Page 1 of 1

OpenSSL certification problem

PostPosted: 05. March 2007 11:01
by SlyT
After run makecert.bat I got following output:

Code: Select all
[cut ...]

Enter pass phrase for privkey.pem:
unable to load Private Key
5512:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:.\
crypto\evp\evp_enc.c:461:
5512:error:0906A065:PEM routines:PEM_do_header:bad decrypt:.\crypto\pem\pem_lib.
c:425:
Loading 'screen' into random state - done
Signature ok
[...cut ...]
Getting Private key
Error opening Private key server.key
1592:error:02001002:system library:fopen:No such file or directory:.\crypto\bio\
bss_file.c:352:fopen('server.key','rb')
1592:error:20074002:BIO routines:FILE_CTRL:system lib:.\crypto\bio\bss_file.c:35
4:
unable to load Private key


After that apache service can not be run.

Event Viewer says:
Code: Select all
The Apache service named  reported the following error:
>>> SSLCertificateFile: file 'path_to/ssl.crt/server.crt' does not exist or is empty.
The Apache service named  reported the following error:
>>> Syntax error on line 104 of D:/OCS/xampp/apache/conf/extra/httpd-ssl.conf:


I found out that following line / command in makecert.bat is cause of that output:

bin\openssl rsa -in privkey.pem -out server.key

Plz for help

PostPosted: 05. March 2007 13:02
by WorldDrknss
You might want to give this a try: http://wdguides.org/gusion.php?name=guides&c=16&id=42 it's a tutorial that explains how to create self signed certificates without the use of a passcode. The PEM file.

PostPosted: 07. March 2007 09:25
by SlyT
Thank you very much for your help.
How about cacert.pem ? Is that the same as ca.crt ? Or how can I generate it ?

PostPosted: 10. March 2007 11:58
by WorldDrknss
Take a look at: http://www.cacert.org/help.php you can also find some useful information there.