ssl onceonlyinit problem

[Philip M. Gollucci]

David Southwell wrote:
> Hi
> 
> NOt used to this one.
> 
> Can anyone tell me how to fix this error?
> 
> [Wed Oct 07 16:03:17 2009] [warn] RSA server certificate is a CA certificate 
> (BasicConstraints: CA == TRUE !?)
> [Wed Oct 07 16:03:18 2009] [warn] RSA server certificate is a CA certificate 
> (BasicConstraints: CA == TRUE !?)
> /libexec/ld-elf.so.1: /usr/local/lib/php/20060613/imap.so: Undefined symbol 
> "ssl_onceonlyinit"

This is actually a common one, but I forget what causes it off the top 
of my head. Some things to check, I'm sure google will know this one.

1) Do you have the following configs -- at the vhost level ?
### SSL (PCI-compliant)
SSLEngine  On
# SSLProxyEngine on

SSLProtocol -ALL +SSLv3 +TLSv1
SSLCipherSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP

<IfDefine VERISIGN>
     SSLCACertificateFile %%CERTS%%/vs_intermediate_bundle.crt
</IfDefine>
<IfDefine GODADDY>
     SSLCertificateChainFile %%CERTS%%/gd_intermediate_bundle.crt
</IfDefine>


SSLCertificateFile      %%CERTS%%/%%H%%.crt
SSLCertificateKeyFile   %%CERTS%%/%%H%%.key

2) httpd -l |grep ssl
its there

3) you started the server with -DSSL if you used the <IfDefine SSL>


4) the key files exist, are readable, don't have ^Ms in them

5) you're using http 2.2.1[34]

6) The certificates are not expired




-- 
------------------------------------------------------------------------
1024D/DB9B8C1C B90B FBC3 A3A1 C71A 8E70  3F8C 75B8 8FFB DB9B 8C1C
Philip M. Gollucci (pgollucci at p6m7g8.com) c: 703.336.9354
Consultant          - P6M7G8 Inc.                http://p6m7g8.net
Senior Sys Admin    - RideCharge, Inc.           http://ridecharge.com
ASF Member          - Apache Software Foundation http://apache.org
FreeBSD Committer   - FreeBSD Foundation         http://freebsd.org

Work like you don't need the money,
love like you'll never get hurt,
and dance like nobody's watching.