[Mod_nss-list] OCSP trouble

Rob Crittenden rcritten at redhat.com
Thu May 2 14:07:16 UTC 2013


Sven Indie wrote:
> Hello again!
>
> I'm trying to turn on the OCSP function. Turned off, everything works as
> intended. When I try to turn it on however, I get these two lines in my
> apache error log:
>
> Unable to set OCSP default responder nickname signchain.
> SSL Library Error: -8174 Problem using certificate or key database"
>
> Anyone have a clue what's going wrong here?
> (Seems like I'm running into every possible problem.. =)

Does the certificate signchain exist in the mod_nss NSS database? Is 
that database readable by Apache?

rob




More information about the Mod_nss-list mailing list