OpenSSL: error:0B080074:lib(11):func(128):reason(116)

[Bill Hutten]

Hi all:

I'm running Mac OSX Server 10.2.x, using the version of OpenSSL that came
with the machine.

I'm attempting to configure Apache to handle SSL. Because the server is
at a remote locate all configuration is done via the command line, not
using the Apple GUI tools.

I've created my appropriate certificate and key files, and placed them in
the proper directories, and have the httpd_macosxserver.conf file
properly configured, but when I start Apache with the 'apachectl start'
command I get the following error in /var/log/httpd/ssl_engine_log :

Unable to configure RSA server private key (OpenSSL library error follows)
[24/Jan/2003 17:01:27 14276] [error] OpenSSL:
error:0B080074:lib(11):func(128):reason(116)

Googling this error message only finds me one possibility, which is a
reference to making sure that the various cert files have '600'
privileges. I've done this, without fixing the problem.

Has anyone else seen this problem, and knows of a solution?

Thanks

- bill
--
bi...@hutten.org

______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openss...@openssl.org
Automated List Manager majo...@openssl.org

[Richard Levitte - VMS Whacker]

In message <2003020119...@relay.hutten.org> on Sat, 1 Feb 2003 15:09:11 -0400, "Bill Hutten" <bi...@hutten.org> said:

bill> I've created my appropriate certificate and key files, and placed them in
bill> the proper directories, and have the httpd_macosxserver.conf file
bill> properly configured, but when I start Apache with the 'apachectl start'
bill> command I get the following error in /var/log/httpd/ssl_engine_log :
bill>
bill> Unable to configure RSA server private key (OpenSSL library error follows)
bill> [24/Jan/2003 17:01:27 14276] [error] OpenSSL:
bill> error:0B080074:lib(11):func(128):reason(116)
bill>
bill> Googling this error message only finds me one possibility, which is a
bill> reference to making sure that the various cert files have '600'
bill> privileges. I've done this, without fixing the problem.

Another way to check what the error message really means is the
following (note that it's based on the hexadecimal code that you could
see as part of the message):

$ openssl errstr 0B080074
error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch

Exactly how did you create the key and the certificate that you're
trying to use?

--
Richard Levitte \ Spannvägen 38, II \ LeV...@stacken.kth.se
Redakteur@Stacken \ S-168 35 BROMMA \ T: +46-8-26 52 47
\ SWEDEN \ or +46-708-26 53 44
Procurator Odiosus Ex Infernis -- po...@bofh.se
Member of the OpenSSL development team: http://www.openssl.org/

Unsolicited commercial email is subject to an archival fee of $400.
See <http://www.stacken.kth.se/~levitte/mail/> for more info.