Problem s instalaciou certifikatu

Vladimir Rengevic linux na grafon.sk
Středa Prosinec 19 21:15:09 CET 2007


Pekny den vsetkym!

Mam server Fedoru 6 Zend. U DT-CA som poziadal o certifikat
pre server. Ziadost som vyrobil nasledovne:

najprv kluc:
$ openssl genrsa -des3 -out server.key 1024

potom ziadost:
$ openssl req -new -key server.key -out server.csr

zo suboru server.csr mi cert. autorita vytvorila certifikat
server.pem ktory som podla pokynov premenoval na server.crt
a nasledne umiestnil subory:

/etc/httpd/conf/ssl.crt/server.crt
/etc/httpd/conf/ssl.key/server.key

No a po restarte httpd tento nenabehne a do logu dostanem hlasky:

**********************************************************************
[Wed Dec 19 21:03:51 2007] [warn] RSA server certificate is a CA 
certificate (BasicConstraints: CA == TRUE !?)
[Wed Dec 19 21:03:51 2007] [warn] RSA server certificate CommonName (CN) 
`www.grafon.sk' does NOT match server name!?
[Wed Dec 19 21:03:52 2007] [notice] Digest: generating secret for digest 
authentication ...
[Wed Dec 19 21:03:52 2007] [notice] Digest: done
[Wed Dec 19 21:03:52 2007] [notice] mod_python: Creating 4 session 
mutexes based on 256 max processes and 0 max threads.
[Wed Dec 19 21:03:52 2007] [warn] RSA server certificate is a CA 
certificate (BasicConstraints: CA == TRUE !?)
[Wed Dec 19 21:03:52 2007] [warn] RSA server certificate CommonName (CN) 
`www.grafon.sk' does NOT match server name!?
[Wed Dec 19 21:03:52 2007] [notice] Apache/2.2.6 (Unix) DAV/2 
mod_auth_kerb/5.3 mod_auth_pgsql/2.0.3 mod_python/3.2.8 Python/2.4.4 
mod_ssl/2.2.6 OpenSSL/0.9.8b mod_perl/2.0.2 Perl/v5.8.8 configured -- 
resuming normal operations
**********************************************************************

Samozrejme www.grafon.sk existuje, je v DNS ale nie je to A zaznam,
je to len CNAME. Zaznam o www.grafon.sk je aj v subore /etc/hosts.

Priznam sa ze s tymto nejak moc skusenosti nemam.
Nasmeruje ma niekto prosim? ;o)

Dakuejm!


Vlado




-- 

Ing. Vladimir Rengevic
GRAFON creative team
Tranovskeho 19, Liptovsky Mikulas, Slovakia
phone: +421/44/5526153, fax: +421/44/5621454
mobil: +421/905/642799
www.grafon.sk



Další informace o konferenci Linux