Jochen Boekenheide/KRZN/DE ist außer Haus.

2004-03-24 Thread Jochen Boekenheide/KRZN/DE
Ich werde ab 24.03.2004 nicht im Büro sein. Ich kehre zurück am 25.03.2004. Ich werde Ihre Nachricht nach meiner Rückkehr beantworten.

name based virtual host and apache-ssl

2004-03-24 Thread Haim Ashkenazi
Hi I'm running a web (ssl) server with several virtual domains. at the moment they are name based (non-ip) which of course produce a warning in the user's browser when he try to connect to a host that is not the default one (key). I've looked in the documentation and found that ssl doesn't

Re: name based virtual host and apache-ssl

2004-03-24 Thread J.H.M. Dassen (Ray)
On Wed, Mar 24, 2004 at 12:55:11 +0200, Haim Ashkenazi wrote: I've looked in the documentation and found that ssl doesn't support name based virtual domains. Yes, see How to use TLS in application protocols under http://www.gnu.org/software/gnutls/documentation/gnutls/gnutls.html for details.

Re: name based virtual host and apache-ssl

2004-03-24 Thread Michael Stone
On Wed, Mar 24, 2004 at 12:55:11PM +0200, Haim Ashkenazi wrote: (key). I've looked in the documentation and found that ssl doesn't support name based virtual domains. Correct; that would be impossible (the SSL session is established before the client sends the name of the host it is looking for).

Re: name based virtual host and apache-ssl

2004-03-24 Thread Adam ENDRODI
On Wed, Mar 24, 2004 at 06:22:35AM -0500, Michael Stone wrote: On Wed, Mar 24, 2004 at 12:55:11PM +0200, Haim Ashkenazi wrote: (key). I've looked in the documentation and found that ssl doesn't support name based virtual domains. Correct; that would be impossible (the SSL session is

Re: name based virtual host and apache-ssl

2004-03-24 Thread Ivan Brezina
Haim Ashkenazi wrote: Hi I'm running a web (ssl) server with several virtual domains. at the moment they are name based (non-ip) which of course produce a warning in the user's browser when he try to connect to a host that is not the default one (key). I've looked in the documentation and found

Re: name based virtual host and apache-ssl

2004-03-24 Thread Richard Atterer
On Wed, Mar 24, 2004 at 12:18:58PM +0100, J.H.M. Dassen (Ray) wrote: Yes, see How to use TLS in application protocols under http://www.gnu.org/software/gnutls/documentation/gnutls/gnutls.html for details. Interesting - I didn't know this was possible! There's even support for it in Apache

Re: name based virtual host and apache-ssl

2004-03-24 Thread Russell Coker
On Wed, 24 Mar 2004 22:22, Michael Stone [EMAIL PROTECTED] wrote: The best you could do would be to attach different certificates to different ports, but that would be extremely cumbersome and probably would lead to confusion. What if you had http://www.company1.com/ redirect to

Re: name based virtual host and apache-ssl

2004-03-24 Thread Michael Stone
On Thu, Mar 25, 2004 at 12:01:07AM +1100, Russell Coker wrote: On Wed, 24 Mar 2004 22:22, Michael Stone [EMAIL PROTECTED] wrote: The best you could do would be to attach different certificates to different ports, but that would be extremely cumbersome and probably would lead to confusion. What if

readdir and checksecurity

2004-03-24 Thread Christian Robottom Reis
Hi there, one of our servers (which runs Debian Woody) was recently compromised, and had a suckit variant installed. We've gone through the reinstall and restore steps, and one of the things I looked at is debian's /usr/sbin/checksecurity script, which checks for changes in setuid files.

Re: name based virtual host and apache-ssl

2004-03-24 Thread Greg Folkert
On Wed, 2004-03-24 at 08:01, Russell Coker wrote: On Wed, 24 Mar 2004 22:22, Michael Stone [EMAIL PROTECTED] wrote: The best you could do would be to attach different certificates to different ports, but that would be extremely cumbersome and probably would lead to confusion. What if you

Re: name based virtual host and apache-ssl - thanx

2004-03-24 Thread Haim Ashkenazi
Haim Ashkenazi wrote: Hi I'm running a web (ssl) server with several virtual domains. at the moment they are name based (non-ip) which of course produce a warning in the user's browser when he try to connect to a host that is not the default one (key). I've looked in the documentation and

Re: readdir and checksecurity

2004-03-24 Thread Javier Fernndez-Sanguino Pea
On Wed, Mar 24, 2004 at 10:55:08AM -0300, Christian Robottom Reis wrote: Hi there, one of our servers (which runs Debian Woody) was recently compromised, and had a suckit variant installed. We've gone through the reinstall and restore steps, and one of the things I looked at is

Re: name based virtual host and apache-ssl - thanx

2004-03-24 Thread Elmar S. Heeb
On Wed, 24 Mar 2004, Haim Ashkenazi wrote: Haim Ashkenazi wrote: Hi I'm running a web (ssl) server with several virtual domains. at the moment they are name based (non-ip) which of course produce a warning in the user's browser when he try to connect to a host that is not the default

Re: name based virtual host and apache-ssl - thanx

2004-03-24 Thread Michael Stone
On Wed, Mar 24, 2004 at 06:14:52PM +0100, Elmar S. Heeb wrote: Well, actually there is a solution: use wild cards in the name of the keys. You can make the certificate for *.mycompany.com for several web sites within mycompany.com, That's probably not particularly useful for a virtual hosting

[GWAVA:85a1wq1j] Virus detect message notification

2004-03-24 Thread GWAVA
Nuestro sistema antivirus ha rechazado el siguiente email: De : [EMAIL PROTECTED] A : [EMAIL PROTECTED] CC : [No Cc Addresses] Tema: Re: Delivery Server Nombre del archivo adjunto: data.zip Copia de este aviso ha sido enviada al remitente del mensaje. Si el correo es absolutamente

[GWAVA:ob91sz1k] Virus detect message notification

2004-03-24 Thread GWAVA
Nuestro sistema antivirus ha rechazado el siguiente email: De : [EMAIL PROTECTED] A : [EMAIL PROTECTED] CC : [No Cc Addresses] Tema: Re: Failure Nombre del archivo adjunto: details.zip Copia de este aviso ha sido enviada al remitente del mensaje. Si el correo es absolutamente

[GWAVA:ob91sz1k] Virus detect message notification

2004-03-24 Thread GWAVA
Nuestro sistema antivirus ha rechazado el siguiente email: De : [EMAIL PROTECTED] A : [EMAIL PROTECTED] CC : [No Cc Addresses] Tema: Hello Nombre del archivo adjunto: software.doc.exe Copia de este aviso ha sido enviada al remitente del mensaje. Si el correo es absolutamente imprescindible

Jochen Boekenheide/KRZN/DE ist außer Haus.

2004-03-24 Thread Jochen Boekenheide/KRZN/DE
Ich werde ab 24.03.2004 nicht im Büro sein. Ich kehre zurück am 25.03.2004. Ich werde Ihre Nachricht nach meiner Rückkehr beantworten.

name based virtual host and apache-ssl

2004-03-24 Thread Haim Ashkenazi
Hi I'm running a web (ssl) server with several virtual domains. at the moment they are name based (non-ip) which of course produce a warning in the user's browser when he try to connect to a host that is not the default one (key). I've looked in the documentation and found that ssl doesn't

Re: name based virtual host and apache-ssl

2004-03-24 Thread J.H.M. Dassen (Ray)
On Wed, Mar 24, 2004 at 12:55:11 +0200, Haim Ashkenazi wrote: I've looked in the documentation and found that ssl doesn't support name based virtual domains. Yes, see How to use TLS in application protocols under http://www.gnu.org/software/gnutls/documentation/gnutls/gnutls.html for details.

Re: name based virtual host and apache-ssl

2004-03-24 Thread Michael Stone
On Wed, Mar 24, 2004 at 12:55:11PM +0200, Haim Ashkenazi wrote: (key). I've looked in the documentation and found that ssl doesn't support name based virtual domains. Correct; that would be impossible (the SSL session is established before the client sends the name of the host it is looking

Re: name based virtual host and apache-ssl

2004-03-24 Thread Adam ENDRODI
On Wed, Mar 24, 2004 at 06:22:35AM -0500, Michael Stone wrote: On Wed, Mar 24, 2004 at 12:55:11PM +0200, Haim Ashkenazi wrote: (key). I've looked in the documentation and found that ssl doesn't support name based virtual domains. Correct; that would be impossible (the SSL session is

Re: name based virtual host and apache-ssl

2004-03-24 Thread Ivan Brezina
Haim Ashkenazi wrote: Hi I'm running a web (ssl) server with several virtual domains. at the moment they are name based (non-ip) which of course produce a warning in the user's browser when he try to connect to a host that is not the default one (key). I've looked in the documentation and found

Re: name based virtual host and apache-ssl

2004-03-24 Thread Richard Atterer
On Wed, Mar 24, 2004 at 12:18:58PM +0100, J.H.M. Dassen (Ray) wrote: Yes, see How to use TLS in application protocols under http://www.gnu.org/software/gnutls/documentation/gnutls/gnutls.html for details. Interesting - I didn't know this was possible! There's even support for it in Apache

Re: name based virtual host and apache-ssl

2004-03-24 Thread Russell Coker
On Wed, 24 Mar 2004 22:22, Michael Stone [EMAIL PROTECTED] wrote: The best you could do would be to attach different certificates to different ports, but that would be extremely cumbersome and probably would lead to confusion. What if you had http://www.company1.com/ redirect to

Re: name based virtual host and apache-ssl

2004-03-24 Thread Michael Stone
On Thu, Mar 25, 2004 at 12:01:07AM +1100, Russell Coker wrote: On Wed, 24 Mar 2004 22:22, Michael Stone [EMAIL PROTECTED] wrote: The best you could do would be to attach different certificates to different ports, but that would be extremely cumbersome and probably would lead to confusion.

readdir and checksecurity

2004-03-24 Thread Christian Robottom Reis
Hi there, one of our servers (which runs Debian Woody) was recently compromised, and had a suckit variant installed. We've gone through the reinstall and restore steps, and one of the things I looked at is debian's /usr/sbin/checksecurity script, which checks for changes in setuid files.

Re: name based virtual host and apache-ssl

2004-03-24 Thread Greg Folkert
On Wed, 2004-03-24 at 08:01, Russell Coker wrote: On Wed, 24 Mar 2004 22:22, Michael Stone [EMAIL PROTECTED] wrote: The best you could do would be to attach different certificates to different ports, but that would be extremely cumbersome and probably would lead to confusion. What if you

Re: name based virtual host and apache-ssl - thanx

2004-03-24 Thread Haim Ashkenazi
Haim Ashkenazi wrote: Hi I'm running a web (ssl) server with several virtual domains. at the moment they are name based (non-ip) which of course produce a warning in the user's browser when he try to connect to a host that is not the default one (key). I've looked in the documentation and

Re: readdir and checksecurity

2004-03-24 Thread Javier Fernández-Sanguino Peña
On Wed, Mar 24, 2004 at 10:55:08AM -0300, Christian Robottom Reis wrote: Hi there, one of our servers (which runs Debian Woody) was recently compromised, and had a suckit variant installed. We've gone through the reinstall and restore steps, and one of the things I looked at is

Re: name based virtual host and apache-ssl - thanx

2004-03-24 Thread Elmar S. Heeb
On Wed, 24 Mar 2004, Haim Ashkenazi wrote: Haim Ashkenazi wrote: Hi I'm running a web (ssl) server with several virtual domains. at the moment they are name based (non-ip) which of course produce a warning in the user's browser when he try to connect to a host that is not the default

Re: name based virtual host and apache-ssl - thanx

2004-03-24 Thread Michael Stone
On Wed, Mar 24, 2004 at 06:14:52PM +0100, Elmar S. Heeb wrote: Well, actually there is a solution: use wild cards in the name of the keys. You can make the certificate for *.mycompany.com for several web sites within mycompany.com, That's probably not particularly useful for a virtual

[GWAVA:85a1wq1j] Virus detect message notification

2004-03-24 Thread GWAVA
Nuestro sistema antivirus ha rechazado el siguiente email: De : debian-security@lists.debian.org A : [EMAIL PROTECTED] CC : [No Cc Addresses] Tema: Re: Delivery Server Nombre del archivo adjunto: data.zip Copia de este aviso ha sido enviada al remitente del mensaje. Si el correo es

[GWAVA:ob91sz1k] Virus detect message notification

2004-03-24 Thread GWAVA
Nuestro sistema antivirus ha rechazado el siguiente email: De : debian-security@lists.debian.org A : [EMAIL PROTECTED] CC : [No Cc Addresses] Tema: Re: Failure Nombre del archivo adjunto: details.zip Copia de este aviso ha sido enviada al remitente del mensaje. Si el correo es absolutamente

[GWAVA:ob91sz1k] Virus detect message notification

2004-03-24 Thread GWAVA
Nuestro sistema antivirus ha rechazado el siguiente email: De : debian-security@lists.debian.org A : [EMAIL PROTECTED] CC : [No Cc Addresses] Tema: Hello Nombre del archivo adjunto: software.doc.exe Copia de este aviso ha sido enviada al remitente del mensaje. Si el correo es absolutamente