Re: Now I can be my own CA but there's more...

1999-03-24 Thread Alfredo Raul Pena
Steffen Dettmer wrote: > > certificate expires, IE 3 disallows access altogether. Anyway I can hack > > the Registry or something like that so IE3/4/5 users can go to my site? > > Like, adding my phony CA to IE's list of CAs? > > > > By the way, is there such hack to Netscape too? > > take a .hta

Re: Now I can be my own CA but there's more...

1999-03-24 Thread Lin Geng
What are the "VALUE"s that you refered? (>> ...so if you wan't to selfsigned your certify you need to change the values >> you are putting on both certicates) Thanks. -Original Message- From: Juan Carlos Castro y Castro <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] <[EMAIL PROTECTED]> Date:

[BugDB] How to compile mod_ssl without patching the original source? (PR#135)

1999-03-24 Thread bugdb-mod-ssl
Full_Name: Avi Alkalay Version: 2.2.6 OS: AIX 4.3.1 Submission from: igw1.br.ibm.com (32.96.196.66) Can I compile mod_ssl separately from Apache? I don't want to patch the Apache source to compile mod_ssl within Apache. Can I compile Apache, pack the binary files, remove the source, and in some

Re: Now I can be my own CA but there's more...

1999-03-24 Thread Steffen Dettmer
> certificate expires, IE 3 disallows access altogether. Anyway I can hack > the Registry or something like that so IE3/4/5 users can go to my site? > Like, adding my phony CA to IE's list of CAs? > > By the way, is there such hack to Netscape too? take a .htaccess and include the following line

Re: Basic auth with SSL - again

1999-03-24 Thread Achille M. Luongo
Trung Tran-Duc ha scritto: > > > > > "Ralf S. Engelschall" <[EMAIL PROTECTED]> wrote: > > [...] > > > Thanks for the answer, Ralf. My problem is that I can't build > > > applications under Win32 platform. > > > > > > Is anybody able to build and uplownload on > > > ftp://contrib:[EMAIL PR

Re: OpenSSl 0.9.2b test failed

1999-03-24 Thread Bill Doster
At 07:40 PM 3/24/99 +0100, you wrote: >On Wed, Mar 24, 1999, Igor S. Livshits wrote: > >> I am attempting to upgrade to mod-ssl-2.2.6-1.3.6 and am having >> problems building openssl-0.9.2b. Configuration and compilation seems >> to go fine, but when I run the tests, I get this failure: >> >> .

Re: OpenSSl 0.9.2b test failed

1999-03-24 Thread Ed Kubaitis
(Hi Igor) This is almost certainly a problem due to building openssl-0.9.2b with RSAref. The problem is that OAEP is a new RSA "encryption scheme" defined in RFC2347 dated October 1998. RSAref 2.0 appears to date back to 1994. My fond hope here is that the "make test" failure is a minor oversigh

Re: [BugDB] https only sends 65536 bytes (PR#134)

1999-03-24 Thread Allan Liska
Sounds more like an MTU problem. Perhaps the MTU for port 443 is set to a lower number than for port 80 on your router? HTH [EMAIL PROTECTED] wrote: > > Full_Name: Paul Curtis > Version: mod_ssl/2.2.2 SSLeay/0.9.0b > OS: Linux > Submission from: nyor1ts1.ny.us.ibm.net (165.87.14.10) > > A la

Re: ANNOUNCE: mod_ssl 2.2.5-1.3.4

1999-03-24 Thread tvaughan
"Ralf S. Engelschall" <[EMAIL PROTECTED]> writes: [snip] > Yeah, the problem is that OpenSSL doesn't know these "ENCRYPTED PRIVATE KEY" > headers. Mod_ssl cannot change this, of course. The question now is: From > where do they come, i.e. which program created this format? And what's in > this

Re: Basic authentication problems

1999-03-24 Thread Ralf S. Engelschall
On Wed, Mar 24, 1999, gil wrote: > I am running Server: Red Hat Secure/2.0 (Unix) PHP/3.0.3 mod_ssl/2.0.7 > SSLeay/0.9.0b and cannot get basic authentication to work. > > >From my httpd.conf in my non-SSL Apache 1.3.4, I cut and paste the > following section into my SSL httpd.conf (I'm running

Basic authentication problems

1999-03-24 Thread gil
Hi, I am running Server: Red Hat Secure/2.0 (Unix) PHP/3.0.3 mod_ssl/2.0.7 SSLeay/0.9.0b and cannot get basic authentication to work. >From my httpd.conf in my non-SSL Apache 1.3.4, I cut and paste the following section into my SSL httpd.conf (I'm running two apache daemons) AuthName

Re: [BugDB] https only sends 65536 bytes (PR#134)

1999-03-24 Thread bugdb-mod-ssl
On Wed, Mar 24, 1999, [EMAIL PROTECTED] wrote: > Full_Name: Paul Curtis > Version: mod_ssl/2.2.2 SSLeay/0.9.0b > OS: Linux > Submission from: nyor1ts1.ny.us.ibm.net (165.87.14.10) > > A large PDF file, ~221KB, gets truncated at 65536 bytes. > There are no errors logged, the access log shows a c

Now I can be my own CA but there's more...

1999-03-24 Thread Juan Carlos Castro y Castro
Carlo Marcelo Arenas Belon wrote: > > Juan Carlos Castro y Castro wrote: > > > > Hi! I just bought a Brazilian RH Linux distribution with Apache 1.3.3 > > and mod_ssl 2.0.something. When I follow the instructions to create my > > own CA and sign the server certificate I just created, I get this i

Re: OpenSSl 0.9.2b test failed

1999-03-24 Thread Ralf S. Engelschall
On Wed, Mar 24, 1999, Igor S. Livshits wrote: > I am attempting to upgrade to mod-ssl-2.2.6-1.3.6 and am having > problems building openssl-0.9.2b. Configuration and compilation seems > to go fine, but when I run the tests, I get this failure: > > ./rsa_oaep_test > Decryption failed! > Decrypt

[BugDB] https only sends 65536 bytes (PR#134)

1999-03-24 Thread bugdb-mod-ssl
Full_Name: Paul Curtis Version: mod_ssl/2.2.2 SSLeay/0.9.0b OS: Linux Submission from: nyor1ts1.ny.us.ibm.net (165.87.14.10) A large PDF file, ~221KB, gets truncated at 65536 bytes. There are no errors logged, the access log shows a completed request delivering 65536 bytes. The problem does no

OpenSSl 0.9.2b test failed

1999-03-24 Thread Igor S. Livshits
Hello, I am attempting to upgrade to mod-ssl-2.2.6-1.3.6 and am having problems building openssl-0.9.2b. Configuration and compilation seems to go fine, but when I run the tests, I get this failure: ./rsa_oaep_test Decryption failed! Decryption failed! Decryption failed! make[1]: *** [test_rsa

Re: [BugDB] Mod_SSL and PHP 3.0.7? (PR#132)

1999-03-24 Thread John Hoffmann
On Wed, Mar 24, 1999 at 08:22:06AM +0100, [EMAIL PROTECTED] wrote: > On Wed, Mar 24, 1999, [EMAIL PROTECTED] wrote: > > > Full_Name: John Hoffmann > > Version: 2.2.5-1.3.4 > > OS: Solaris 2.6 > > Submission from: stargate.trytel.com (209.167.85.20) > > > > I'm trying to switch from StrongHold 2.

2.2.6-1.3.6 problems

1999-03-24 Thread Magnus Stenman
I'm having some strange problems... When compiling for the mod_ssl-2.2.6-1.3.6 RPMs I get a server that works with Win Netscape 4 Win M$IE 4, but *not* with Mac Netscape 4.5 Linux Netscape 4.08 (ssl connections that is, normal connections work fine) I use Redhat 5.2, kernel 2.2.4, openssl 0.9.

Re: Basic auth with SSL - again

1999-03-24 Thread Trung Tran-Duc
> > > "Ralf S. Engelschall" <[EMAIL PROTECTED]> wrote: > [...] > > > Thanks for the answer, Ralf. My problem is that I can't build > > applications under Win32 platform. > > > > Is anybody able to build and uplownload on > > ftp://contrib:[EMAIL PROTECTED]/sw/mod_ssl/ (read/write > > ac

Re: [BugDB] OpenSSL: error:140943FC:SSL routines:SSL3_READ_BYTES:sslv3 (PR#133)

1999-03-24 Thread Andre Gustavo de Carvalho Albuquerque
At 15:44 24/03/1999 +0100, you wrote: >On Wed, Mar 24, 1999, [EMAIL PROTECTED] wrote: > >> Full_Name: Andre Albuquerque >> Version: 2.2.6-1.3.6 >> OS: Linux 2.0.36 >> Submission from: (NULL) (161.148.222.154) >> >> I have just installed the new mod_ssl-2.2.6-1.3.6 with the new >> apache 1.3.6 di

Re: [BugDB] OpenSSL: error:140943FC:SSL routines:SSL3_READ_BYTES:sslv3 (PR#133)

1999-03-24 Thread Ralf S. Engelschall
On Wed, Mar 24, 1999, [EMAIL PROTECTED] wrote: > Full_Name: Andre Albuquerque > Version: 2.2.6-1.3.6 > OS: Linux 2.0.36 > Submission from: (NULL) (161.148.222.154) > > I have just installed the new mod_ssl-2.2.6-1.3.6 with the new > apache 1.3.6 distrib and openssl 0.9.2b, but, depite of a clea

Re: ANNOUNCE: mod_ssl 2.2.5-1.3.4

1999-03-24 Thread Ralf S. Engelschall
On Fri, Mar 19, 1999, [EMAIL PROTECTED] wrote: > "Ralf S. Engelschall" <[EMAIL PROTECTED]> writes: > > >*) The SSLCertificateFile and SSLCertificateKeyFile directives now can read > > PEM (=DER+Base64+headers), DER+Base64 (without headers) and plain DER > > format certificate and

[BugDB] OpenSSL: error:140943FC:SSL routines:SSL3_READ_BYTES:sslv3 (PR#133)

1999-03-24 Thread bugdb-mod-ssl
Full_Name: Andre Albuquerque Version: 2.2.6-1.3.6 OS: Linux 2.0.36 Submission from: (NULL) (161.148.222.154) I have just installed the new mod_ssl-2.2.6-1.3.6 with the new apache 1.3.6 distrib and openssl 0.9.2b, but, depite of a clean compiling, I have the following error while trying to get

Re: POST problem

1999-03-24 Thread Tony Locke
Ralf S. Engelschall wrote: > Ok, then I've to check now POST+keepalive+redirection, too. What a nice thing > that the HTTP protocol makes has such a lot of esoteric combinations > possibleI'll investigate when I find time. Just FYI, i've also come across the POST+keepalive+redirection proble

Re: GSID, mod_ssl and Apache...

1999-03-24 Thread Patrik Carlsson
Ralf S. Engelschall wrote: > Then this is a client problem! The server cannot do anything here. At least > Netscape is very smart and remembers that he is reconnecting to a server with > a GlobalID cert and then _immediately_ starts with a strong cipher and never > does the stepup again (at least

ANNOUNCE: mod_ssl 2.2.6-1.3.6

1999-03-24 Thread Ralf S. Engelschall
Ok, after an additional delay of one week for OpenSSL 0.9.2b and another tarball rolling round for Apache 1.3.6 (1.3.5 was skipped because of last minute trouble), we can finally sync the triple Apache+mod_ssl+OpenSSL with the remaining part: mod_ssl 2.2.6 which both upgrades to Apache and uses t

Re: Basic auth with SSL - again

1999-03-24 Thread Ralf S. Engelschall
On Tue, Mar 23, 1999, Achille M. Luongo wrote: > > > I installed Apache/1.3.3 (Win32) mod_ssl/mod_ssl/2.1b8 SSLeay/0.9.0b. > > > > 2.1b8? Oh, that's really _OLD_, I hope you now this. I've no clue on your > > problem, but this is the first version which ran on Win32, so I strongly > > suggest t

Re: GSID, mod_ssl and Apache...

1999-03-24 Thread Ralf S. Engelschall
On Tue, Mar 23, 1999, Patrik Carlsson wrote: > Ralf S. Engelschall wrote: > > > Don't look at Microsoft papers when you want to understand anything, please. > > Instead look inside the SSLv3 spec or the TLSv1 RFC. Yes, the stuff is called > > renegotation of parameters and is nothing more than

Re: [BugDB] Mod_SSL and PHP 3.0.7? (PR#132)

1999-03-24 Thread bugdb-mod-ssl
On Wed, Mar 24, 1999, [EMAIL PROTECTED] wrote: > Full_Name: John Hoffmann > Version: 2.2.5-1.3.4 > OS: Solaris 2.6 > Submission from: stargate.trytel.com (209.167.85.20) > > I'm trying to switch from StrongHold 2.4 to Apache 1.3.4 with > mod_ssl, and I must say the installation went 200 times ea