2000 23:38:47 -0500 (CDT) Date: Fri, 5 May 2000 23:38:46 -0500 (CDT) From: Steve Price To: Kris Kennaway Cc: Forrest Aldrich , current@FreeBSD.org Subject: Re: RSA decrypt problems In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Fri, 5 May 2000, Kris Kennaway wrote: # I'm suspecting it might be something missing in the ASN.1 encoding of the # certificate, which netscape requires but IE permits. This would be # consistent with a missing openssl.cnf file at the time of certificate # generation. Could one of you try copying the openssl.cnf file from # crypto/openssl/apps/ to /etc/ssl (editing as appropriate) and see if that # fixes it (i.e. make a new certificate and test it in the same way)? It didn't help here. I rebuilt the port and re-installed from a clean WRKDIR and I get the same error message. If I do a 'make certificate', copy those files over, and try to start apache it just hangs definitely until I ^C it. After I kill it I see this in the apache error logs. [error] mod_ssl: Init: Private key not found (OpenSSL library error follows) [error] OpenSSL: error:0D06B078:asn1 encoding routines:ASN1_get_object: header too long Methinks it has something to do with key generation as well, but I'll be darned if I know what. -steve To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message