Page 1 of 1

Apache won't start after using new SSL certificate

PostPosted: 16. August 2009 12:02
by imthewolfman
Hello, everyone.

I'm trying to make a site that is able to use an ssl connection. At this point I can only use the default certificate that came preinstalled with apache. But I just tried using open ssl to make a new certificate and use it on my server. I managed to make the certificate but apache won't start now. This is what I did exactly:

1. I made a new folder called "ssl".

2. I used this command in the windows command prompt to make "server.key"
openssl genrsa -aes256 -out server.key 1024

3. I used this command in the windows command prompt to make "server.csr"
openssl req -new -key server.key -out server.csr

4. Using this command I signed the certificate to make "server.crt"
openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt

5. Finally I moved the above 3 files , and replaced the original "server.key", "server.csr" and "server.crt" files found in their respective folders under \xampp\apache\conf

After I did that, I restarted apache by using the XAMPP control panel but it won't start!
Could someone please help me out. This is driving me insane.

Re: Apache won't start after using new SSL certificate

PostPosted: 16. August 2009 12:37
by Wiedmann
I restarted apache by using the XAMPP control panel but it won't start! Could someone please help me out.

See in the Apache "error.log" what's the problem.

Re: Apache won't start after using new SSL certificate

PostPosted: 16. August 2009 14:27
by imthewolfman
Doh! why didn't I think about seeing the "error.log" file?

Anyway, it turns out this was the error

[Sun Aug 16 21:56:48 2009] [error] Init: SSLPassPhraseDialog builtin is not supported on Win32 (key file D:/Downloads/Joomla Files/xampp/apache/conf/ssl.key/server.key)

I googled it and stumbled on this site http://www.entrust.net/knowledge-base/technote.cfm?tn=5634,
I followed the instructions and managed to get Apache running again...BUT according to Firefox I am still using Camellia 256-bit encryption on my site even though I used aes256 in the first command to make the server.key file.

What did I do wrong, how can I change the encryption used on my site from Camellia to AES?

Re: Apache won't start after using new SSL certificate

PostPosted: 18. August 2009 11:46
by imthewolfman
Bump.

Nobody knows?