Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm attempting to configure Puppet to run via Passenger. I'm using this guide

I've hit a bit of a brick wall. When I attempt to reload apache, I get the following error:

[Sun Jul 15 19:38:44 2012] [error] Init: Unable to read server certificate from file /var/lib/puppet/ssl/private_keys/
[Sun Jul 15 19:38:44 2012] [error] SSL Library Error: 218529960 error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
[Sun Jul 15 19:38:44 2012] [error] SSL Library Error: 218595386 error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error

Currently I ave the following options in the conf file

SSLEngine on

The path is correct, and the certificate is there. When I run Puppet via the inbuilt webrick it runs okay.

Any pointers? Thanks

share|improve this question
Can you provide the SSL config that you've set in Apache? – Shane Madden Jul 15 '12 at 19:25
SSLEngine on SSLCipherSuite SSLv2:-LOW:-EXPORT:RC4+RSA – Mister IT Guru Jul 15 '12 at 19:38
Edit your question to include the additional information - it doesn't fit well or format well in a comment. – Shane Madden Jul 15 '12 at 19:39
Does the user which Apache runs as have read access to the certificate? – mgorven Jul 15 '12 at 20:57
up vote 0 down vote accepted

Have you double checked the paths tot he certificates? It could be possible that your backups contained the wrong paths

share|improve this answer
DAMN! I've been working on old config files - updated the paths, and all working fine! – Mister IT Guru Jul 15 '12 at 21:21

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.