RE: Enabling a single directory as SSL enabled

2001-03-30 Thread Scott Brown
Hi Alex... Set the server up as secure - allowing insecure or secure connection to the server but denying access to the the directory you want as secure except through the secure server port 443 Yes - thats what I'm trying to do... the problem is that I'm unable to. As I indicated:

SSL client auth failed

2001-03-30 Thread Ruediger Riediger
Hello! I have a strange problem (probably more than one) using SSL Client Auth with Apache/1.3.19 (Unix) mod_perl/1.25 mod_ssl/2.8.1 OpenSSL/0.9.6. There is a (perl) cgi-script which should only be executed when accessing it with a valid SSL client certificate. The certificate is okay, it's CA

Re: Win95 / Win95 problems connecting to apache mod_ssl

2001-03-30 Thread Michael Ott
hallo robin! can you send us your ssl-part at your httpd.conf. than we can look for the error. When I try to connect to my apache mod_ssl server (mod_ssl-2.7.1-3) using Internet Explorer 5 running on Win98/95/WinNT 4.0 I get a "page not found error", just after accepting the (test)

Re: Enabling a single directory as SSL enabled

2001-03-30 Thread Owen Boyle
Scott Brown wrote: I've tried a virtualhost www.mytestdomain.com ...non-ssl directives Directory /secure/ SSLEngine on SSLRequireSSL etc..etc.. (including cert/key definitions) /Directory /virtualhost Not so sure about

Re: can anyone help me....

2001-03-30 Thread Ralf S. Engelschall
On Thu, Mar 29, 2001, Rene Labiran wrote: i been having this error: "invalid command loadmodule perhaps mispelled or defined by a module notincluded in the server configuration sshd." "sshd"? Errr.. h... Anyway, if you get this message from Apache, it clearly says what the problem is.

RE: paranoide installation of php4 and auth_ldap

2001-03-30 Thread John . Airey
IIRC Apache (with or without modssl) passes the PHP_AUTH_USER and PHP_AUTH_PASSWORD values from logged in sessions to PHP. It is possible to use PHP to handle the authentication itself. A simple way to clear them is to explicitly set these values to NULL, 0,"" or whatever your prefer at the start

Re: [BugDB] URI-Rewriting (PR#539)

2001-03-30 Thread modssl-bugdb
On Thu, Mar 29, 2001, [EMAIL PROTECTED] wrote: Full_Name: Michael Version: 2.7.1-0 OS: Suse 7.1 Submission from: (NULL) (137.226.144.2) Hello, i've tried to make some Session Tracking with jdk1.3 Servlets. There is an Methode thats called encodeURL(URL), this look's to the Client

Re: Which SSLSessionCache to use for best performance?

2001-03-30 Thread Ralf S. Engelschall
On Thu, Mar 22, 2001, David Rees wrote: [...] lots of good info snipped Thanks for the lowdown on both session caches, Geoff. It really seems to me that at this point, the shmcb cache should no longer be part of the SSL_EXPERIMENTAL code, and even be made the default shm cache. Has

RE: Which SSLSessionCache to use for best performance?

2001-03-30 Thread John . Airey
Not strictly related to this, but since you are active today Ralf, can you give me some idea of when the SSL crypto device code will move out of SSL_EXPERIMENTAL. ie, will this be once openssl 0.9.7 is released? Many thanks in advance. - John Airey Internet Systems Support Officer, ITCSD,

Re: SSLRequireSSL and deny

2001-03-30 Thread Ralf S. Engelschall
On Wed, Mar 28, 2001, [EMAIL PROTECTED] wrote: Wondering if anybody came across this problem before. Say I have VirtualHost 172.25.60.45 ServerName pikachutest DocumentRoot /home/httpd/devel/TonyC/ Directory "/home/httpd/devel/TonyC"

ANNOUNCE: mod_ssl 2.8.2

2001-03-30 Thread Ralf S. Engelschall
The usual fun amount of bugfixes leads to the next maintainance release of mod_ssl: 2.8.2. The corresponding ChangeLog entries for version 2.8.2 are appended below. Feel free to upgrade your server installations after grabbing it from the following locations: o http://www.modssl.org/source/

Re: Why stdin in mod_ssl?

2001-03-30 Thread Ralf S. Engelschall
On Thu, Mar 22, 2001, [EMAIL PROTECTED] wrote: Browsing through the mod_ssl source code, I notice that ssl_engine_config.c has a reference to stdin. Err... you mean ssl_expr_scan.c, I think. I see no reference to stdin in ssl_engine_config. Unfortunately I don't know lex/flex well enough

Re: [BugDB] PRIVATE: Inconsistent semaphore state (PR#538)

2001-03-30 Thread modssl-bugdb
On Mon, Mar 26, 2001, [EMAIL PROTECTED] wrote: Full_Name: Jarod Jenson Version: Apache/1.3.12 (Unix) mod_ssl/2.6.6 OpenSSL/0.9.6 OS: Solaris 8 Submission from: (NULL) (192.152.140.9) Using a SYSV semaphore to protect a shared memory instance of the SSL session cache, can leave the

Re: can anyone help me....

2001-03-30 Thread Paul
--- Rene Labiran [EMAIL PROTECTED] wrote: i been having this error: "invalid command loadmodule perhaps mispelled or defined by a module notincluded in the server configuration sshd." It would help to see the commend in context. Is it in your config file? In a script? Are you using DSO?

Invalid method in request

2001-03-30 Thread Pavel Hlouek
I cannot connect to apache+mod_ssl with command recommended by mod_ssl documentation (openssl s_client -connect localhost:443 -state -debug). It results in a message in error_log of apache: Ivalid method in request Any idea? Pavel Hlousek

Re: Which SSLSessionCache to use for best performance?

2001-03-30 Thread Mads Toftum
On Fri, Mar 30, 2001 at 12:06:38PM +0200, Ralf S. Engelschall wrote: On Thu, Mar 22, 2001, David Rees wrote: [...] lots of good info snipped Thanks for the lowdown on both session caches, Geoff. It really seems to me that at this point, the shmcb cache should no longer be part

Any help for a novice on RH 7.0 / Apache 1.3.14

2001-03-30 Thread Aage J. Skjolingstad
Hi All, When crond is log rotating (crond.weekly) - httpd feil to start up again. I'm running RH 7.0 with Apache/1.3.14 (Unix) (Red-Hat/Linux) mod_ssl/2.7.1 OpenSSL/0.9.5a mod_perl/1.24 The kill HUP does not restart the server since some of the childs does not die The /…../httpd restart

Re: ANNOUNCE: mod_ssl 2.8.2 (minor bug)

2001-03-30 Thread Geoff Thorpe
Hi there, I've just taken a look at mod_ssl-2.8.2 (I had skipped over 2.8.1 which is unfortunate, as this relates to 2.8.1 also). Ralf, you mentioned in the ChangeLog that you'd updated mod_ssl to build/run with 0.9.7-dev snapshots of OpenSSL. However, the configuration stuff for enabling

Re: Enabling a single directory as SSL enabled

2001-03-30 Thread Carlos Ramirez
Try mod_rewrite: Directory /path/to/secure/directory> RewriteEngine on RewriteCond %{HTTPS} !=on RewriteRule ^/(.*) https://yourserver.com/$1 /Directory> The above forces HTTPS on the specified directory. It works for me ;) -Carlos Scott Brown wrote: > > --- Alex Moon [EMAIL PROTECTED]>

swamp

2001-03-30 Thread Geoff Thorpe
Hi y'all, Just a quick note to mention that I've finally got round to sticking "swamp" online. This utility is a bit rough around the edges, but has served me quite well when trying to bury the hell out of https servers (and other SSL/TLS apps) and analyse resulting performance (and improve it).

Re: Which SSLSessionCache to use for best performance?

2001-03-30 Thread Geoff Thorpe
On Fri, 30 Mar 2001, Mads Toftum wrote: On Fri, Mar 30, 2001 at 12:06:38PM +0200, Ralf S. Engelschall wrote: Hmmm.. yes, I think we can try this for 2.8.2. Let's move it out of SSL_EXPERIMENTAL, but still do not use it by default in the configuration. I've arranged this for us for 2.8.2.

Re: Invalid method in request

2001-03-30 Thread Ralf S. Engelschall
On Fri, Mar 30, 2001, Pavel Hlouek wrote: I cannot connect to apache+mod_ssl with command recommended by mod_ssl documentation (openssl s_client -connect localhost:443 -state -debug ). It results in a message in error_log of apache: Ivalid method in request Any idea? You connect with