mod_ssl continued
Roger Harrell
roger at audiblefaith.com
Fri Mar 19 17:54:10 UTC 2004
> Ok, I think I have the apache side of the SSL thing worked out. It seems
> to be trying to serve the pages. When I go to:
> https://www.musicwithmeaning.com
>
> I get a "Page can not be displayed" error and my SSL error log shows:
> [warn] RSA server certificate is a CA certificate (BasicConstraints: CA
> == TRUE !?)
>
> Thoughts/comments/help?
>
>
>
> How did you create the certificate for https?
> Did you create a CA and use its cert. - the message looks like its saying the cert. is for a CA rather than a server?
>
> For my latest https setup I used the makefile in /usr/share/ssl/certs, then copied the pem file it created into /etc/httpd/conf/ssl.crt/server.crt and /etc/httpd/conf/ssl.key/server.key. Very simple.
Created a key as per RH customizationg guide:
in /usr/share/ssl/certs
make genkey
Then created a self-signed certificate:
make testcert
--
Roger
More information about the Redhat-install-list
mailing list