ssl/tls https with red cross

tariq wali ganaiwali at gmail.com
Fri Jun 1 14:17:17 UTC 2012


can anyone please tell why this error on my nginx instance with ssl/tls

 2012/06/01 10:06:12 [emerg] 20286#0:
SSL_CTX_use_PrivateKey_file("/usr/local/nginx/conf/login.jobsgulf.com.key")
failed (SSL: error:0906406D:PEM routines:PEM_def_callback:problems getting
password error:0906A068:PEM routines:PEM_do_header:bad password read
error:140B0009:SSL routines:SSL_CTX_use_PrivateKey_file:PEM lib)

2012/06/01 10:06:20 [emerg] 866#0:
SSL_CTX_use_PrivateKey_file("/usr/local/nginx/conf/login.jobsgulf.com.key")
failed (SSL: error:06065064:digital envelope
routines:EVP_DecryptFinal_ex:bad decrypt error:0906A065:PEM
routines:PEM_do_header:bad decrypt error:140B0009:SSL
routines:SSL_CTX_use_PrivateKey_file:PEM lib)




On Wed, May 30, 2012 at 3:44 PM, tariq wali <ganaiwali at gmail.com> wrote:

> Hi,
>
> Looking to get some help from the group .
>
> We are running nginx/0.7.62 and notice that https with red-cross (either
> the connection is not encrypted or the page has some non https content and
> in my case it is no encrypted connection ) this is how thw config looks
>
>
>  server {
>         listen       443;
>         server_name  login.jobsgulf.com;
>         access_log on;
>         ssl on;
>         ssl_certificate login.jobsgulf.com.crt;
>         ssl_certificate_key login.jobsgulf.com.key;
>         ssl_protocols        SSLv3 TLSv1 ;
> #        ssl_ciphers          HIGH:!aNULL:!MD5;
>         ssl_ciphers
>  ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
>         keepalive_timeout    60;
>        ssl_session_cache    shared:SSL:10m;
>        ssl_session_timeout  10m;
>
> I want to know if we really have to explicitly specify ssl_protocols and
> ssl_ciphers in the config in order to be fully https for the said directive
> ??
>
> Also does it make sense to enable ssl/tls support on apache also ? in my
> case i have nginx in front of the apache .
>
>
>
>
> --
> *Tariq Wali.*
>
>


-- 
*Tariq Wali.*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nginx.org/pipermail/nginx/attachments/20120601/2ca29c7a/attachment.html>


More information about the nginx mailing list