Virtual Hosting Problem

2002-07-27 Thread Jay States


I have tried to configure a port-based virtual hosts with the following 
ports:

443
444
445
446
447

Is there a better how-to than on the apache site?  I'm using apache 
2.0.39 and would like to see an example.  I follow the text and keep 
getting the same error message.  Keep in mind that port is not used by 
anything other than apache.

(48)Address already in use: make_sock: could not bind to address [::]:447
no listening sockets available, shutting down

Thanks in advance.

J
__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



Possibility of no keying phrase keys?

2002-07-27 Thread David F. Reed

Dear SSL experts and aficionados and RH gurus,

I am hoping someone out there has a piece of arcane (to me)
knowledge...

(Running RH-7.3,  apache-1.3.23-14, openssl-0.9.6b-18)

I note that during reboot (a rare event), some one trusted
has to be around to manually key in the pass phrase to the
server.key file - sometimes it waits for this, and sometimes not;
in either case, unattended, the httpd sits around waiting to start.

(I learned this the other day when a power outage convinced
my system to shut down, and it restarted when power resumed).

So my question is, is there a way to generate a key that does not
look for a pass phrase, or automagically pipe the contents of some
file, or some such work around, so that unattended, it can
come up and function as a server?

Any discussion of experience would be helpful

Many thanks.

--Dave

David F. Reed  - email: [EMAIL PROTECTED]
(for pgp key: [EMAIL PROTECTED] http://keys.pgp.com/ )
 

__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



RE: http to https forward

2002-07-27 Thread a . moon

I am away from the office until the Monday 5th August 2002 

I will get back to you as soon as i can on my return.

If it's an urgent Online Learning Support Unit / Web/ MUBSWEB/ MUBS Online matter
that requires urgent attention then  please contact either  Sanjay1 or Jeff1
who should be able to help.

All the best 
Alex
__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



Re: Possibility of no keying phrase keys?

2002-07-27 Thread Jack L. Stone

At 10:57 PM 7.26.2002 -0500, David F. Reed wrote:
Dear SSL experts and aficionados and RH gurus,

I am hoping someone out there has a piece of arcane (to me)
knowledge...

(Running RH-7.3,  apache-1.3.23-14, openssl-0.9.6b-18)

I note that during reboot (a rare event), some one trusted
has to be around to manually key in the pass phrase to the
server.key file - sometimes it waits for this, and sometimes not;
in either case, unattended, the httpd sits around waiting to start.

(I learned this the other day when a power outage convinced
my system to shut down, and it restarted when power resumed).

So my question is, is there a way to generate a key that does not
look for a pass phrase, or automagically pipe the contents of some
file, or some such work around, so that unattended, it can
come up and function as a server?

Any discussion of experience would be helpful

Many thanks.

--Dave


Not sure what OS you have, but I run FBSD and this is the method I use to
solve that:
To decrypt the Key:

First make a copy of the encrypted key

# cp server.key server.key.cryp
 
Then re-write the key with encryption. You will be prompted for the
original encrypted Key passphrase

# /usr/bin/openssl rsa -in server.key.cryp -out server.key
read RSA key
Enter PEM pass phrase:
writing RSA key
 
One way to secure the decrypted Private Key is to make readable only by the
root: 
# chmod 400 server.key

Best regards,
Jack L. Stone,
Administrator

Sage American
http://www.sage-american.com
[EMAIL PROTECTED]
__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



Re: Possibility of no keying phrase keys?

2002-07-27 Thread Jack L. Stone

At 10:57 PM 7.26.2002 -0500, David F. Reed wrote:
Dear SSL experts and aficionados and RH gurus,

I am hoping someone out there has a piece of arcane (to me)
knowledge...

(Running RH-7.3,  apache-1.3.23-14, openssl-0.9.6b-18)

I note that during reboot (a rare event), some one trusted
has to be around to manually key in the pass phrase to the
server.key file - sometimes it waits for this, and sometimes not;
in either case, unattended, the httpd sits around waiting to start.

(I learned this the other day when a power outage convinced
my system to shut down, and it restarted when power resumed).

So my question is, is there a way to generate a key that does not
look for a pass phrase, or automagically pipe the contents of some
file, or some such work around, so that unattended, it can
come up and function as a server?

Any discussion of experience would be helpful

Many thanks.

--Dave

oops! It's still early here and no coffee. I see now that you run
Linux, so the paths will be different, but perhaps the commands will
work. Not familiar with Linux

Best regards,
Jack L. Stone,
Administrator

Sage American
http://www.sage-american.com
[EMAIL PROTECTED]
__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



Re: Possibility of no keying phrase keys?

2002-07-27 Thread Geoff Thorpe

Hi,

On Fri, 26 Jul 2002, David F. Reed wrote:

[snip]

 I note that during reboot (a rare event), some one trusted
 has to be around to manually key in the pass phrase to the
 server.key file - sometimes it waits for this, and sometimes not;
 in either case, unattended, the httpd sits around waiting to start.

http://www.openssl.org/support/faq.html#USER9

Cheers,
Geoff

-- 
Geoff Thorpe
[EMAIL PROTECTED]


__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



Re: Possibility of no keying phrase keys?

2002-07-27 Thread David F. Reed

Many thanks Jack!

worked like a charm.

--Dave

Jack L. Stone wrote:

At 10:57 PM 7.26.2002 -0500, David F. Reed wrote:

Dear SSL experts and aficionados and RH gurus,

I am hoping someone out there has a piece of arcane (to me)
knowledge...

(Running RH-7.3,  apache-1.3.23-14, openssl-0.9.6b-18)

I note that during reboot (a rare event), some one trusted
has to be around to manually key in the pass phrase to the
server.key file - sometimes it waits for this, and sometimes not;
in either case, unattended, the httpd sits around waiting to start.

(I learned this the other day when a power outage convinced
my system to shut down, and it restarted when power resumed).

So my question is, is there a way to generate a key that does not
look for a pass phrase, or automagically pipe the contents of some
file, or some such work around, so that unattended, it can
come up and function as a server?

Any discussion of experience would be helpful

Many thanks.

--Dave


Not sure what OS you have, but I run FBSD and this is the method I use to
solve that:
To decrypt the Key:

First make a copy of the encrypted key

# cp server.key server.key.cryp
 
Then re-write the key with encryption. You will be prompted for the
original encrypted Key passphrase

# /usr/bin/openssl rsa -in server.key.cryp -out server.key
read RSA key
Enter PEM pass phrase:
writing RSA key
 
One way to secure the decrypted Private Key is to make readable only by the
root: 
# chmod 400 server.key

Best regards,
Jack L. Stone,
Administrator

Sage American
http://www.sage-american.com
[EMAIL PROTECTED]
__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]


-- 
David F. Reed  - email: [EMAIL PROTECTED]
(for pgp key: [EMAIL PROTECTED] http://keys.pgp.com/ )
 


__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]