Re: Crypt::SSLeay Raven conflict using apache and web services.

2002-11-30 Thread Keary Suska
of such a conflict and if there is possibly a known remedy for this problem. Any help would be greatly appreciated. IIRC, mod_perl must be loaded in httpd.conf before Raven SSL. Also, Raven should probably be loaded as a DSO, as historically they have had many conflicts when installed statically. Keary

Re: [Crypt::SSLeay] make test fails on Linux

2002-10-30 Thread Keary Suska
ever seen make: *** [test_dynamic] Error 2 It can be many things. What URL did you provide for testing? Can you access that URL through your browser? Keary Suska Esoteritech, Inc. Leveraging Open Source for a better Internet

Re: HTML works fine, PHP...not so good

2002-07-03 Thread Keary Suska
://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] Keary Suska Esoteritech, Inc. Leveraging Open Source for a better Internet

Re: Crypt::SSLeay - net_ssl_test - Perl

2002-06-06 Thread Keary Suska
, you need to download the proper root CA from the certificate vendor. Keary Suska (719) 473-6431 __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL

Re: accept of SSLeay hangs up.

2002-05-01 Thread Keary Suska
solution. You may want to review the section on timing out slow operations as well as blocking/non-blocking I/O in the Programming Perl book. IIRC, this behavior with read() is not uncommon. Keary Suska Esoteritech, Inc. Leveraging Open Source for a better Internet

Re: libcrypto.so.2

2002-02-12 Thread Keary Suska
of the problem apps and rebuilding. That generally forces the app to re-link to the new libs, and I haven't had any problems doing this. Keary Suska Esoteritech, Inc. Leveraging Open Source for a better Internet __ OpenSSL Project

Re: Getting OpenSSL with Apache

2002-02-02 Thread Keary Suska
exists in the required location, there was a problem with the compile, and there should be more log entries describing why it can't be loaded. Keary Suska Esoteritech, Inc. Leveraging Open Source for a better Internet __ OpenSSL

Re: mod_ssl + OpenSSL + Apache

2002-02-02 Thread Keary Suska
on the server. Another issue could be the unclean shutdown habit of certain IE (again) versions. Normally, there are Apache directives to get around this. Keary Suska Esoteritech, Inc. Leveraging Open Source for a better Internet

Re: OffTopic: Base64 over HTTPS

2002-01-30 Thread Keary Suska
, there are no restrictions on the data portion of a post request. Since SSL is basically a tunneling protocol, it does not impact the content of HTTP messages. Keary Suska Esoteritech, Inc. Leveraging Open Source for a better Internet

Re: SQL DB instead of index.txt

2002-01-28 Thread Keary Suska
choose, or be forced to develop their own plugins. Keary Suska Esoteritech, Inc. Leveraging Open Source for a better Internet __ OpenSSL Project http://www.openssl.org User Support Mailing List

Re: SSL.PM question

2002-01-25 Thread Keary Suska
the troublesome line of code to: $proxy_server =~ s|^https?://||i if defined $proxy_server; and *not* initialize the variable as specified above. On second thought, you should do this anyway, as it is much safer overall. Keary Suska Esoteritech, Inc. Leveraging Open Source for a better Internet

Re: sslwrap prograqmm developed from Rick Kaseguma (www.rickk.com)

2002-01-25 Thread Keary Suska
no mean. I haven't used ssl_proxy, but you can find it here: http://www.obdev.at/products/ssl-proxy/ Another product is stunnel, which you can find at: http://www.stunnel.org/ Keary Suska Esoteritech, Inc. Leveraging Open Source for a better Internet

Certificate validation

2002-01-09 Thread Keary Suska
. Is this possible to do without allowing a user on the machine to modify the certificate to circumvent this measure? Keary Suska Esoteritech, Inc. Leveraging Open Source for a better Internet __ OpenSSL Project

Re: Apache mod-ssl: VirtualHost and certificates

2001-11-30 Thread Keary Suska
More specifically, each SSL-enabled virtual host must have as unique public IP with certificates that include the domain name that corresponds to the address. You cannot have an SSL-enabled name-based virtual host. Keary Suska Esoteritech, Inc. Leveraging Open Source for a better Internet From

Re: Problems with loading mod_ssl.so in Apache

2001-11-25 Thread Keary Suska
error messages ;-) Have you verified that you have both a loadmodule and addmodule directive for mod_ssl? Have you verified that indeed the mod_ssl loadable is called mod_ssl.so and is located where the directive says it is relative to the server root (unless it is an absolute path)? Keary Suska

Re: https

2001-11-21 Thread Keary Suska
choice which to use, though the read me states that Net::SSLeay doesn't directly support LWP, so I imagine you will get better results with LWP if you use the library recommended by the author. Keary Suska Esoteritech, Inc. Leveraging Open Source for a better Internet From: Sean O'Riordain [EMAIL

Re: Installation problem with OpenSSL..

2001-11-21 Thread Keary Suska
results. Keary Suska Esoteritech, Inc. Leveraging Open Source for a better Internet From: Sujatha Mukunthan [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Wed, 21 Nov 2001 10:08:23 +0100 To: [EMAIL PROTECTED] Subject: Installation problem with OpenSSL.. Dear OpenSSL team, I am a user

Re: https

2001-11-21 Thread Keary Suska
from my previous email, it is best to use Crypt::SSLeay with LWP, at least according to the author of LWP. Keary Suska Esoteritech, Inc. Leveraging Open Source for a better Internet From: Marko Asplund [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Wed, 21 Nov 2001 23:12:14 +0200 (EET

Re: Questions - new compilation of mod_ssl-2.8.5

2001-11-19 Thread Keary Suska
It is probably an Apache configuration issue. If there was a problem with your mod_ssl binary, Apache probably wouldn't load. Apache doesn't do SSL automatically. You have to specify it in the configuration. Have you looked at httpd.apache.org for documentation? Keary Suska Esoteritech, Inc

Re: openssl compile won't make .so

2001-11-16 Thread Keary Suska
it, though I don't think you will find anything untoward in it either. I may not be an expert *nix programmer, but I am no dummy, and I have been doing this for a while. Keary Suska Esoteritech, Inc. Leveraging Open Source for a better Internet From: J. Johnson [EMAIL PROTECTED] Reply-To: [EMAIL

openssl compile won't make .so

2001-11-15 Thread Keary Suska
, but I'm shooting in the dark since I don't know how the pieces are finally put together in the makefile. There have been RPMs for my system which install .so, so it has to be possible. Does anyone know how to force openssl to build shared objects (gcc 2.9.5, elf support available)? Keary Suska

Re: Man in the middle attacks ?

2001-11-12 Thread Keary Suska
the client is alerted that the server key has changed and has the option to abort, which they should unless they have received instructions otherwise from the sys admin. This flouts the traditional MITM attack. In SSL, this is prevented by peer certificate verification by the PKI system. Keary Suska

Re: Problem with installing Crypt::SSLeay

2001-10-31 Thread Keary Suska
isn't making before make test. Keary Suska Esoteritech, Inc. Leveraging Open Source for a better Internet From: Feng, James [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Wed, 31 Oct 2001 11:02:33 -0500 To: [EMAIL PROTECTED] Subject: Problem with installing Crypt::SSLeay Hi All, When I

Re: Problem with installing Crypt::SSLeay

2001-10-31 Thread Keary Suska
My bad, I was misreading the output. I think the other posters have it covered... Keary Suska Esoteritech, Inc. Leveraging Open Source for a better Internet From: Mark Strong [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Thu, 1 Nov 2001 08:44:19 +1100 To: [EMAIL PROTECTED] Subject

Re: Can not make it with OpenSSL 0.9.6b

2001-10-29 Thread Keary Suska
I don't know about #1, but #2 is because the ar command either isn't installed or isn't in your path. It is usually under /usr/ccs/bin/ on Solaris, which isn't normally in your path. You can use whereis or find to see if it's installed, and modify PATH accordingly. Keary Suska Esoteritech, Inc