Upgrading apache form 2.0.x to 2.2.x



Hello,

I've upgradde today, but SSL doesn't work with the old settings. I suspect something's wrong with my self-signed certificates. If I set SSLEngine On globally, I get this:

[Tue Jan 31 14:11:09 2006] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA certificate (BasicConstraints: CA == TRUE !?)

And httpd stops.
If I set it only in a VirtualHost section, the server is working, but I get this if I try to see that secured virtualhost:


[Tue Jan 31 14:13:59 2006] [error] [client 1.2.3.4] Invalid method in request \x80U\x01\x03

Could somebody help me fixing this? Googling didn't help too much.

Thanks in advance,

Gabor Kovesdan
_______________________________________________
freebsd-questions@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe@xxxxxxxxxxx"



Relevant Pages

  • Re: Upgrading apache form 2.0.x to 2.2.x
    ... certificate (BasicConstraints: CA certificate (BasicConstraints: CA == TRUE!?) ... the RSA cert you use for your CA to sign other certs should not be used as a host cert for SSL. ... Generating a 1024 bit RSA private key ...
    (freebsd-questions)
  • Re: Upgrading apache form 2.0.x to 2.2.x
    ... certificate (BasicConstraints: CA certificate (BasicConstraints: CA == TRUE!?) ... be used as a host cert for SSL. ...
    (freebsd-questions)
  • Re: Classes or Self Study???
    ... big bux as soon as you get your certificate? ... The salesman tells me I should complete all ... but I suspect it's not what you wanted to hear. ...
    (microsoft.public.cert.exam.mcse)
  • Re: Trusting Certs from Non Trusted root
    ... I suspect that it's a cost thing, although I suspect the budget should run to ... Looks like they created their own SSL certificate. ... and add it to the trusted root store... ...
    (microsoft.public.security)
  • Re: Firewall & Certificates & Outlook over HTTP
    ... You do not need to have a dual nic configuration to use self-signed certificates. ... If your cert is signed as 'mydomain.com' and your users are accessing the site as 'server.mydomain.com', there will be a mismatch error displayed in browsers, and Outlook Anywhere won't function correctly. ... You can change this by re-running the connect-to-internet wizard - be sure to select the option to create a new self-signed certificate during the process. ...
    (microsoft.public.windows.server.sbs)