Full_Name: Ralph Bender Version: 2.6.5 OS: WinNT Submission from: (NULL) (205.139.151.254) I got a working version of Apache/1.3.12 + mod_ssl/2.6.5 + OpenSSL/0.9.5a that appears to have an annoying flaw. When I crank Apache using "SSLPassPhraseDialog builtin" directive I'm given a "Enter pass phrase:" prompt as expected then I'm told: Ok: Pass Phrase Dialog successful Apache/1.3.12 (Win32) mod_ssl/2.6.5 OpenSSL/0.9.5a running... which one might expect. Unfortunately at this point Apache is not listening, only when I AGAIN enter my pass phrase will Apache finally come up, and indeed at this point SSL will also work. According to the documentation I thought the pass phrase would be cached and then I would not be involved. I've noticed similar operation with Apache/1.3.6 + mod_ssl/2.3.5 + OpenSSL/0.9.3a, however with this older version I was at least prompted twice, now I'm only prompted once, but still have to enter it twice. Much more interesting results occur when I crank Apache up using the "SSLPassPhraseDialog exec:passphrase.exe" directive. This ends up calling passphrase.exe in what appears to be an endless loop. When the passphrase.exe is nothing more than a C program that PRINTFs the passphrase the machine noticeably slows, as this program is invoked again and again in what appears to be an endless loop. (Note if the program outputs something other than the correct passphrase Apache dies very swiftly with a nasty-gram, as well it should.) (I hope I'm not repeating another bug report with this. I didn't see one like it, sorry if I made a mistake.) ______________________________________________________________________ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
