Certificate generation still unclear (probably my stupid).
I've been trying to create new versions of the three files, ca.pem, dh1024.pem and server.pem.

# openssl dsaparam -out dh1024.pem 1024

Then I followed the HowTo (-newca, -newreq, -sign and unencrypt to make newkey.pem)

I pasted newreq.pem's certificate and newkey.pem's rsa key into server.pem, copied cacert.pem to ca.pem and moved the three files, ca.pem dh1024.pem and server.pem to the ssl directory.

I keep blowing up in Context.py on line 86:
m2.ssl_ctx_use_cert_chain(self.ctx, certchainfile)
when accessing server.pem

Would you please consider and Idiot Proof update of the HowTo specifically oriented to the ZServerSSL files?

Sean,

Please send me a mail containing the error message you get. The CA HOWTO was written about 2-3 years ago - probably M2Crypto API changes since then have broken it.

Thanks.

Hi,

I've been trying to install the https server in Zope, following your INSTALL.TXT ( ZServerSSL for Zope 2.7.0b2), but it wasn't working, until i tried to replace the with , in the following section:


-----------------------

The following files are to be copied to the corresponding directories
in your :

- install_dir/lib/python/ZServer/HTTPS_Server.py
..................... more instructions .................


In my case it worked, so I don't know if you want to update your INSTALL.TXT or it only happens with my case.

My software versions:
Zope 2.7.5-final,
python 2.3.4,
linux2 (mandrake 10.1)

Let me know if you need any more info.

Thanks for your efforts!

For some reason the previous post didn't include the change because of the "For some reason the previous post didn't include the change because of the "

problems with tags
another try;

install_dir ---> instance_home

COREBlog eats up some of my text too. Sorry about that.

Hi,

How m2crypto0.13 not work for python 2.3.5 and and SWIG 1.3.24. I tried to fixed this.

Well, now a think to this is fine.
It works with:
Python 2.3.5
SWIG 1.3.24
OpenSSL0.9.7g
Zope2.7.4

You can download this version on:
http://amc.sytes.net/alejandro/m2crypto.13.tgz

I am happy with this tool. Tanks for developed this tools. ;)

Is it possible to use this version with Zope 2.6.4
on Windows - or what is the appropriate version
of MCrypto?

Trying to uprev a "legacy" application, still sitting
on Zope 2.6.1. We may have to move to Zope 2.7.x,
but the customer may balk at further "expenses" :)

Thank you!

Alejandro, thanks.

Mark, this version should be useable with Zope 2.6.4. Check out the ZServerSSL howto, which is for Zope 2.6.x; I never found the time to update it for Zope 2.7.x.

HTH.

I tried to setup M2Crypto with Zope 2.7.3 following the included instructions, but I have two problems:

- SSL.Context._ctxmap gets a 'PySwigObject' as a dictionary key, but Python complains about being a mutable object. Using id(key) in all three places appears to work fine.

- HTTPS works fine when Zope is started as a console application, but aborts with the following error when it's installed as a service:

File "C:\sl\ZOPE\ZOPESERVER\BIN\lib\site-packages\M2Crypto\SSL\Context.py", line 108, in load_cert_chain

    m2.ssl_ctx_use_cert_chain(self.ctx, certchainfile)

M2Crypto.SSL.SSLError: No such process

I don't know which process it refers to :( And unfortunately the error only arises when Zope is started as a service. (Using WinXP Pro SP2)
Any hint is appreciated...