error Unable to configure verify locations for client authenticationHow to inspect remote SMTP server's TLS certificate?Java Deployment Ruleset.xml Not WorkingHAProxy - ssl client ca chain cannot be verifiedConfiguring client certificates on IIS8 - Error 403.16Windows Firewall Connection Security with Certificate (2)Unable to sign certificates as CA using pkitool and easy-rsa script for OpenVPN .csr fileNginx gives “unsupported certificate purpose” for a client certificate from an iPad, but the same cert works fine on desktop browsers?Can't Get Any Browser to Prompt for A Client Certificate (Certificates on Apache)Configure NLA to not use client-side credentials checkIIS 10 ARR : Client certificate not interpreted by backend server
What did Varys actually mean?
Crime rates in a post-scarcity economy
shebang or not shebang
Which "exotic salt" can lower water's freezing point by 70 °C?
Good introductory book to type theory?
Appropriate age to involve kids in life changing decisions
Clauses with 3 infinitives at the end
And now you see it
In a series of books, what happens after the coming of age?
Why can’t you see at the start of the Big Bang?
What is the meaning of "matter" in physics?
Why was Gemini VIII terminated after recovering from the OAMS thruster failure?
Convert Numbers To Emoji Math
Why is there a cap on 401k contributions?
An adjective or a noun to describe a very small apartment / house etc
Average of samples in a period of time
Scaling rounded rectangles in Illustrator
GitLab account hacked and repo wiped
Where do 5 or more U.S. counties meet in a single point?
Why doesn't a particle exert force on itself?
How to make a kid's bike easier to pedal
How to increase speed on my hybrid bike with flat handlebars and 700X35C tyres?
What detail can Hubble see on Mars?
Why did Dr. Strange keep looking into the future after the snap?
error Unable to configure verify locations for client authentication
How to inspect remote SMTP server's TLS certificate?Java Deployment Ruleset.xml Not WorkingHAProxy - ssl client ca chain cannot be verifiedConfiguring client certificates on IIS8 - Error 403.16Windows Firewall Connection Security with Certificate (2)Unable to sign certificates as CA using pkitool and easy-rsa script for OpenVPN .csr fileNginx gives “unsupported certificate purpose” for a client certificate from an iPad, but the same cert works fine on desktop browsers?Can't Get Any Browser to Prompt for A Client Certificate (Certificates on Apache)Configure NLA to not use client-side credentials checkIIS 10 ARR : Client certificate not interpreted by backend server
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
Starting my apache2 Server on Ubuntu 12.04.5 LTS, I got the following error
[error] Unable to configure verify locations for client authentication
my Problem, on the server are more than one Client.
so the question would be how to find out which client cert is doing a problem?
As described on the Internet I excluded (on some client) the file calling up the cert but then the Apache2 Server said no valid cert and cert are needed.
at least would be nice if apache would start, also without cert. ;-)
have a nice day
Vinc
certificate
asked Jan 21 '15 at 6:48
syswombatsyswombat
611
add a comment |
Starting my apache2 Server on Ubuntu 12.04.5 LTS, I got the following error
[error] Unable to configure verify locations for client authentication
my Problem, on the server are more than one Client.
so the question would be how to find out which client cert is doing a problem?
As described on the Internet I excluded (on some client) the file calling up the cert but then the Apache2 Server said no valid cert and cert are needed.
at least would be nice if apache would start, also without cert. ;-)
have a nice day
Vinc
certificate
asked Jan 21 '15 at 6:48
syswombatsyswombat
611
any idea where to look?
– syswombat
Jan 26 '15 at 11:51
any idea how to solve this problem?
– syswombat
Jan 28 '15 at 21:40
add a comment |
Starting my apache2 Server on Ubuntu 12.04.5 LTS, I got the following error
[error] Unable to configure verify locations for client authentication
my Problem, on the server are more than one Client.
so the question would be how to find out which client cert is doing a problem?
As described on the Internet I excluded (on some client) the file calling up the cert but then the Apache2 Server said no valid cert and cert are needed.
at least would be nice if apache would start, also without cert. ;-)
have a nice day
Vinc
certificate
asked Jan 21 '15 at 6:48
syswombatsyswombat
611
Starting my apache2 Server on Ubuntu 12.04.5 LTS, I got the following error
[error] Unable to configure verify locations for client authentication
my Problem, on the server are more than one Client.
so the question would be how to find out which client cert is doing a problem?
As described on the Internet I excluded (on some client) the file calling up the cert but then the Apache2 Server said no valid cert and cert are needed.
at least would be nice if apache would start, also without cert. ;-)
have a nice day
Vinc
certificate
certificate
asked Jan 21 '15 at 6:48
syswombatsyswombat
611
asked Jan 21 '15 at 6:48
syswombatsyswombat
611
asked Jan 21 '15 at 6:48
syswombatsyswombat
611
asked Jan 21 '15 at 6:48
syswombatsyswombat
611
asked Jan 21 '15 at 6:48
syswombatsyswombat
611
611
any idea where to look?
– syswombat
Jan 26 '15 at 11:51
any idea how to solve this problem?
– syswombat
Jan 28 '15 at 21:40
add a comment |
any idea where to look?
– syswombat
Jan 26 '15 at 11:51
any idea how to solve this problem?
– syswombat
Jan 28 '15 at 21:40
any idea where to look?
– syswombat
Jan 26 '15 at 11:51
any idea where to look?
– syswombat
Jan 26 '15 at 11:51
any idea how to solve this problem?
– syswombat
Jan 28 '15 at 21:40
any idea how to solve this problem?
– syswombat
Jan 28 '15 at 21:40
add a comment |
1 Answer
1
active
oldest
votes
Check your certs are in .pem format (which is ASCII text) not .der format (which is binary). I mean actually open them and look at them, don't just look at the extensions.
The error you mention most often has to do with the SSLCertificateChainFile or the SSLCACertificateFile being unable to be read and parsed.
Source: http://docstore.mik.ua/orelly/weblinux2/apache/ch11_10.htm
answered Oct 16 '15 at 14:37
Philippe ChaintreuilPhilippe Chaintreuil
1366
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f661137%2ferror-unable-to-configure-verify-locations-for-client-authentication%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
Check your certs are in .pem format (which is ASCII text) not .der format (which is binary). I mean actually open them and look at them, don't just look at the extensions.
The error you mention most often has to do with the SSLCertificateChainFile or the SSLCACertificateFile being unable to be read and parsed.
Source: http://docstore.mik.ua/orelly/weblinux2/apache/ch11_10.htm
answered Oct 16 '15 at 14:37
Philippe ChaintreuilPhilippe Chaintreuil
1366
add a comment |
Check your certs are in .pem format (which is ASCII text) not .der format (which is binary). I mean actually open them and look at them, don't just look at the extensions.
The error you mention most often has to do with the SSLCertificateChainFile or the SSLCACertificateFile being unable to be read and parsed.
Source: http://docstore.mik.ua/orelly/weblinux2/apache/ch11_10.htm
answered Oct 16 '15 at 14:37
Philippe ChaintreuilPhilippe Chaintreuil
1366
add a comment |
Check your certs are in .pem format (which is ASCII text) not .der format (which is binary). I mean actually open them and look at them, don't just look at the extensions.
The error you mention most often has to do with the SSLCertificateChainFile or the SSLCACertificateFile being unable to be read and parsed.
Source: http://docstore.mik.ua/orelly/weblinux2/apache/ch11_10.htm
answered Oct 16 '15 at 14:37
Philippe ChaintreuilPhilippe Chaintreuil
1366
Check your certs are in .pem format (which is ASCII text) not .der format (which is binary). I mean actually open them and look at them, don't just look at the extensions.
The error you mention most often has to do with the SSLCertificateChainFile or the SSLCACertificateFile being unable to be read and parsed.
Source: http://docstore.mik.ua/orelly/weblinux2/apache/ch11_10.htm
answered Oct 16 '15 at 14:37
Philippe ChaintreuilPhilippe Chaintreuil
1366
answered Oct 16 '15 at 14:37
Philippe ChaintreuilPhilippe Chaintreuil
1366
answered Oct 16 '15 at 14:37
Philippe ChaintreuilPhilippe Chaintreuil
1366
answered Oct 16 '15 at 14:37
Philippe ChaintreuilPhilippe Chaintreuil
1366
1366
add a comment |
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f661137%2ferror-unable-to-configure-verify-locations-for-client-authentication%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
any idea where to look?
– syswombat
Jan 26 '15 at 11:51
any idea how to solve this problem?
– syswombat
Jan 28 '15 at 21:40