[FX.php List] [OT] SSL problem with Mac OS X Server SOLVED

[Bob Patin]

Jason,

Yes, I knoq *how* to add a passphrase, and use Server Admin every  
day; the problem was that, when I did use a passphrase, the web  
services (Apache) failed to start.

What I discovered was that, once I put in a cert that had no  
passphrase, everything worked flawlessly...

Bob Patin
Longterm Solutions
bob at longtermsolutions.com
615-333-6858
http://www.longtermsolutions.com

   CONTACT US VIA INSTANT MESSAGING:
      AIM or iChat: longterm1954
      Yahoo: longterm_solutions
      MSN: tech at longtermsolutions.com
      ICQ: 159333060


On Dec 28, 2006, at 2:23 AM, Jason LEWIS wrote:

> If you would like to use a passphrase, you can put it into a secure  
> file
> on the server at /etc/httpd/servermgr_web_httpd_config.plist.  Or you
> could use the GUI to put in the passphrase.  It is in one of the  
> server
> admin programs.  I think it is called server admin.
>
>>>> Bob Patin <bob at patin.com> 12/27/2006 5:01 PM >>>
> Hi all,
>
> I thought I'd share this with the list, in case there are any others
> out there using Mac OS X Server, and who want to use an SSL
> certificate.
>
> I had tons of trouble trying to get the cert installed and working on
>
> my server, and finally found a Linux guru who knows Apache (which is
> what OS X Server uses) well enough to help me find the problem.
>
> As it turns out, when you generate a ceritificate signing request
> (CSR), you don't *have* to use a passphrase. What I discovered was
> that, by using a passphrase for my CSR, I was using a cert that
> required this passphrase when Apache started up.
>
> So we started Apache manually in the Terminal, supplied the
> passphrase, and it started up. However, we then discovered that a
> proxy event (which aliases port 80 to another port) didn't occur, and
>
> all but the SSL site didn't come up.
>
> So I created a new CSR without a passphrase, and it worked flawlessly
>
> from the start.
>
> So for any of you wanting to use a cert on your OS X Server: don't
> put in a passphrase and it'll work fine for you.
>
> Hope this is helpful for someone; best regards,
>
> Bob Patin
> Longterm Solutions
> bob at longtermsolutions.com
> 615-333-6858
> http://www.longtermsolutions.com
>
>    CONTACT US VIA INSTANT MESSAGING:
>       AIM or iChat: longterm1954
>       Yahoo: longterm_solutions
>       MSN: tech at longtermsolutions.com
>       ICQ: 159333060
>
>
> _______________________________________________
> FX.php_List mailing list
> FX.php_List at mail.iviking.org
> http://www.iviking.org/mailman/listinfo/fx.php_list
> _______________________________________________
> FX.php_List mailing list
> FX.php_List at mail.iviking.org
> http://www.iviking.org/mailman/listinfo/fx.php_list