Apache +OpenSSL

Hi Group,

I'm having a problem with Apache 2.0.45 on Win32. I'm trying to install
a chained SSL certificate, but on restarting Apache, I get the error

"Unable to configure verify locations for client authentication"

The certificate was purchased from freeSSL.com and i've followed their
instructions and had their tech support on this without a resolution
yet. If anybody has encountered this, could you let me know what your
resolution was please? (Or (more likely) let me know my mistake!!)

Thanks,

--Mark.


<VirtualHost xx.xx.xx.xx:443>
<Directory D:/hosted/htdocs/ssl.www.xxxxxx.com/public_html>
AllowOverride Options FileInfo
Options ExecCGI FollowSymLinks Includes Indexes MultiViews
SSLOptions +StdEnvVars
Order allow,deny
Allow from all
</Directory>
ServerAdmin mark RemoveThis @nospam-edwards-family-server.co.uk
ServerName www.xxxxxx.com
DocumentRoot "D:/hosted/htdocs/ssl.www.xxxxxx.com/public_html"
UserDir "D:/hosted/htdocs/ssl.www.xxxxxx.com"
ScriptAlias /cgi-bin/
"D:/hosted/htdocs/ssl.www.xxxxxx.com/public_html/cgi-bin/"
DirectoryIndex index.php index.htm index.html index.php3 index.phtml
index.shtml index.cgi index.pl
CustomLog "D:/hosted/htdocs/ssl.www.xxxxxx.com/logs/access.log" Common
ErrorLog "D:/hosted/htdocs/ssl.www.xxxxxx.com/logs/error.log"
SSLEngine On
SSLCertificateFile conf/www.xxxxxx.com.crt
SSLCertificateKeyFile conf/www.xxxxxx.com.key
SSLCACertificateFile "C:/Program Files/Apache
Group/Apache2/conf/ssl.crt/ca-bundle/baltimore.crt"
</VirtualHost>

 > I'm having a problem with Apache 2.0.45 on Win32. I'm trying to install
 > a chained SSL certificate, but on restarting Apache, I get the error
 >
 > "Unable to configure verify locations for client authentication"
 >
 > The certificate was purchased from freeSSL.com and i've followed their
 > instructions and had their tech support on this without a resolution
 > yet. If anybody has encountered this, could you let me know what your
 > resolution was please? (Or (more likely) let me know my mistake!!)
<snip>
 > SSLCACertificateFile "C:/Program Files/Apache
 > Group/Apache2/conf/ssl.crt/ca-bundle/baltimore.crt"

well, apache tries to tell you that it wants to verify the ca-certs
for client authorisation and couldn't. if you read the docs on
SSLCACertificateFile under

<a style='text-decoration: underline;' href="http://httpd.apache.org/docs-2.0/mod/mod_ssl.html#sslcacertificatefile" target="_blank">http://httpd.apache.org/docs-2.0/mod/mod_ssl.html#sslcacertificatefile</a>

you see that it's indeed for giving ca-root certs or complete chains
for client auth. since you probably wanted to install a chain cert
only to connect your server cert from freessl to the baltimore root ca
cert in the client browser, it can't be verified. even if it could be
verified, it wouldn't help since you need SSLCertificateChain.

joachim<!-- ~MESSAGE_AFTER~ -->