[FX.php List] [OT] SSL problem with Mac OS X Server SOLVED

[Jason LEWIS]

Bob,

I find this weird as I have been using a passphrase for over three
years on Max OSX now.  I believe that the server admin has regularly
upgraded it instead of a new install.  Some of those upgrades, like
going from 10.2 to 10.3 lost the passphrase and had to be reentered.  I
do not recall if going to 10.4 had the same problem.  Once that
passphrase was put in, apache would start and stop for me without any
problems.  Bummer that you did not get it to work.

Jason

>>> Bob Patin <bob at patin.com> 01/01/2007 9:41 AM >>>
Jason,

Yes, I knoq *how* to add a passphrase, and use Server Admin every  
day; the problem was that, when I did use a passphrase, the web  
services (Apache) failed to start.

What I discovered was that, once I put in a cert that had no  
passphrase, everything worked flawlessly...

Bob Patin
Longterm Solutions
bob at longtermsolutions.com 
615-333-6858
http://www.longtermsolutions.com 

   CONTACT US VIA INSTANT MESSAGING:
      AIM or iChat: longterm1954
      Yahoo: longterm_solutions
      MSN: tech at longtermsolutions.com 
      ICQ: 159333060


On Dec 28, 2006, at 2:23 AM, Jason LEWIS wrote:

> If you would like to use a passphrase, you can put it into a secure 

> file
> on the server at /etc/httpd/servermgr_web_httpd_config.plist.  Or
you
> could use the GUI to put in the passphrase.  It is in one of the  
> server
> admin programs.  I think it is called server admin.
>
>>>> Bob Patin <bob at patin.com> 12/27/2006 5:01 PM >>>
> Hi all,
>
> I thought I'd share this with the list, in case there are any others
> out there using Mac OS X Server, and who want to use an SSL
> certificate.
>
> I had tons of trouble trying to get the cert installed and working
on
>
> my server, and finally found a Linux guru who knows Apache (which is
> what OS X Server uses) well enough to help me find the problem.
>
> As it turns out, when you generate a ceritificate signing request
> (CSR), you don't *have* to use a passphrase. What I discovered was
> that, by using a passphrase for my CSR, I was using a cert that
> required this passphrase when Apache started up.
>
> So we started Apache manually in the Terminal, supplied the
> passphrase, and it started up. However, we then discovered that a
> proxy event (which aliases port 80 to another port) didn't occur,
and
>
> all but the SSL site didn't come up.
>
> So I created a new CSR without a passphrase, and it worked
flawlessly
>
> from the start.
>
> So for any of you wanting to use a cert on your OS X Server: don't
> put in a passphrase and it'll work fine for you.
>
> Hope this is helpful for someone; best regards,
>
> Bob Patin
> Longterm Solutions
> bob at longtermsolutions.com 
> 615-333-6858
> http://www.longtermsolutions.com 
>
>    CONTACT US VIA INSTANT MESSAGING:
>       AIM or iChat: longterm1954
>       Yahoo: longterm_solutions
>       MSN: tech at longtermsolutions.com 
>       ICQ: 159333060
>
>
> _______________________________________________
> FX.php_List mailing list
> FX.php_List at mail.iviking.org 
> http://www.iviking.org/mailman/listinfo/fx.php_list 
> _______________________________________________
> FX.php_List mailing list
> FX.php_List at mail.iviking.org 
> http://www.iviking.org/mailman/listinfo/fx.php_list 

_______________________________________________
FX.php_List mailing list
FX.php_List at mail.iviking.org 
http://www.iviking.org/mailman/listinfo/fx.php_list