Java Mailing List Archive

http://www.apache-httpd.com/

Home » users.httpd »

[users@httpd] SSLCACertificatePath breaks something

Luis Neves

2010-08-04

Replies: Find Java Web Hosting

Author LoginPost Reply
Hi to all,

if in apache I use in
SSLCACertificateFile /etc/pki/tls/certs/ca-bundle.crt
I dont have any errors regarding the client certificate

If I change it to
SSLCACertificatePath /usr/local/apache2/conf/certs
(and comment the SSLCACertificateFile line)

where certs is the folder where I have all the individual PEM certificates and symbolic links to their hashes
I get on error_log

[Wed Aug 04 13:48:34.257972 2010] [error] [pid 3134] [client 10.15.1.74:48696] Certificate Verification: Error (20): unable to get local issuer certificate
[Wed Aug 04 13:48:34.258299 2010] [info] [pid 3134] [client 10.15.1.74:48696] SSL library error 1 in handshake (server beehive.cm-lisboa.net:443)
[Wed Aug 04 13:48:34.258412 2010] [info] [pid 3134] SSL Library Error: error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned

Icant find why or what I am missing
Can you help?

Regards,
Luis
©2008 apache-httpd.com - Jax Systems, LLC, U.S.A.