Comments on: CentOS / Redhat Apache mod_ssl Configuration

By: Henry Truong

Henry Truong — Thu, 13 Oct 2011 23:53:56 +0000

I got the same error too.
any one get this to work?

[root@vm6-swqa private]# openssl ca -in apachekey.csr -out apachecert.pem
Using configuration from /etc/pki/tls/openssl.cnf
Error opening CA private key ../../CA/private/cakey.pem
4525:error:02001002:system library:fopen:No such file or directory:bss_file.c:352:fopen(‘../../CA/private/cakey.pem’,'r’)
4525:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:354:
unable to load CA private key

Thanks

By: Subbu

Subbu — Mon, 03 Oct 2011 06:51:05 +0000

Same error as above

Unable to load CA private key

By: rinku

rinku — Tue, 02 Aug 2011 16:16:40 +0000

i am getting same error as above
$ openssl ca -in apachekey.csr -out apachecert.pem

Using configuration from /etc/pki/tls/openssl.cnf
Error opening CA private key /etc/pki/CA/private/cakey.pem
3075090140:error:02001002:system library:fopen:No such file or directory:bss_file.c:355:fopen(‘/etc/pki/CA/private/cakey.pem’,’r’)
3075090140:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:357:
unable to load CA private key

By: chris

chris — Mon, 04 Jul 2011 20:02:45 +0000

I am getting an error message when I type the following command
$ openssl ca -in apachekey.csr -out apachecert.pem

Using configuration from /etc/pki/tls/openssl.cnf
Error opening CA private key /etc/pki/CA/private/cakey.pem
3075090140:error:02001002:system library:fopen:No such file or directory:bss_file.c:355:fopen(‘/etc/pki/CA/private/cakey.pem’,'r’)
3075090140:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:357:
unable to load CA private key

By: StEwert

StEwert — Sat, 12 Feb 2011 13:41:02 +0000

If you don’t want to enter the passphrase for the cert key you must do following:

1. cd /etc/httpd/conf/ssl.key/
2. cp apachekey.pem apachekey.pem.cryp
3. openssl rsa -in apachekey.pem.cryp -out apachekey.pem
4. chmod go-rw apachekey.pem
5. rm apachekey.pem.cryp

But you must know that the private key of your certificate is then not protected by a password!

By: s

Tue, 26 Jan 2010 23:44:59 +0000

Very useful article! thanks!

BTW, there should be a “_” in the “HTTP_HOST” in this line from the example for httpd.conf
SSLRequire %{HTTP HOST} eq "www.nixcraft.com"

By: Stuart

Stuart — Wed, 20 Jan 2010 15:48:11 +0000

Great areical. Thanks for taking the time to write.

Stu

By: Otto

Otto — Wed, 23 Dec 2009 21:05:43 +0000

Excellent!! I tried this on CentOS 5.4 and it worked fine. Thank you a lot for posting this information.

Thank you!

By: anonymous

anonymous — Tue, 24 Nov 2009 14:13:50 +0000

This article is really helpful. Can you post article about kerberos+openldap+openafs or nfs4 with selinux enabled in CentOS.

By: kubrick

kubrick — Sat, 21 Nov 2009 11:49:13 +0000

I’ve found an article about mod_ssl for Debian systems.
I think it could be useful too.

http://www.debian-administration.org/articles/31

Cheers!