Problem s instalaciou certifikatu
Vladimir Rengevic
linux na grafon.sk
Středa Prosinec 19 21:15:09 CET 2007
Pekny den vsetkym!
Mam server Fedoru 6 Zend. U DT-CA som poziadal o certifikat
pre server. Ziadost som vyrobil nasledovne:
najprv kluc:
$ openssl genrsa -des3 -out server.key 1024
potom ziadost:
$ openssl req -new -key server.key -out server.csr
zo suboru server.csr mi cert. autorita vytvorila certifikat
server.pem ktory som podla pokynov premenoval na server.crt
a nasledne umiestnil subory:
/etc/httpd/conf/ssl.crt/server.crt
/etc/httpd/conf/ssl.key/server.key
No a po restarte httpd tento nenabehne a do logu dostanem hlasky:
**********************************************************************
[Wed Dec 19 21:03:51 2007] [warn] RSA server certificate is a CA
certificate (BasicConstraints: CA == TRUE !?)
[Wed Dec 19 21:03:51 2007] [warn] RSA server certificate CommonName (CN)
`www.grafon.sk' does NOT match server name!?
[Wed Dec 19 21:03:52 2007] [notice] Digest: generating secret for digest
authentication ...
[Wed Dec 19 21:03:52 2007] [notice] Digest: done
[Wed Dec 19 21:03:52 2007] [notice] mod_python: Creating 4 session
mutexes based on 256 max processes and 0 max threads.
[Wed Dec 19 21:03:52 2007] [warn] RSA server certificate is a CA
certificate (BasicConstraints: CA == TRUE !?)
[Wed Dec 19 21:03:52 2007] [warn] RSA server certificate CommonName (CN)
`www.grafon.sk' does NOT match server name!?
[Wed Dec 19 21:03:52 2007] [notice] Apache/2.2.6 (Unix) DAV/2
mod_auth_kerb/5.3 mod_auth_pgsql/2.0.3 mod_python/3.2.8 Python/2.4.4
mod_ssl/2.2.6 OpenSSL/0.9.8b mod_perl/2.0.2 Perl/v5.8.8 configured --
resuming normal operations
**********************************************************************
Samozrejme www.grafon.sk existuje, je v DNS ale nie je to A zaznam,
je to len CNAME. Zaznam o www.grafon.sk je aj v subore /etc/hosts.
Priznam sa ze s tymto nejak moc skusenosti nemam.
Nasmeruje ma niekto prosim? ;o)
Dakuejm!
Vlado
--
Ing. Vladimir Rengevic
GRAFON creative team
Tranovskeho 19, Liptovsky Mikulas, Slovakia
phone: +421/44/5526153, fax: +421/44/5621454
mobil: +421/905/642799
www.grafon.sk
Další informace o konferenci Linux