Re: Crypto Export restrictions (was: Apache_1.3.26-Mod_SSL_2.8.10-OpenSSL_0.9.6g-Win32.zip)

2002-09-26 Thread Ken Campney

Chris,

I've downloaded your files just to make sure I have them.

Do you think .tgz files will be needed or are the access for those a
little better than the Win32 files?

When everything is set, I'll give you the link/links to the files.

As a secondary thought, I suppose I could just set you up with an ftp
account to upload files as needed.

Ken
- Original Message -
From: hunter [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, September 26, 2002 1:48 AM
Subject: Re: Crypto Export restrictions (was:
Apache_1.3.26-Mod_SSL_2.8.10-OpenSSL_0.9.6g-Win32.zip)


 Ken Campney wrote:
  ERRR.
 
  Do I have the right file name?? lol
 
  What ever the file name/names in need of a depot is, I'm assuming it was
  Apache_1.3.26-Mod_SSL_2.8.10-OpenSSL_0.9.6g-Win32.zip
 
  Ken
  - Original Message -
  From: Ken Campney [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Sent: Wednesday, September 25, 2002 10:42 PM
  Subject: Re: Crypto Export restrictions (was:
  Apache_1.3.26-Mod_SSL_2.8.10-OpenSSL_0.9.6g-Win32.zip)
 
 
 Ken,

 I copied the filename conventions from the previous versions ... looked
 at them to see what they contain, so as to remain consistent.  A large
 number of people still want to use the Apache 1.3.26, with fixed OpenSSL
 - I am using Apache 2.0.40 (soon to move to 2.0.42).  I can make any
 version, but this is the most popular right now.  OpenSA has a nice
 distribution, but I have not checked to see what rev's they are at.

 Apache_1.3.26-Mod_SSL_2.8.10-OpenSSL_0.9.6g-Win32.zip
 - contains Apache 1.3.26 and Mod_SSL 2.8.10, binaries built with OpenSSL
 libs, etc.

 Openssl-0.9.6g-Win32.zip
 - contains only OpenSSL binaries

 The parts are not so well integrated as they are with Apache 2.0.42.


 Apache_2.0.42-OpenSSL_0.9.6g-Win32.zip

 - contains all 3 parts
 - Mod_SSL is built into Apache 2 and the make like to put the OpenSSL
 binaries into the Apache/bin directory.


 Actual urls...


http://tor.ath.cx/~hunter/apache/Apache_1.3.26-Mod_SSL_2.8.10-OpenSSL_0.9.6g
-Win32.zip
 http://tor.ath.cx/~hunter/apache/Openssl-0.9.6g-Win32.zip

 http://tor.ath.cx/~hunter/apache/Apache_2.0.42-OpenSSL_0.9.6g-Win32.zip



 I hope I did not misunderstood what you wanted ... (I talk too much)

 Chris.

 __
 Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
 User Support Mailing List  [EMAIL PROTECTED]
 Automated List Manager[EMAIL PROTECTED]


__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



Re: Crypto Export restrictions (was: Apache_1.3.26-Mod_SSL_2.8.10-OpenSSL_0.9.6g-Win32.zip)

2002-09-26 Thread hunter

Ken Campney wrote:
 Chris,
 
 I've downloaded your files just to make sure I have them.
 
 Do you think .tgz files will be needed or are the access for those a
 little better than the Win32 files?
 
 When everything is set, I'll give you the link/links to the files.
 
 As a secondary thought, I suppose I could just set you up with an ftp
 account to upload files as needed.
 
 Ken
 - Original Message -
 From: hunter [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Thursday, September 26, 2002 1:48 AM
 Subject: Re: Crypto Export restrictions (was:
 Apache_1.3.26-Mod_SSL_2.8.10-OpenSSL_0.9.6g-Win32.zip)
 
 
 
Ken Campney wrote:

ERRR.

Do I have the right file name?? lol

What ever the file name/names in need of a depot is, I'm assuming it was
Apache_1.3.26-Mod_SSL_2.8.10-OpenSSL_0.9.6g-Win32.zip

Ken
- Original Message -
From: Ken Campney [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, September 25, 2002 10:42 PM
Subject: Re: Crypto Export restrictions (was:
Apache_1.3.26-Mod_SSL_2.8.10-OpenSSL_0.9.6g-Win32.zip)



Ken,

I copied the filename conventions from the previous versions ... looked
at them to see what they contain, so as to remain consistent.  A large
number of people still want to use the Apache 1.3.26, with fixed OpenSSL
- I am using Apache 2.0.40 (soon to move to 2.0.42).  I can make any
version, but this is the most popular right now.  OpenSA has a nice
distribution, but I have not checked to see what rev's they are at.

Apache_1.3.26-Mod_SSL_2.8.10-OpenSSL_0.9.6g-Win32.zip
- contains Apache 1.3.26 and Mod_SSL 2.8.10, binaries built with OpenSSL
libs, etc.

Openssl-0.9.6g-Win32.zip
- contains only OpenSSL binaries

The parts are not so well integrated as they are with Apache 2.0.42.


Apache_2.0.42-OpenSSL_0.9.6g-Win32.zip

- contains all 3 parts
- Mod_SSL is built into Apache 2 and the make like to put the OpenSSL
binaries into the Apache/bin directory.


Actual urls...


 
 http://tor.ath.cx/~hunter/apache/Apache_1.3.26-Mod_SSL_2.8.10-OpenSSL_0.9.6g
 -Win32.zip
 
http://tor.ath.cx/~hunter/apache/Openssl-0.9.6g-Win32.zip

http://tor.ath.cx/~hunter/apache/Apache_2.0.42-OpenSSL_0.9.6g-Win32.zip



I hope I did not misunderstood what you wanted ... (I talk too much)

Chris.

__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]

 
 
 __
 Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
 User Support Mailing List  [EMAIL PROTECTED]
 Automated List Manager[EMAIL PROTECTED]
 

Ken,

The sources are always easy to get, at least from my experience.  The 
problem lies in the fact that Windows machines do not have a compiler.
I am on the lists, so I know when people are looking for a new build 
(security alert for example).  It does not take me long to buld the code.

Te most common problem for anyone trying to build the code is to get the 
build machine set up properly; I plan to address this soon, with a 
How-To doc.

It makes the most sense to have ftp access, I guess. But, that can go 
either way.  I can also provide you with an ftp account on my server as 
well.  It is more expedient for me to make the code and put it on your 
server.

It mitgates some of the risks of using the code, by restricting who has 
write access to it.  I generally warn people that I did not build a 
properly configured server with the older builds and leave it up to them 
to test it.  I will respond to problems caused by a bad build.  The new 
code, I am using (testing) and know first hand if I mess up the build. 
Generally though, once you get the build working it is reliable -- I 
don't have to code anything afterall ... just follow instructions.

My personal email account is [EMAIL PROTECTED]

If you hit my index.html on tor.ath.cx you will get a 'new install page' 
for IIS ... my idea of humor ... my server is for friends and they know 
enough to look for an 'easter egg' - click the Icon.

My internet server is a Linux box, I build and use the Windows code for 
my employer, where I manage more than 20,000 installations of Apache. 


I will touch bases with you later.  Thanks again.

Chris.

__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



Re: Crypto Export restrictions (was: Apache_1.3.26-Mod_SSL_2.8.10-OpenSSL_0.9.6g-Win32.zip)

2002-09-26 Thread Ken Campney

To everybody following this discussion, I have located the following :)

This information was obtained from
http://www.bis.doc.gov/Encryption/EncFAQs6_17_02.html#6

When is a review request or notification NOT required?

No review or notification is required to export any encryption item to
overseas subsidiaries of U.S. companies (except subsidiaries in Cuba, Iran,
Iraq, Libya, North Korea, Sudan and Syria - this includes exports and
reexports, as defined by Section 734.2 of the EAR, of encryption source
code and technology to foreign nationals of these countries) for internal
company use, including the development of new products. Likewise, no review
or notification is required for encryption items with limited cryptographic
capabilities described in the Technical and Related Control notes under ECCN
5A002 of Category 5, Part 2 (Information Security) of the Commerce Control
List (Supplement No. 1 to Part 774 of the EAR), such as authentication,
access control, digital signature, copy protection, banking use or money
transactions

__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



Crypto Export restrictions (was: Apache_1.3.26-Mod_SSL_2.8.10-OpenSSL_0.9.6g-Win32.zip)

2002-09-25 Thread Marco A. Zamora Cunningham

Cliff Wooley:
 But there's a reason we can't distribute crypto 
 binaries from apache.org --  if we could, we 
 would.  Guess we wait for Ralf to check up on 
 the contrib area.

Correct me if I'm wrong, but I thought that ITAR restrictions eased up about
a year ago, so OpenSSL strong crypto can now be exported with no problems
*except* to specially targeted countries like Iraq. Case in point: MSIE 6
includes strong SSL (buggy but strong) and you can download it off
microsoft.com with no restrictions. I vaguely remember downloading a strong
crypto Mozilla or Opera or something like that some months ago by just
filling in a form saying that I'm not a terrorist and I don't live in Cuba,
Iraq or such.

¿Is there anybody here on the cypherpunk lists who can clarify?

MZ
__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



Re: Crypto Export restrictions (was: Apache_1.3.26-Mod_SSL_2.8.10-OpenSSL_0.9.6g-Win32.zip)

2002-09-25 Thread Ken C

You are correct in that statement.

How ever I'm still trying to clerify a few little potential snaggs.

From what I've seen a permit may be required, for export / downloads to
non-US locations. Hosting servers may need to have the ability to deny
downloads to locations that shouldn't have it. (don't ask me, I'm just
reading this stuff)

While it has relaxed, it still appears to be full of red tape.

If anyone else is checking on this, let me know if you find any documention
that makes sense :-/

- Original Message -
From: Marco A. Zamora Cunningham [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, September 25, 2002 11:48 AM
Subject: Crypto Export restrictions (was:
Apache_1.3.26-Mod_SSL_2.8.10-OpenSSL_0.9.6g-Win32.zip)


 Cliff Wooley:
  But there's a reason we can't distribute crypto
  binaries from apache.org --  if we could, we
  would.  Guess we wait for Ralf to check up on
  the contrib area.

 Correct me if I'm wrong, but I thought that ITAR restrictions eased up
about
 a year ago, so OpenSSL strong crypto can now be exported with no problems
 *except* to specially targeted countries like Iraq. Case in point: MSIE 6
 includes strong SSL (buggy but strong) and you can download it off
 microsoft.com with no restrictions. I vaguely remember downloading a
strong
 crypto Mozilla or Opera or something like that some months ago by just
 filling in a form saying that I'm not a terrorist and I don't live in
Cuba,
 Iraq or such.

 ¿Is there anybody here on the cypherpunk lists who can clarify?

 MZ
 __
 Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
 User Support Mailing List  [EMAIL PROTECTED]
 Automated List Manager[EMAIL PROTECTED]

__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



Re: Crypto Export restrictions (was: Apache_1.3.26-Mod_SSL_2.8.10-OpenSSL_0.9.6g-Win32.zip)

2002-09-25 Thread Cliff Woolley

On Wed, 25 Sep 2002, Ken C wrote:

 From what I've seen a permit may be required, for export / downloads to
 non-US locations. Hosting servers may need to have the ability to deny
 downloads to locations that shouldn't have it. (don't ask me, I'm just
 reading this stuff)
 While it has relaxed, it still appears to be full of red tape.

That sounds about like my understanding, yeah.  Note also that the rules
for binary distributions are different from those of source distributions
for some reason.  Sheesh.

--Cliff

__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



Re: Crypto Export restrictions (was: Apache_1.3.26-Mod_SSL_2.8.10-OpenSSL_0.9.6g-Win32.zip)

2002-09-25 Thread Ken Campney

Everyone have their reading glasses on?

In an effort to get to the meat of the issue without all the mind numbing
legal double talk I made a couple of phone calls.
(I figured what the hell, they take what they want from my income, I'll make
them regret answering the phone)

I appears that since the module is going to be free to everyone who
wants/needs it the only thing that may need to be done is notifying them
what the url is,
and provide a disclamer warning about export regulations.

I still have a few things to read through though.

I may need some information such as who wrote the app (company, etc). *ideas
anyone??
(I'm new to OpenSSL and the various modules so excuse me if the answer to
that is obvious)

Once I get this figured out, the module should have an additional 1-14
download locations. (if desired)

- Original Message -
From: Cliff Woolley [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, September 25, 2002 9:15 PM
Subject: Re: Crypto Export restrictions (was:
Apache_1.3.26-Mod_SSL_2.8.10-OpenSSL_0.9.6g-Win32.zip)


 On Wed, 25 Sep 2002, Ken C wrote:

  From what I've seen a permit may be required, for export / downloads
to
  non-US locations. Hosting servers may need to have the ability to deny
  downloads to locations that shouldn't have it. (don't ask me, I'm just
  reading this stuff)
  While it has relaxed, it still appears to be full of red tape.

 That sounds about like my understanding, yeah.  Note also that the rules
 for binary distributions are different from those of source distributions
 for some reason.  Sheesh.

 --Cliff

 __
 Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
 User Support Mailing List  [EMAIL PROTECTED]
 Automated List Manager[EMAIL PROTECTED]


__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



Re: Crypto Export restrictions (was: Apache_1.3.26-Mod_SSL_2.8.10-OpenSSL_0.9.6g-Win32.zip)

2002-09-25 Thread hunter

Ken Campney wrote:
 Everyone have their reading glasses on?
 
 In an effort to get to the meat of the issue without all the mind numbing
 legal double talk I made a couple of phone calls.
 (I figured what the hell, they take what they want from my income, I'll make
 them regret answering the phone)
 
 I appears that since the module is going to be free to everyone who
 wants/needs it the only thing that may need to be done is notifying them
 what the url is,
 and provide a disclamer warning about export regulations.
 
 I still have a few things to read through though.
 
 I may need some information such as who wrote the app (company, etc). *ideas
 anyone??
 (I'm new to OpenSSL and the various modules so excuse me if the answer to
 that is obvious)
 
 Once I get this figured out, the module should have an additional 1-14
 download locations. (if desired)
 

Ken,

This is great!

For what it is worth there is a disclaimer on this page that may serve 
the purpose you describe in your comments.

http://www.modssl.org/source/

A good source of names for all of the parts can be found in the 
LICENSE.TXT from the Apache 2.0.42 build - I have included it as an 
attachment.

Please let me know if there is anything else that I can do to assist 
you.  Thank you for taking the time to check on the export rules.

Chris.


/* 
 * The Apache Software License, Version 1.1
 *
 * Copyright (c) 2000-2002 The Apache Software Foundation.  All rights
 * reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 *
 * 1. Redistributions of source code must retain the above copyright
 *notice, this list of conditions and the following disclaimer.
 *
 * 2. Redistributions in binary form must reproduce the above copyright
 *notice, this list of conditions and the following disclaimer in
 *the documentation and/or other materials provided with the
 *distribution.
 *
 * 3. The end-user documentation included with the redistribution,
 *if any, must include the following acknowledgment:
 *   This product includes software developed by the
 *Apache Software Foundation (http://www.apache.org/).
 *Alternately, this acknowledgment may appear in the software itself,
 *if and wherever such third-party acknowledgments normally appear.
 *
 * 4. The names Apache and Apache Software Foundation must
 *not be used to endorse or promote products derived from this
 *software without prior written permission. For written
 *permission, please contact [EMAIL PROTECTED]
 *
 * 5. Products derived from this software may not be called Apache,
 *nor may Apache appear in their name, without prior written
 *permission of the Apache Software Foundation.
 *
 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED
 * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
 * DISCLAIMED.  IN NO EVENT SHALL THE APACHE SOFTWARE FOUNDATION OR
 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
 * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF
 * USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
 * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
 * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
 * OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 * SUCH DAMAGE.
 * 
 *
 * This software consists of voluntary contributions made by many
 * individuals on behalf of the Apache Software Foundation.  For more
 * information on the Apache Software Foundation, please see
 * http://www.apache.org/.
 *
 * Portions of this software are based upon public domain software
 * originally written at the National Center for Supercomputing Applications,
 * University of Illinois, Urbana-Champaign.
 */


APACHE HTTP SERVER SUBCOMPONENTS: 

The Apache HTTP Server includes a number of subcomponents with
separate copyright notices and license terms. Your use of the source
code for the these subcomponents is subject to the terms and
conditions of the following licenses. 

For the mod_mime_magic component:

/*
 * mod_mime_magic: MIME type lookup via file magic numbers
 * Copyright (c) 1996-1997 Cisco Systems, Inc.
 *
 * This software was submitted by Cisco Systems to the Apache Group in July
 * 1997.  Future revisions and derivatives of this source code must
 * acknowledge Cisco Systems as the original contributor of this module.
 * All other licensing and usage conditions are those of the Apache Group.
 *
 * Some of this code is derived from the free version of the file command
 * originally posted to comp.sources.unix.  Copyright info 

Re: Crypto Export restrictions (was: Apache_1.3.26-Mod_SSL_2.8.10-OpenSSL_0.9.6g-Win32.zip)

2002-09-25 Thread Ken Campney

No problem.

Actually the only information I was looking for was who
Apache_1.3.26-Mod_SSL_2.8.10-OpenSSL_0.9.6g-Win32.zip
actually belonged to (is it Apache, OpenSSL, or Mod_ssl)

There are a few US mirrors setup on the modssl.org so it's just a matter of
making sure everything is setup correctly. (Don't need any un-expected
visitors)

You were correct, the disclamer used on both modssl.org and openssl.org is
pretty much all I need.

Who knows with any luck this file should have an additional home by the end
of the week..

Thanks for the provided information Chris.

Ken
- Original Message -
From: hunter [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, September 25, 2002 10:25 PM
Subject: Re: Crypto Export restrictions (was:
Apache_1.3.26-Mod_SSL_2.8.10-OpenSSL_0.9.6g-Win32.zip)


 Ken Campney wrote:
  Everyone have their reading glasses on?
 
  In an effort to get to the meat of the issue without all the mind
numbing
  legal double talk I made a couple of phone calls.
  (I figured what the hell, they take what they want from my income, I'll
make
  them regret answering the phone)
 
  I appears that since the module is going to be free to everyone who
  wants/needs it the only thing that may need to be done is notifying
them
  what the url is,
  and provide a disclamer warning about export regulations.
 
  I still have a few things to read through though.
 
  I may need some information such as who wrote the app (company, etc).
*ideas
  anyone??
  (I'm new to OpenSSL and the various modules so excuse me if the answer
to
  that is obvious)
 
  Once I get this figured out, the module should have an additional 1-14
  download locations. (if desired)
 

 Ken,

 This is great!

 For what it is worth there is a disclaimer on this page that may serve
 the purpose you describe in your comments.

 http://www.modssl.org/source/

 A good source of names for all of the parts can be found in the
 LICENSE.TXT from the Apache 2.0.42 build - I have included it as an
 attachment.

 Please let me know if there is anything else that I can do to assist
 you.  Thank you for taking the time to check on the export rules.

 Chris.


__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



Re: Crypto Export restrictions (was: Apache_1.3.26-Mod_SSL_2.8.10-OpenSSL_0.9.6g-Win32.zip)

2002-09-25 Thread Ken Campney

ERRR.

Do I have the right file name?? lol

What ever the file name/names in need of a depot is, I'm assuming it was
Apache_1.3.26-Mod_SSL_2.8.10-OpenSSL_0.9.6g-Win32.zip

Ken
- Original Message -
From: Ken Campney [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, September 25, 2002 10:42 PM
Subject: Re: Crypto Export restrictions (was:
Apache_1.3.26-Mod_SSL_2.8.10-OpenSSL_0.9.6g-Win32.zip)


 No problem.

 Actually the only information I was looking for was who
 Apache_1.3.26-Mod_SSL_2.8.10-OpenSSL_0.9.6g-Win32.zip
 actually belonged to (is it Apache, OpenSSL, or Mod_ssl)

 There are a few US mirrors setup on the modssl.org so it's just a matter
of
 making sure everything is setup correctly. (Don't need any un-expected
 visitors)

 You were correct, the disclamer used on both modssl.org and openssl.org is
 pretty much all I need.

 Who knows with any luck this file should have an additional home by the
end
 of the week..

 Thanks for the provided information Chris.

 Ken
 - Original Message -
 From: hunter [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Wednesday, September 25, 2002 10:25 PM
 Subject: Re: Crypto Export restrictions (was:
 Apache_1.3.26-Mod_SSL_2.8.10-OpenSSL_0.9.6g-Win32.zip)


  Ken Campney wrote:
   Everyone have their reading glasses on?
  
   In an effort to get to the meat of the issue without all the mind
 numbing
   legal double talk I made a couple of phone calls.
   (I figured what the hell, they take what they want from my income,
I'll
 make
   them regret answering the phone)
  
   I appears that since the module is going to be free to everyone who
   wants/needs it the only thing that may need to be done is notifying
 them
   what the url is,
   and provide a disclamer warning about export regulations.
  
   I still have a few things to read through though.
  
   I may need some information such as who wrote the app (company, etc).
 *ideas
   anyone??
   (I'm new to OpenSSL and the various modules so excuse me if the answer
 to
   that is obvious)
  
   Once I get this figured out, the module should have an additional 1-14
   download locations. (if desired)
  
 
  Ken,
 
  This is great!
 
  For what it is worth there is a disclaimer on this page that may serve
  the purpose you describe in your comments.
 
  http://www.modssl.org/source/
 
  A good source of names for all of the parts can be found in the
  LICENSE.TXT from the Apache 2.0.42 build - I have included it as an
  attachment.
 
  Please let me know if there is anything else that I can do to assist
  you.  Thank you for taking the time to check on the export rules.
 
  Chris.


 __
 Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
 User Support Mailing List  [EMAIL PROTECTED]
 Automated List Manager[EMAIL PROTECTED]


__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



Re: Crypto Export restrictions (was: Apache_1.3.26-Mod_SSL_2.8.10-OpenSSL_0.9.6g-Win32.zip)

2002-09-25 Thread hunter

Ken Campney wrote:
 ERRR.
 
 Do I have the right file name?? lol
 
 What ever the file name/names in need of a depot is, I'm assuming it was
 Apache_1.3.26-Mod_SSL_2.8.10-OpenSSL_0.9.6g-Win32.zip
 
 Ken
 - Original Message -
 From: Ken Campney [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Wednesday, September 25, 2002 10:42 PM
 Subject: Re: Crypto Export restrictions (was:
 Apache_1.3.26-Mod_SSL_2.8.10-OpenSSL_0.9.6g-Win32.zip)
 

Ken,

I copied the filename conventions from the previous versions ... looked 
at them to see what they contain, so as to remain consistent.  A large 
number of people still want to use the Apache 1.3.26, with fixed OpenSSL 
- I am using Apache 2.0.40 (soon to move to 2.0.42).  I can make any 
version, but this is the most popular right now.  OpenSA has a nice 
distribution, but I have not checked to see what rev's they are at.

Apache_1.3.26-Mod_SSL_2.8.10-OpenSSL_0.9.6g-Win32.zip
- contains Apache 1.3.26 and Mod_SSL 2.8.10, binaries built with OpenSSL 
libs, etc.

Openssl-0.9.6g-Win32.zip
- contains only OpenSSL binaries

The parts are not so well integrated as they are with Apache 2.0.42.


Apache_2.0.42-OpenSSL_0.9.6g-Win32.zip

- contains all 3 parts
- Mod_SSL is built into Apache 2 and the make like to put the OpenSSL 
binaries into the Apache/bin directory.


Actual urls...

http://tor.ath.cx/~hunter/apache/Apache_1.3.26-Mod_SSL_2.8.10-OpenSSL_0.9.6g-Win32.zip
http://tor.ath.cx/~hunter/apache/Openssl-0.9.6g-Win32.zip

http://tor.ath.cx/~hunter/apache/Apache_2.0.42-OpenSSL_0.9.6g-Win32.zip 



I hope I did not misunderstood what you wanted ... (I talk too much)

Chris.

__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



Re: Crypto Export restrictions (was: Apache_1.3.26-Mod_SSL_2.8.10-OpenSSL_0.9.6g-Win32.zip)

2002-09-25 Thread hunter

Ken,


The source for:
- Apache_1.3.26-Mod_SSL_2.8.10-OpenSSL_0.9.6g-Win32.zip
- Openssl-0.9.6g-Win32.zip

2002.09.21  12.08 3,066,788 apache_1.3.26-win32-src.zip
2002.09.18  04.32   753,241 mod_ssl-2.8.10-1.3.26.tar.gz.tar
2002.09.21  12.09 2,170,570 openssl-0.9.6g.tar.gz.tar



The source for:
- Apache_2.0.42-OpenSSL_0.9.6g-Win32.zip

2002.09.25  01.14 6,750,712 httpd-2.0.42-win32-src.zip
2002.09.21  12.09 2,170,570 openssl-0.9.6g.tar.gz.tar


Chris.

__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]