I am trying to create my own CA and Server certificate for my apache server on windows.
When ever I start apache I get "Failed to configure CA certificate chain!"
The apache ssl conf settings are:
SSLProtocol -all +SSLv2 SSLCipherSuite SSLv2:+HIGH:+MEDIUM:+LOW:+EXP SSLCertificateFile "C:/data/server/server.crt" SSLCertificateKeyFile "c:/data/server/server.key" SSLCertificateChainFile "c:/data/server/ca.crt" SSLCACertificateFile "c:/data/server/ca.crt"
And I generate the key/crts based on Apache's "SSL/TLS Strong Encryption: FAQ":
Generate CA key/cert:
openssl genrsa -out ca.key 1024 openssl req -new -x509 -nodes -sha1 -days 365 -key server.key -out ca.crt
Generate server key/cert:
openssl genrsa -out server.key 1024 openssl req -new -key server.key -out server.csr openssl x509 -req -days 365 -in server.csr -CA ca.crt -CAkey ca.key -set_serial 01 -out server.crt
I have been stuck on this for hours. Anyone know what I am missing? It seems to verify ok with
openssl verify -CAfile ca.crt server.crt