Re: [us...@httpd] renewing a certificate

2009-05-06 Thread Davide Bianchi
Melanie Pfefer wrote: > Hi , > > I created the .pem file using keytool > > keytool -export -alias tomcat -rfc > tomcat.pem > > and then moved this file to apache directory and ran c_rehash > /usr/local/apache/conf/ssl > > this created a link file cc5d41ae.0 -> tomcat.pem > > what are the mis

Re: [us...@httpd] renewing a certificate

2009-05-06 Thread Melanie Pfefer
ey and server.crt on apache using openssl? thanks --- On Wed, 6/5/09, Prasanna Ram Venkatachalam wrote: > From: Prasanna Ram Venkatachalam > Subject: Re: [us...@httpd] renewing a certificate > To: users@httpd.apache.org > Date: Wednesday, 6 May, 2009, 3:15 PM > oh.. i h

Re: [us...@httpd] renewing a certificate

2009-05-06 Thread Prasanna Ram Venkatachalam
oh.. i hope server.crt is the certificate you are using? right? On Wed, May 6, 2009 at 5:44 PM, Prasanna Ram Venkatachalam < vpra...@gmail.com> wrote: > Melanie, i think keytool does not create any certificate. Its just a > key/certificate management utility. > http://java.sun.com/j2se/1.4.2/docs

Re: [us...@httpd] renewing a certificate

2009-05-06 Thread Prasanna Ram Venkatachalam
Melanie, i think keytool does not create any certificate. Its just a key/certificate management utility. http://java.sun.com/j2se/1.4.2/docs/tooldocs/solaris/keytool.html What did you use to get server.crt? openssl ,selfssl or some free sites available?? Regards Prasanna Ram On Wed, May 6, 2009 at

Re: [us...@httpd] renewing a certificate

2009-05-06 Thread Melanie Pfefer
OK Krist. Just few more questions please: When I create a new certificate using keytool, how to specify a long-term expiry date? thanks, --- On Wed, 6/5/09, Krist van Besien wrote: > From: Krist van Besien > Subject: Re: [us...@httpd] renewing a certificate > To: users@httpd.a

Re: [us...@httpd] renewing a certificate

2009-05-06 Thread Krist van Besien
On Wed, May 6, 2009 at 1:37 PM, Melanie Pfefer wrote: > > you are right. > > But I tried now a replica of what I have: > apache > tomcat > > The certificate is self-signed and I just generated it. Is it normal to have > on the browser: sec_error_expired_certificate When you generate a certificat

Re: [us...@httpd] renewing a certificate

2009-05-06 Thread Melanie Pfefer
ct: Re: [us...@httpd] renewing a certificate > To: users@httpd.apache.org > Date: Wednesday, 6 May, 2009, 12:11 PM > On Wed, May 6, 2009 at 8:52 AM, > Melanie Pfefer > > wrote: > > > > Hi, > > > > I have tomcat server running as a backend server and > ap

Re: [us...@httpd] renewing a certificate

2009-05-06 Thread Krist van Besien
On Wed, May 6, 2009 at 8:52 AM, Melanie Pfefer wrote: > > Hi, > > I have tomcat server running as a backend server and apache running as > front-end, both on the same machine > > In httpd.conf, I have: > > SSLProxyEngine On > RewriteEngine On > SSLProxyCACertificatePath /usr/local/apache/conf/ssl

[us...@httpd] renewing a certificate

2009-05-05 Thread Melanie Pfefer
Hi, I have tomcat server running as a backend server and apache running as front-end, both on the same machine In httpd.conf, I have: SSLProxyEngine On RewriteEngine On SSLProxyCACertificatePath /usr/local/apache/conf/ssl RewriteRule ^/(abc.*) https://host:port/$1 [P,L] I am getting an error