RE: https problem - port 443 problem

Er---Isn't the command "apachectl startssl" and NOT "apachectl sslstart"?? --On Thursday, March 22, 2001 07:43:04 PM -0800 David Rees [EMAIL PROTECTED] wrote: You definately don't need to be running both sslstart and then start, just running sslstart should start up both http and https

Re: https problem - port 443 problem

Ted Fines wrote: Er---Isn't the command "apachectl startssl" and NOT "apachectl sslstart"?? Cunningly, the current version of apachectl will start SSL with any of the following arguments: startssl|sslstart|start-SSL (have a look in the script). At the end of the day, the real command

1024 bit key on server

Hello all, I have had problems with browsers trying to access an Apache mod_ssl server with private key size other than 1024 .For sizes of 600bits,1025bits for the private key, IE is unable to connect to the secure server,Netscape connects successfully.For key size of 384,400 both Netscape

Configuring CA and Apache Virtual Hosts

I'm relatively new the the world of SSL and mod_ssl. I'm trying to establish several secure intranet sites in our company which will use Client Certificates for authenticating users. I've set up the Microsoft Certificate Server as my root Certificate Authority (CA) for our intranet. Now I am

RE: FYI - Equifax reselling Verisign Global SGC certs at cost!

Laugh? I think I'd want to cry, especially if I set the "always accept content from Microsoft" button! Fortunately for me I don't trust everything that comes out of Redmond! - John Airey Internet Systems Support Officer, ITCSD, Royal National Institute for the Blind, Bakewell Road,

Re: 1024 bit key on server

On Fri, 23 Mar 2001, Pradeep kamath wrote: Hello all, I have had problems with browsers trying to access an Apache mod_ssl server with private key size other than 1024 .For sizes of 600bits,1025bits for the private key, IE is unable to connect to the secure server,Netscape connects

1024 bit key nessesary?

If my data is not monetary or financial in origin. Is a 1024 key really needed? The reason I ask is that my data is really not useful to anyone other than our customers, but it does require security. Since I am running a web application, somewhat heavy in the graphics, wouldn't a smaller key be

RE: Which SSLSessionCache to use for best performance?

So I've compilied mod_ssl/apache to include the ssl_experimental, and I am getting this error... [root@www11-la1 conf]# /u1/httpd/bin/apachectl configtest Use of uninitialized value at /usr/lib/perl5/site_perl/5.005/i386-linux/PFProAPI.pm line 47. Syntax error on line 414 of

RE: Which SSLSessionCache to use for best performance?

Hmm, sounds to me like the mm library isn't getting loaded for some reason. Can you verify that when you configure Apache it really enabled EAPI_MM? I ran through your instructions, and it seemed that it the Apache config wasn't picking up the EAPI_MM library for some reason. Can you build

RE: Which SSLSessionCache to use for best performance?

Question, I know that if you do a bin/httpd -l it will show you the compilied modules. Should the mm show up there? -Max -Original Message- From: David Rees [mailto:[EMAIL PROTECTED]] Sent: Friday, March 23, 2001 11:28 AM To: [EMAIL PROTECTED] Subject: RE: Which SSLSessionCache to use

RE: Which SSLSessionCache to use for best performance?

On Fri, 23 Mar 2001, Max Clark wrote: I know that if you do a bin/httpd -l it will show you the compilied modules. Should the mm show up there? No, the -l shows you Apache-specific modules, not external libraries used to build the apache binary. If you have your source tree still around, you

Graphics on IE

I am getting a very weird graphics problem on Internet Explorer 5.x using SSL. The problem is identical if I use apache + mod_ssl under Windows NT/2000 or Stronghold on Solaris 2.7. The problem is that the top of the page has a logo, and below this a login password form. In the logo at the

Re: 1024 bit key nessesary?

The 'best practices' standard *for everyone who doesn't have to support older browsers that only did 512bit keys* is a 1024 bit key. RSA operations are only done at the start of an SSL session, not at each HTTP(S) connection. (Because public key is so expensive, it's typically only used to

virtual host broken pipe

Hi, I'm new to ssl and am having some trouble getting some things to work properly. Here's what I'm trying to accomplish: use VirtualHosts to define two different servers: foo1 and foo2. Both should answer only ssl requests. I have the following in the httpd.conf: IfDefine SSL Listen

RE: virtual host broken pipe

Please read the FAQ. http://www.modssl.org/docs/2.8/ssl_faq.html#ToC47 This question comes up so often it should be in the .sig of the list! -Dave -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Benjamin Collar Hi, I'm new to ssl and am having

RE: Which SSLSessionCache to use for best performance?

Yeah, for some reason, the mod_perl config/install wasn't passing the EAPI_MM environment variable to Apache for configuration, so Apache didn't know it was available for configuration when building. -Dave -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf

web site down ?

just wondering if it is me or not but www.modssl.org dosnt seem to reslove anymore even directlyusing the dns servers that are listed on whois as been the the servers for the domain __ Apache Interface to OpenSSL (mod_ssl)

RE: Which SSLSessionCache to use for best performance?

So I thought I'd pass along the results of my benchmark. Before is with the dbm, after is with the shmcb. I maxed the systems out at 1500 https connections. Hopefully this helps my site, thanks for the help. -Max -Original Message- From: David Rees [mailto:[EMAIL PROTECTED]] Sent:

security failure couldn't decrypt

Hello all, On the following site: https://altahos1.virtualis.com we get this error message: security failure couldn't decrypt We got this message in IE 5.5 on a G4 Macintosh. please advise. Jeff __ Do You Yahoo!? Get email at your own