Keep Server Online
If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.
or
A donation makes a contribution towards the costs, the time and effort that's going in this site and building.
Thank You! Steffen
Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
| |
|
Topic: SSL settings make Apache 2.25 on Win2003 can't start |
|
Author |
|
enri1357
Joined: 12 Jul 2013 Posts: 4
|
Posted: Sat 27 Jul '13 13:35 Post subject: SSL settings make Apache 2.25 on Win2003 can't start |
|
|
Hi all.
I have a production server which has been using for about 10 years and I have a lab that was built last year. Both of them is using Windows 2003 Standard Edition with SP2. Both received all updates from Windows Update
I installed the Apache and PHP download in this web and so far there is no issue until implementation of SSL.
When I start apache in my production machine, it said in error log
[Fri Jul 26 18:02:24 2013] [error] Unable to configure verify locations for client authentication
[Fri Jul 26 18:02:24 2013] [error] SSL Library Error: 33558533 error:02001005:system library:fopen:Input/output error
[Fri Jul 26 18:02:24 2013] [error] SSL Library Error: 537317378 error:2006D002:BIO routines:BIO_new_file:system lib
[Fri Jul 26 18:02:24 2013] [error] SSL Library Error: 185090050 error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib
At first, I thought it might be the SSL file have some problem, so I apply again using another subdomain. I transferred the whole brunch of files I use in the production server and put it to my lab. No issue found.
I further point the ip from the zone to my lab and use the originally generated certificate. It works too.
Anybody know why this issue may happen? What's wrong with the production server? any experienced expert to suggest solutions for me?
Thanks in advanced.
Enri |
|
Back to top |
|
Steffen Moderator
Joined: 15 Oct 2005 Posts: 3092 Location: Hilversum, NL, EU
|
Posted: Sat 27 Jul '13 15:59 Post subject: |
|
|
Looks to me a certificate issue, special the SSLCertificateChainFile.
Be absolute sure that following files are the correct ones:
SSLCertificateFile
SSLCertificateKeyFile
SSLCertificateChainFile
SSLCACertificateFile
Btw: what is a lab ? |
|
Back to top |
|
enri1357
Joined: 12 Jul 2013 Posts: 4
|
Posted: Sun 28 Jul '13 15:11 Post subject: |
|
|
Thanks for your reply.
Shouldn't be related to the certificate itself.
my Lab is actually an VM for development testing. I remove all related service from production server and zip it. Then, in the development machine, I put back and install the unzipped files service. They just works fine.
Something wrong with my Windows Server, but I have no idea what it is about.. |
|
Back to top |
|
Steffen Moderator
Joined: 15 Oct 2005 Posts: 3092 Location: Hilversum, NL, EU
|
Posted: Sun 28 Jul '13 16:03 Post subject: |
|
|
I googled with Apache Unable to configure verify locations for client authentication
Maybe there is some you recognize.
Steffen |
|
Back to top |
|
|
|
|
|
|