RE: Netscape + ModSSL=Dead slow.

2001-06-19 Thread McCaffity, Ray
I don't think this is your problem, but why such an old version of PHP? Any chance you could post your configure statements? (Also which order you did them in, I've been gone for a while, what platform were you building this on? What compiler/version? -Original Message- From: DAve Goodri

RE: KeepAlive and IE, again...

2001-06-07 Thread McCaffity, Ray
Typically these sites don't run SSL on the server. It's terminated at the switch hardware, many net gear vendors have SSL accelerators that emulate a connection to the server. The end user doesn't know the difference. And you bind the SSL cert to the net device. -Original Message- From

RE: [error] (13)Permission denied: accept: (client socket)

2001-06-05 Thread McCaffity, Ray
pd server running on it which is also proven to work. Actually even apache is working but only if it is set to work from root L Any ideas are appreciated! Regards, Rossen PS x.x.x.x stands for the same IP address in both the screen dumps and the httpd.conf file. ----- Original Message

RE: [error] (13)Permission denied: accept: (client socket)

2001-06-05 Thread McCaffity, Ray
There is no reason that Solaris won't let you run child processes as someone besides root. All my servers are set up this way. Which version of Solaris? x86 or Sparc? 64 or 32-bit? Some places to look are /var/adm/messages ../path/to/apache/logs/error_log and dmesg. Also when you do a netstat

RE: SSL confusion http works ssl won't

2001-06-02 Thread McCaffity, Ray
You don't have to put both the https and the :443 It does the same thing. This might be what is causing the problem? Also it sounds like you need to set up your proxy configuration in your browser. Finally it looks like https://MyServerName.local does not match https://MyServerName.MyCompanyName.

RE: Netscape + ModSSL=Dead slow.

2001-06-01 Thread McCaffity, Ray
I see you're on Willows in Redmond, I used to work at the corner of Willows at 148th at AT&T there in Redmond. We have Macs that can get this certificate. You might try http://ns2.e-williams.net It has a locally created certificate. I will send you my conf file if this works. Ray McCaffity ---

RE: cannot connect to remote secure server

2001-06-01 Thread McCaffity, Ray
server. I haven't defined any virtual hosts. I only have one site on the server. Thanks for any help. Emma -Original Message- From: McCaffity, Ray [mailto:[EMAIL PROTECTED]] Sent: Thursday, May 31, 2001 6:36 PM To: '[EMAIL PROTECTED]' Subject: RE: cannot connect to

RE: SSL confusion http works ssl won't

2001-06-01 Thread McCaffity, Ray
Don't know why you're getting the error, but as for an easy way to stop and start SSL, if you have a Dynamic (DSO) modules, just comment out the LoadModule line. If you compiled SSL statically into Apache, you can use apachectl start (without SSL) and apachectl startssl (with SSL) apachectl stop

RE: Netscape + ModSSL=Dead slow.

2001-05-31 Thread McCaffity, Ray
We several Mac's all running OS 9.1 using MSIE 5, Web server is Apache1.3.20+mod_ssl+openSSL0.9.6a We don't have any problems. Maybe it's a Netscape thing? -Original Message- From: DAve Goodrich [mailto:[EMAIL PROTECTED]] Sent: Thursday, May 31, 2001 12:56 PM To: [EMAIL PROTECTED] Subjec

RE: mod_ssl vs. Stronghold 3

2001-05-31 Thread McCaffity, Ray
Hmm.. also, is stronghold free? The price of Apache can't be beat. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Thursday, May 31, 2001 12:51 PM To: [EMAIL PROTECTED] Subject: Re: mod_ssl vs. Stronghold 3 Believe me, it is not a very time consuming job to

RE: cannot connect to remote secure server

2001-05-31 Thread McCaffity, Ray
I think it's supposed to work this way. When you created the certificate, did you create it using the DNS name of your website or your IP? -Original Message- From: Emma Wermström (EMW) [mailto:[EMAIL PROTECTED]] Sent: Thursday, May 31, 2001 9:35 AM To: '[EMAIL PROTECTED]' Subject: cannot

RE: https - port problem

2001-05-31 Thread McCaffity, Ray
I had to add suexec to get around this. I created another user and group (like www and www) and run Apache as this user. (edit your httpd.conf, change from "nobody") also compile in a suexec user. If you've done if successfully, when you do a httpd -l, you'll see a line that says "suexec wrapper

RE: Invalid command 'SSLRequireSSL'

2001-05-31 Thread McCaffity, Ray
Are you using mod_ssl as static or dynamic module? > >> --enable-shared=ssl I don't believe you want this, if... > >> --enable-module=ssl \ You are doing this. I notice you have this line in both your mod_ssl and your apache ./configure Try it without this line. -Original Message- F

RE: Netscape vs IE with apache +mod_ssl +openssl

2001-05-25 Thread McCaffity, Ray
While in IE, go to Tools > Internet Options then click on the security tab. Then click on the custom level button. Then click on the disable button for anything you don't want to be warned about. Disclaimer: I would use extreme caution here, and I wouldn't disable any ActiveX or JavaScript warn

RE: Apache SSL MOD

2001-05-24 Thread McCaffity, Ray
Before you did the "make install" of apache, did you do a "make certificate" ?  If you did, and just left the passwd blank, you should be able to just use a null passwd.  But if you didn't do this step, or if you're doing this with precompiled binaries, I think you'll probably have to go ba

RE: SSLSessionCache broken on Solaris

2001-05-24 Thread McCaffity, Ray
It runs fine on my Solaris 8 servers. With Solaris 8, you don't need mm. In fact I'd recommend not using it. Did you edit the /etc/system file to match your shmem and shsem settings? I would also recommend removing these if you did. Are you running Sol8 in 64-bit or 32-bit? All of mine are 64

RE: The input information is invalid when installing client cert in I E 5.0

2001-05-24 Thread McCaffity, Ray
I have seen this when I didn't have the 128-bit encryption pack. http://www.microsoft.com/windows/ie/download/128bit/default.asp Go to Help > About Internet Explorer, then look at the second line in the dialog box. It says "Cipher Strength". I would really recommend upgrading to 5.5sp2 if you ca

RE: problem with server certificate

2001-05-24 Thread McCaffity, Ray
an also trust my server certificate. So let me know how can i make my own clien certificate? Thanks in advance. Chirag --- "McCaffity, Ray" <[EMAIL PROTECTED]> wrote: > Before you install the package you now should > prepare the SSL | > | certificate system

RE: problem with server certificate

2001-05-23 Thread McCaffity, Ray
Before you install the package you now should prepare the SSL | | certificate system by running the 'make certificate' command. | | For different situations the following variants are provided: | | | | % make cer