Going off topic a bit, most of the updates are for extra packages (GNOrpm
etc) added to Redhat, rather than core security modules.

Having just checked the package list, it does appear that Apache and mod_ssl
are being supplied as separate packages. I can't investigate the contents of
the rpms because they are in RPM 4 format (AFAIK). I would suspect that
something very odd is going on with the SSL handshaking to make this
possible (ie, the web server is clearly processing the host: part of the
header before completely the SSL connection).

Can you tell us what you get if you type "httpd -l" please Carlos?

Thanks.

John

-----Original Message-----
From: R. DuFresne [mailto:[EMAIL PROTECTED]]
Sent: 23 October 2000 15:20
To: [EMAIL PROTECTED]
Subject: RE: mod_ssl on Redhat 7



Is that the most current for redhat?  there was a update rpm released a
week or so ago addressing some security issues also.  Good ole redhat only
seems to have about a dozne updates a week due to security issues
<smile>...


Thanks,

Ron DuFresne

On Mon, 23 Oct 2000 [EMAIL PROTECTED] wrote:

> It is not at all possible that Apache-mod_ssl with Redhat 7 allows name
> based virtual hosts with SSL. Are you not confusing this with IP based
> virtual hosts?
> 
> To answer your question, the version with Redhat 7 seems to be Apache
1.3.12
> with modssl 2.6.6. However, these are separate packages on their ftp site,
> which does seem odd. I'll look into it and get back to you.
> 
> - 
> John Airey
> Internet Systems Support Officer, ITCSD, Royal National Institute for the
> Blind,
> Bakewell Road, Peterborough PE2 6XU,
> Tel.: +44 (0) 1733 375299 Fax: +44 (0) 1733 370848 [EMAIL PROTECTED] 
> 
> 
> -----Original Message-----
> From: Carlos Chavez [mailto:[EMAIL PROTECTED]]
> Sent: 23 October 2000 14:46
> To: [EMAIL PROTECTED]
> Subject: mod_ssl on Redhat 7
> 
> 
>       What is the difference with the Apache - ModSSL bundled with
> Redhat 7 and the version you download from the site?  With Redhat 7 I can
> user name based virtual hosts with SSL, but the version I downloaded from
> the modssl site does not let me do this.
> 
> 

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        admin & senior consultant:  darkstar.sysinfo.com
                  http://darkstar.sysinfo.com

"Cutting the space budget really restores my faith in humanity.  It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation."
                -- Johnny Hart

testing, only testing, and damn good at it too!

______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to