Problem s instalaciou certifikatu

[Petr Simek]

On Mon, 24 Dec 2007, Dan Ohnesorg wrote:

> Dne Sat, Dec 22, 2007 at 03:50:37PM +0100, Pavel Kankovsky napsal:
> > On Wed, 19 Dec 2007, Vladimir Rengevic wrote:
> >
> > > [Wed Dec 19 21:03:51 2007] [warn] RSA server certificate is a CA
> > > certificate (BasicConstraints: CA == TRUE !?)
> > > [Wed Dec 19 21:03:51 2007] [warn] RSA server certificate CommonName (CN)
> > > `www.grafon.sk' does NOT match server name!?
> >
> > Ten serverový certifikát s CA=TRUE bych chtěl fakt vidět.
> > Co píše openssl x509 -text -in server.crt?
>
> Myslim ze vec je celkem jasna, CA dava na diskete svuj certifikat a
> certifikat pro server. Tazatel omylem instaloval misto sveho certifikatu
> certifikat CA.
>
> Spravne je to nejak takle:
>
> SSLCertificateFile /etc/../vydany_certifikat.pem
> SSLCertificateKeyFile /etc/.../muj_privatni_klic.pem
> SSLCACertificateFile /etc/.../certifikatCA.pem

Spravne je to spis takhle :

SSLCertificateFile /etc/httpd/conf/certifikat/server_cert.pem
SSLCertificateKeyFile /etc/httpd/conf/certifikat/server_priv_key_nopw.pem
SSLCertificateChainFile /etc/httpd/conf/certifikat/authority_public_ca_cert.pem

to SSLCACertificateFile je kdyz chcete validovat klienty .

> dan

*------------------------------------------------------------------------*
|                          Petr Simek   APS JU                           |
|                             psimek na jcu.cz                              |
*------------------------------------------------------------------------*