[CalendarServer-users] Fwd: [CalendarServer-dev] HTTPS-Problem

[Cyrille Colin]

Yes private key and cert are concated in one file tools is make-ssl-cert. Its a quick way to build a self-signed certificate couple.


----- Message d'origine -----
De: Georg Troska <georg.troska at uni-dortmund.de>
Env: mercredi 18 février 2009 23:27
À: Cyrille Colin <colin at univ-metz.fr>
Cc: calendarserver-users at lists.macosforge.org
Objet: Re: [CalendarServer-users] Fwd: [CalendarServer-dev] HTTPS-Problem

Hi,
Are you sure private and public keys are stored in the same file?

Georg
Am 18.02.2009 um 22:19 schrieb Cyrille Colin:

> hi,
> Self-signed certs works for me.
> I create it with
> createmake-ssl-cert /usr/share/ssl-cert/ssleay.cnf /calendar/certs/ 
> calendar.pem
> and set .plist :
>
>     <!-- Public key -->
>    <key>SSLCertificate</key>
>    <string>/calendar/certs/calendar.pem</string>
>
>    <!-- Private key -->
>    <key>SSLPrivateKey</key>
>    <string>/calendar/certs/calendar.pem</string>
>
> hope this help.
>
> On mer., 2009-02-18 at 21:18 +0100, Georg Troska wrote:
>> Hi,
>>
>>
>> ok maybe this is a better forum to ask this question
>>
>> Anfang der weitergeleiteten E-Mail:
>>
>>> Von: Georg Troska <georg.troska at uni-dortmund.de>
>>> Datum: 18. Februar 2009 15:08:13 MEZ
>>> An: calendarserver-dev at lists.macosforge.org
>>> Betreff: [CalendarServer-dev] HTTPS-Problem
>>>
>>>
>>> Hi,
>>>
>>> I have problems to get HTTPS running on the calendarserver.
>>> (Ubuntu-Intrepid)
>>> HTTP works fine now, but using HTTPS gives me an error-message in
>>> iCal:
>>>
>>> "The account inforation could not be found - Unexpected error at the
>>> secure name resoltion (Error -9813). The servername <name> is maybe
>>> incorrect "
>>>
>>> (This is translated from german)
>>>
>>> I'm sure that HTTPS is running as I can reach it in the Browser -
>>> authentication is running as well
>>>
>>> Thanks Georg
>>>
>>>
>>> _______________________________________________
>>> calendarserver-dev mailing list
>>> calendarserver-dev at lists.macosforge.org
>>> http://lists.macosforge.org/mailman/listinfo.cgi/calendarserver-dev
>>>
>>
>>
>> meanwhile I found out, that I have a logentry in /var/log/system.log
>> on my client:
>> ---
>> Feb 18 21:14:01 regulus iCal[97893]: SMA: -[DAVRequest(Private)
>> translateSSLError:]: { -9813 }
>> Feb 18 21:14:01 regulus iCal[97893]: [DAVRequest _readStreamEvent]:
>> SecTrustEvaluate failed.  Failing with error: (null)
>> ---
>>
>>
>> putting this into google made me a bit nervous when I read
>> this: http://www.zimbra.com/forums/administrators/16397-caldav-issue-leopard.html
>>
>>
>> is it true that iCal cannot handle "selfmade SSL-Certs"? How can I  
>> put
>> the cert on "always trust"?
>>
>>
>> I hope you can help. Thanks a lot
>> Georg
>>
>>
>>
>>
>>
>> _______________________________________________
>> calendarserver-users mailing list
>> calendarserver-users at lists.macosforge.org
>> http://lists.macosforge.org/mailman/listinfo.cgi/calendarserver-users
>

Georg Troska
Experimentelle Physik IV
TU Dortmund
+49 231 755 3501