SSL Certificate on 10.6 Server

[fluffels]

I’ve just been migrating services off a G5 Xserve running 10.5 Server, to a Mac Pro running 10.6 Server.

It dawned on me it’d be a good idea to get an actual SSL certificate. Because of the lack of funds available, I’ve gone for PositiveSSL.

Here are the steps I took to get it:

1. In Server Admin > Certificates I chose Generate CSR

2. I pasted this in to Comodo’s page and chose Apache + MOD SSL

3. Took the .crt file emailed to me and chose “replace with signed certificate”, dropped it on and clicked “replace certificate” (replacing the old, self signed one).

This all seemed to work fine. HOWEVER, the web service doesn’t seem to be playing ball with it at all and because of this I’m scared to propagate it around any other services.

These are the errors I’m receiving: (not that Server Admin notices anything wrong!)

[code][Wed Jan 19 05:59:58 2011] [error] Init: Pass phrase incorrect
[Wed Jan 19 05:59:58 2011] [error] SSL Library Error: 218710120 error:0D094068:asn1 encoding routines:d2i_ASN1_SET:bad tag
[Wed Jan 19 05:59:58 2011] [error] SSL Library Error: 218529960 error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
[Wed Jan 19 05:59:58 2011] [error] SSL Library Error: 218595386 error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error
[Wed Jan 19 05:59:58 2011] [error] SSL Library Error: 218734605 error:0D09A00D:asn1 encoding routines:d2i_PrivateKey:ASN1 lib[/code]

Now I’m aware there needs to be a pass pharse, I saw the box in Server Admin 10.5, but it’s gone from Snow Leopard.

…and therefore I’m stumped.

Is there any easy how-to guide for actually getting this sorted and having SSL up and running?

Thanks in advance 🙂

[fluffels]

I attempted to follow what I could of this (obviously taking in to account the new cert, not a migrated one)…
https://www.afp548.com/article.php?story=20100425082436137

Thing is I’m getting similar errors still:

[code][Wed Jan 19 23:54:50 2011] [error] Init: Pass phrase incorrect
[Wed Jan 19 23:54:50 2011] [error] SSL Library Error: 218710120 error:0D094068:asn1 encoding routines:d2i_ASN1_SET:bad tag
[Wed Jan 19 23:54:50 2011] [error] SSL Library Error: 218529960 error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
[Wed Jan 19 23:54:50 2011] [error] SSL Library Error: 218595386 error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error
[Wed Jan 19 23:54:50 2011] [error] SSL Library Error: 218734605 error:0D09A00D:asn1 encoding routines:d2i_PrivateKey:ASN1 lib[/code]

Does anyone have any ideas?

[Author]

Posts