RE: Concurrent Sessions

2001-01-16 Thread William Palfreman
Quoting [EMAIL PROTECTED]: The answer to your questions depends very much on what you wish to protect. If you are only interested in protecting the user's login details, then you could use SSL for just that (Yahoo! mail does something like this when you request "secure" login"). Obviously,

RE: Question about SSLSessionCache using SHMHT

2001-01-16 Thread Doremus, Matthew
On Fri, Jan 12, 2001, Doremus, Matthew wrote: I have been looking through the mod_ssl v7.2.1 SHMHT code and it appears that each server creates it's own hash table in the allocated shared memory. Does this imply that when using SHMHT servers only

RE: Question about SSLSessionCache using SHMHT

2001-01-16 Thread Geoff Thorpe
Hi there, On Tue, 16 Jan 2001, Doremus, Matthew wrote: Is this to say that an underlying memory allocator would return an address from the malloc function of memory which had previously been allocated by another process ? This seems to be somewhat chaotic for any memory allocation, shared

Re: Help! A few ssl problems

2001-01-16 Thread Tim Power
Check the OpenSSL archives... it is to do with the cypher you have... SSLCipherSuite ALL:!ADH:!EXP56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0 Have a read of the modssl FAQ.

[BugDB] ERROR 0D067007 (PR#506)

2001-01-16 Thread modssl-bugdb
Full_Name: German Staltari Version: 2.6.2 OS: Red Hat Linux PRO 6.2 Submission from: (NULL) (200.41.237.237) I have this entries in my ssl_engine_log file : [15/ene/2001 18:29:38 29487] [error] SSL error on reading data (OpenSSL library error follows) [15/ene/2001 18:29:38 29487] [error]

Re: Apache/1.3.14 (Win32) mod_jk mod_ssl/2.7.2 OpenSSL/0.9.6 running... ??

2001-01-16 Thread Jan Dries
You did type the passphrase twice, did you, despite the fact that Apache asked for it only once?. It typically hangs (or appears to do so) if you don't type it twice. It's a bug that has been discussed in this more than once, and although patches have been suggested, the bug is still there in the

RE: Apache/1.3.14 (Win32) mod_jk mod_ssl/2.7.2 OpenSSL/0.9.6 running... ??

2001-01-16 Thread David Rees
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Jan Dries Sent: Monday, January 15, 2001 3:01 PM You did type the passphrase twice, did you, despite the fact that Apache asked for it only once?. It typically hangs (or appears to do so) if you

New install, silent aborts

2001-01-16 Thread Guy Smith
I'm stumped. I downloaded and installed Apache 1.3.14, OpenSSL 0.9.6, followed the installation instructions, copied pertinent parts of my existing (non-SSL) server conf file, and . . . httpsd fails to start. No messages in the log file (despite LogLevel being set to 'debug'). No core files.

Re: New install, silent aborts

2001-01-16 Thread David Rees
On Tue, Jan 16, 2001 at 09:39:27PM -0800, Guy Smith wrote: I'm stumped. I downloaded and installed Apache 1.3.14, OpenSSL 0.9.6, followed the installation instructions, copied pertinent parts of my existing (non-SSL) server conf file, and . . . httpsd fails to start. No messages in the