Topic: apache 2.2.1 with SSL

[madRAM]

I know there where postings about this before but I might have a slightly different problem.

I downloaded and installed the provided apache 2.2.1 with ssl and want to use it as a reverse proxy. Whenever I try to make use of SSL I get one of the two following errors and my apache stops working:

[Tue Apr 11 17:12:18 2006] [error] Init: SSLPassPhraseDialog builtin is not supported on Win32 (key file C:/Apache2.2/conf/certs/base64.cert.cer)

This message up even so that the certificate has NO PASSWORD - I definately know this because I created the certificate by myself with windows 2003 PKI.

The other error message I get (if I use a certificate created with openssl 0.9.7b on my Powerbook) is:

[Wed Apr 12 08:58:08 2006] [debug] ssl_engine_pphrase.c(469): unencrypted RSA private key - pass phrase not required
[Wed Apr 12 08:58:08 2006] [info] Init: Generating temporary RSA private keys (512/1024 bits)
[Wed Apr 12 08:58:08 2006] [info] Init: Generating temporary DH parameters (512/1024 bits)
[Wed Apr 12 08:58:08 2006] [info] Init: Initializing (virtual) servers for SSL
[Wed Apr 12 08:58:08 2006] [info] Configuring server for SSL protocol
[Wed Apr 12 08:58:08 2006] [debug] ssl_engine_init.c(405): Creating new SSL context (protocols: SSLv3, TLSv1)
[Wed Apr 12 08:58:08 2006] [debug] ssl_engine_init.c(601): Configuring permitted SSL ciphers [ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL]
[Wed Apr 12 08:58:08 2006] [debug] ssl_engine_init.c(729): Configuring RSA server certificate
[Wed Apr 12 08:58:08 2006] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 12 08:58:08 2006] [debug] ssl_engine_init.c(768): Configuring RSA server private key
[Wed Apr 12 08:58:08 2006] [debug] ssl_engine_init.c(405): Creating new SSL context (protocols: SSLv2, SSLv3, TLSv1)
[Wed Apr 12 08:58:08 2006] [info] Server: Apache/2.2.1, Interface: mod_ssl/2.2.1, Library: OpenSSL/0.9.8b-dev
[Wed Apr 12 08:58:08 2006] [info] Init: Seeding PRNG with 144 bytes of entropy
[Wed Apr 12 08:58:08 2006] [info] Loading certificate & private key of SSL-aware server

As mentioned I know there where other topics like this and the proposed solution was to compile the apache with openssl 0.9.8b instead of 0.9.8a. However, I am in a lab here at a customer site and there is just no way of getting a compiler on any maschine (company policy bullshit).

So, is there any other way to get this bloody thing to work???


PLEASE HELP!