On Mon, 23 Oct 2000 [EMAIL PROTECTED] wrote:

> Going off topic a bit, most of the updates are for extra packages (GNOrpm
> etc) added to Redhat, rather than core security modules.
> 
> Having just checked the package list, it does appear that Apache and mod_ssl
> are being supplied as separate packages. I can't investigate the contents of
> the rpms because they are in RPM 4 format (AFAIK). I would suspect that
> something very odd is going on with the SSL handshaking to make this
> possible (ie, the web server is clearly processing the host: part of the
> header before completely the SSL connection).
> 
> Can you tell us what you get if you type "httpd -l" please Carlos?
> 
        I get:

Compiled-in modules:
        httpd_core.c
        mod_so.c
suexec: disabled; invalid wrapper /usr/bin/suexec


        I have set up my laptop so you can access and confirm.  I have the
following set up:

http://cursorp.form-net.com     <-- Default page that comes with RH7
https://cursorp.form-net.com    <-- Same page but using SSL
https://cursorssl.form-net.com  <-- A page with a simple message

        cursorssl.form-net.com is a CNAME pointing to cursorp.form-net.com

        Right now both pages are using the same certificate.  I don't know
it this makes a diference.
        
        At the moment I'm running 1.3.12 with ModSSL 2.6.6.
-- 
Kenyaweb.com
formerly Form-Net Africa
Carlos Chavez
Technical Manager
+254-2-245630
[EMAIL PROTECTED]
[EMAIL PROTECTED]

______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to