/ Zope / Apsis / Pound Mailing List / Archive / 2007 / 2007-01 / SSL forwarding problem

[ << ] [ >> ]

[ Pound is limited for medium sites only? / ... ] [ Anyone have OMA working? / "Michael St. ... ]

SSL forwarding problem
"Robert Easthope" <r.easthope(at)ukerna.ac.uk>
2007-01-10 16:22:01 [ FULL ]
Hi I've been having some problems with pound and adding in the SSL
support.  I have specified the pem file in the configuration file but
get the following error message in the messages file when I try to run
up pound:-
webdirector pound:line 35:SSL_CTX_use_certificate_chain_file
"serverkey/janet.pem" failed - aborted

Can you tell me is this something to do with specifying somewhere the
type of ciphers to use? My Apache server by default users .crt and .key
files which I know do work, however there doesn't seem to be any way to
use these in Pound as far as I could see so I've had to get the pem file
version.

Regards,
Bob

-----Original Message-----
From: pound(at)apsis.ch [mailto:pound(at)apsis.ch] 
Sent: 10 January 2007 15:16
To: Robert Easthope
Subject: Welcome to [Pound Mailing List]


Hello "Robert Easthope" <r.easthope(at)ukerna.ac.uk>,

you are now subscribed to Pound Mailing List.

Send your mails to: pound(at)apsis.ch

If you want to unsubscribe from Pound Mailing List,
send a mail with subject (not body!):

unsubscribe 

to: pound(at)apsis.ch

Yours, roseg(at)apsis.ch

RE: [Pound Mailing List] SSL forwarding problem
"Michael St. Laurent" <mikes(at)hartwellcorp.com>
2007-01-10 19:04:08 [ FULL ]
I just had this sort of problem myself and the kind folks on the list
helped me out with it.

Basically the .pem file is a .key file with the .crt file appended to it
and the .crt file for the intermediate certificate after *that*.

Jam the three files together and then check line formatting to make sure
that there are no DOS line terminators in them, etc.

-----Original Message-----
From: Robert Easthope [mailto:r.easthope(at)ukerna.ac.uk] 
Sent: Wednesday, January 10, 2007 7:22 AM
To: pound(at)apsis.ch
Subject: [Pound Mailing List] SSL forwarding problem

Hi I've been having some problems with pound and adding in the SSL
support.  I have specified the pem file in the configuration file but
get the following error message in the messages file when I try to run
up pound:-
webdirector pound:line 35:SSL_CTX_use_certificate_chain_file
"serverkey/janet.pem" failed - aborted

Can you tell me is this something to do with specifying somewhere the
type of ciphers to use? My Apache server by default users .crt and .key
files which I know do work, however there doesn't seem to be any way to
use these in Pound as far as I could see so I've had to get the pem file
version.

Regards,
Bob

MailBoxer