Results 1 to 5 of 5
Thread: Apache Won't Start as a Service
-
08-15-2007, 02:48 PM #1Newbie
- Join Date
- Aug 2007
- Posts
- 13
Apache Won't Start as a Service
I just setup an instance of Apache on Windows with SSL and it starts by running "httpd.exe", but I can't get it to start as a service. It was running fine before adding the SSL certificate/key pair.
This is the error, I get as a Service:
[Wed Aug 15 11:22:09 2007] [info] mod_unique_id: using ip addr 10.254.1.135
[Wed Aug 15 11:22:10 2007] [info] Init: Seeding PRNG with 144 bytes of entropy
[Wed Aug 15 11:22:10 2007] [info] Loading certificate & private key of SSL-aware server
[Wed Aug 15 11:22:10 2007] [error] (OS 5)Access is denied. : Init: Can't open server certificate file C:/Apache2/conf/ssl/NBCDDSARP10.dev.npe.tic.cert
[Wed Aug 15 11:27:08 2007] [info] Init: Seeding PRNG with 144 bytes of entropy
[Wed Aug 15 11:27:08 2007] [info] Loading certificate & private key of SSL-aware server
[Wed Aug 15 11:27:08 2007] [info] Init: Generating temporary RSA private keys (512/1024 bits)
[Wed Aug 15 11:27:08 2007] [info] Init: Generating temporary DH parameters (512/1024 bits)
[Wed Aug 15 11:27:08 2007] [info] Init: Initializing (virtual) servers for SSL
[Wed Aug 15 11:27:08 2007] [info] Configuring server for SSL protocol
[Wed Aug 15 11:27:08 2007] [info] Server: Apache/2.2.4, Interface: mod_ssl/2.2.4, Library: OpenSSL/0.9.8e
Any help or insight is appreciated! Thanks in advance.
-
08-15-2007, 03:08 PM #2Newbie
- Join Date
- May 2004
- Posts
- 23
What user is the apache service set to run as? Does that user have access to read the cert/key file and to traverse the directories up to them?
-
08-15-2007, 05:02 PM #3Newbie
- Join Date
- Aug 2007
- Posts
- 13
It's set to run as the "Local System Account".... I'm not sure how to check if the account has access to read the cert/key file. Any guidance is appreciated.
-
08-16-2007, 12:50 AM #4Junior Guru Wannabe
- Join Date
- Jun 2007
- Posts
- 30
Check if the cert and key matches by executin the following command:
openssl s_server -cert <cert path> -key <key path>
If yes, you will see something like "ACCEPT...."Maestria Information Systems Pvt. Ltd.
Email: reachus@maestriatech.com
MSN : maestriatech@hotmail.com
-
08-17-2007, 01:34 PM #5Newbie
- Join Date
- Aug 2007
- Posts
- 13
The Certificate and Key Pair Matched:
Loading 'screen' into random state - done
Using default temp DH parameters
Using default temp ECDH parameters
ACCEPT
Not sure... why it won't start as a service.