SSLCACertificatePath: directory does not exist

Help
54

@MikeMcQ & @rg305 I come back to tell that I have identified the problem (I think) :thinking:
Into the main config files I called the optional conf.d/files.conf at the begining. But, as mentioned here https://httpd.apache.org/docs/2.4/sections.html the order of parsing instructions, directives, etc..., indeed files included is important.

So I had rewritten totally the http.conf file and now everything works. Or almost I just have an error

TLSv1.3 (IN), TLS alert, unknown (628):

  • OpenSSL SSL_read: error:1409445C:SSL routines:ssl3_read_bytes:tlsv13 alert certificate required, errno 0
  • Closing connection 0
    curl: (56) OpenSSL SSL_read: error:1409445C:SSL routines:ssl3_read_bytes:tlsv13 alert certificate required, errno 0

But at least with curl I see the port 443 opened and handshakes works :

 successfully set certificate verify locations:
*  CAfile: /etc/ssl/certs/ca-certificates.crt
*  CApath: /etc/ssl/certs
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Request CERT (13):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
* TLSv1.3 (IN), TLS handshake, Finished (20):
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.3 (OUT), TLS handshake, Certificate (11):
* TLSv1.3 (OUT), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN, server accepted to use http/1.1
* Server certificate:
*  subject: CN=www.nuage.dennet.eu
*  start date: Feb 22 12:36:52 2023 GMT
*  expire date: May 23 12:36:51 2023 GMT
*  subjectAltName: host "nuage.dennet.eu" matched cert's "nuage.dennet.eu"
*  issuer: C=US; O=Let's Encrypt; CN=R3
*  SSL certificate verify ok.
> GET / HTTP/1.1
> Host: nuage.dennet.eu
> User-Agent: curl/7.74.0
> Accept: */*

It should not be a big issue now. I'll find it :smiley:

1 Like