modssl + http-1.1 works?

2001-04-17 Thread Maarten van Lieshout
Hi, Can anyone tell me if it is possible to use http 1.1 with modssl? We want to set up an Apache webserver based on http 1.1 and will be using ssl-sites with name-based virtual hosts. I know Apache can do this, but I am not sure if it is supported by modssl. regards, Maarten van Lieshout

Re: modssl + http-1.1 works?

2001-04-17 Thread Rudi Heitbaum
On Tue, Apr 17, 2001 at 10:21:45AM +0200, Maarten van Lieshout wrote: Hi, Can anyone tell me if it is possible to use http 1.1 with modssl? We want to set up an Apache webserver based on http 1.1 and will be using ssl-sites with name-based virtual hosts. I know Apache can do this, but I am

Re: modssl + http-1.1 works?

2001-04-17 Thread Thornton Prime
On Tue, 17 Apr 2001, Maarten van Lieshout wrote: Can anyone tell me if it is possible to use http 1.1 with modssl? We want to set up an Apache webserver based on http 1.1 and will be using ssl-sites with name-based virtual hosts. I know Apache can do this, but I am not sure if it is

Re: modssl + http-1.1 works?

2001-04-17 Thread Lars Schioler
You're not able to run ssl on namebased virtual hosts, since the ssl negotiation takes place before resolving the host name. SSL requires an IP address, but you can off course run various VH on different ports. Lars Schiler - Original Message - From: "Maarten van Lieshout" [EMAIL

RE: modssl + http-1.1 works?

2001-04-17 Thread John . Airey
Your question is a little unclear, ie you state "Apache can do this..." when in fact Apache cannot do SSL at all. However, as has already been said, SSL sites cannot use name-based virtual hosts (see http://www.modssl.org/docs/2.8/ssl_faq.html#vhosts), but non-ssl sites can. You can also mix

Re: modssl + http-1.1 works?

2001-04-17 Thread Rajaram . Vasudev
Could anyone please explain what is namebased and what is IP based? What are the differences and how they work for SSL connections handling? Can I use the following declaration for Virtual Host declaration with modSSL? I am having problems with IE Browsers ONLY while connecting from dial-up

Disabling Server Authentication

2001-04-17 Thread Jeffroy, Robert
Is it possible to configure the server to not provide a server certificate? We want to set up an encrypted conversation without requiring server authentication. __ Apache Interface to OpenSSL (mod_ssl)

MM max shared memory segment

2001-04-17 Thread Diana Shepard
I am following the mod_ssl INSTALLATION (unix) instructions and have gotten to step 4, the MM Shared Memory Library build. I'm installing on Sun Solaris 8, Netra X1 server. ./configure returns an error of: "unable to determine max shared memory segment size". I've seen some references in the

Re: Disabling Server Authentication

2001-04-17 Thread Brett W. McCoy
On Tue, 17 Apr 2001, Jeffroy, Robert wrote: Is it possible to configure the server to not provide a server certificate? We want to set up an encrypted conversation without requiring server authentication. That kind of defeats the purpose of using SSL in the first place, doesn't it? You can

Re: Disabling Server Authentication

2001-04-17 Thread Simon Weijgers
Hello, Is it possible to configure the server to not provide a server certificate? We want to set up an encrypted conversation without requiring server authentication. SSL supports it, it's called Anonymous Diffie Hellman and you should be able to setup OpenSSL+mod_ssl so that it does ADH,

Re: modssl + http-1.1 works?

2001-04-17 Thread Geoff Thorpe
Everytime someone posts a "can I do name-based virtual hosting with SSL" request, I'm inclined to suspect a troll because of the number of replies it gets. :-) However, I have to make a comment because invariably many of the replies say something that isn't actually true ... On Tue, 17 Apr 2001,

Re: modssl + http-1.1 works?

2001-04-17 Thread Geoff Thorpe
Hi there, On Tue, 17 Apr 2001, Jeff W. Boote wrote: The trick is that you have to be able to use a regex for your server's CN in the server certificate to keep browsers from complaining... This works well for sites that multiple "related" web sites, but of course doesn't work for the

Re: modssl + http-1.1 works?

2001-04-17 Thread Rehan Zaidi
Geoff Thorpe wrote: Now *that*'s cool. My only question is: did Microsoft manage to write a regex handler into Internet Explorer(s) that works with this sort of thing? If they did, I'm frankly (and a little sarcastically) astonished. Do all the "normal" browsers support this? Consistently?

Re: modssl + http-1.1 works?

2001-04-17 Thread Rehan Zaidi
PS - Try visiting https://demo.securelook.com/ with your client(s) to see if the wildcard cert will work for you. Contrary to Thawte's note about problems with IE on Windows 2000, I have no issues with the site when I browse it with IE 5.5 on Win2K. I haven't tried other versions of IE on this

Re: modssl + http-1.1 works?

2001-04-17 Thread Rehan Zaidi
(I don't know if it went out the first time... Sorry if it's a duplicate.) PS - Try visiting https://demo.securelook.com/ with your client(s) to see if the wildcard cert will work for you. Contrary to Thawte's note about problems with IE on Windows 2000, I have no issues with the site when I