| Author |
|
TDigger
Joined: 03 Sep 2006
Posts: 3
|
 Posted: Sun 03 Sep '06 4:07 Post subject: Apache 2.0.59 + mod_ssl Crashing - HELP! |
 |
|
Hi,
I am ripping what hair I have out over this. 
Here is the problem.
I have installed:
Apache/2.0.58 (Win32) mod_ssl/2.0.59 OpenSSL/0.9.8b mod_jk/1.2.18 PHP/5.1.4 on a WinXP System.
EVERY time I attempt to start apache (apache -D SSL) it throws a system exception and I cannot access any pages etc . . . After a few seconds the apache process dies back to a prompt.
I have included my conf files to the end of this post.
Any direction / help would be very welcomed. I can get Apache+mod_ssl on my FreeBSD system up and running with a self signed cert in about 10 minutes. I don't know what I is wrong in the Windows world however.
THANKS for any help anyone is willing to provide!
Here is the dump of the error from the Windows Exception:
Admin note:
Removed the huge dump, see forum rules.
Start: httpd.conf
Admin note:
Removed the conf, see forum rules. |
|
| Back to top |
|
TDigger
Joined: 03 Sep 2006
Posts: 3
|
| Posted: Sun 03 Sep '06 7:53 Post subject: OK - This is weird! |
|
|
I finally built the certs on a FreeBSD box and what do you know? Bada-Bing-Bada-Boom . . . 
The SSL thing works like a champ!!!
Next question: Why did the certs made from the Windows box fail and the FreeBSD ones work PERFECT!!!
Anyone have an idea?
1. Ths OpenSSL for win32 is broken
2. Difference in the openssl.cnf files?
I'd love to hear ideas |
|
| Back to top |
|
James Blond
Moderator
Joined: 19 Jan 2006
Posts: 7373
Location: Germany, Next to Hamburg
|
| Posted: Sun 03 Sep '06 12:05 Post subject: |
|
|
See this topic how to create the certs.
And please never post the hole httpd.conf! only post changes you made. We know the content of the httpd.conf 
The Apache Version you use is very old 2.0.58 you should upgrade to 2.2.3 how to install tha tyou can see here |
|
| Back to top |
|
Charliemouse
Joined: 15 Sep 2006
Posts: 4
|
| Posted: Fri 15 Sep '06 13:03 Post subject: |
|
|
I have this exact same problem.
To help out, a friend of mine created the key, csr and cert on his SuSE 10.0 box, but that didn't solve the issue.
I can use openssl to look at the cert and key, i.e.
| Code: | | openssl x509 -in my-server.crt -text -noout |
and they appear to be valid. The only difference I spotted with the cert my friend created was that his had defaulted to md5 instead of sha1, so I even tried forcing mine to md5. Still no luck.
No idea if I can track down someone with FreeBSD, although I'm still not convinced it's a key problem.
(The reason I am using Apache 2.0.x is that Subversion was compiled against 2.0, not 2.2.)
So the state is that Apache works fine without SSL (just removing "SSLEngine on" works fine) but won't boot with it.
Oh, and hello from a forum (and Apache) noob.  |
|
| Back to top |
|
ali_fareed
Joined: 04 Jul 2006
Posts: 61
Location: Bahrain
|
| Posted: Fri 15 Sep '06 16:14 Post subject: |
|
|
You could test the cert by creating an openssl server using the s_server app in the openssl executable like this | Code: | | openssl s_server -cert cert.pem -key privkey.pem -www |
then just connect to https://hostname:4433 and you should get a status page or else see the console to find out what is the error |
|
| Back to top |
|
Charliemouse
Joined: 15 Sep 2006
Posts: 4
|
| Posted: Fri 15 Sep '06 17:02 Post subject: |
|
|
Thanks for the tip - very useful feature!
Works perfectly!
.. which is good because it shows that the key and cert are probably fine. But is bad, because it doesn't help solve the problem with Apache.
Perhaps it's a problem with recent versions of Apache under Win32.
Is anyone running SSL successfully on a 2.0.x version, and if so, which? |
|
| Back to top |
|
Steffen
Moderator
Joined: 15 Oct 2005
Posts: 3092
Location: Hilversum, NL, EU
|
| Posted: Fri 15 Sep '06 18:31 Post subject: |
|
|
| Where did you downloaded the Apache binary and what version do you use ? |
|
| Back to top |
|
Charliemouse
Joined: 15 Sep 2006
Posts: 4
|
| Posted: Fri 15 Sep '06 21:13 Post subject: |
|
|
Apache: 2.0.59 from apache.org
mod_ssl: 2.0.59 (I can't remember where I got it  )
Openssl: 0.9.8c from www.slproweb.com |
|
| Back to top |
|
Steffen
Moderator
Joined: 15 Oct 2005
Posts: 3092
Location: Hilversum, NL, EU
|
| Posted: Fri 15 Sep '06 21:52 Post subject: |
|
|
That is a "nice" mix. Try a complete distro or try as test the binary from here at the download page.
I have still a 2.059 at Removed.
Who knows, that maybe works.
Steffen |
|
| Back to top |
|
Charliemouse
Joined: 15 Sep 2006
Posts: 4
|
| Posted: Mon 18 Sep '06 11:43 Post subject: |
|
|
Yes, you were absolutely right. Problem solved - I started from a clean (and complete) distribution of Apache with mod_ssl.
Because I'm new to Apache, I'd been going around in circles, convinced that my configuration was wrong, when it was actually the odd mix of binaries I'd gathered together as I went along.
Still, I've learned a lot on the way.
Cheers for the help. |
|
| Back to top |
|
