Re: Caching proxy via SSL

1998-11-26 Thread Philp Gwyn
On 25-Nov-98 Ralf S. Engelschall wrote: No, it's not silly IMHO. We do a similar approach on one of the production servers I maintain. As long as you have a secure connection between your Linux and your NT server it's ok, i.e. when you use the above approach you should allow only the Linux

How to enable SSL in per directory basis?

1998-11-26 Thread Surasak Sukhsawas
Dear Sir, If I wanna run only one httpd, how can I config it like this: Directory /htdocs Options SSLEnable /Dir Dir UserDir Options SSLDisable /Dir Dir /htdocs/somedir Options SSLDisable /Dir Please tell me. Thanks in advance. Regards, Surasak.

Re: Newbie question: what's the subject name of certificate?

1998-11-26 Thread S.T. Wong
Hi, Sorry to trouble you again. The Subject of a certificate is the _owner_ of the certificate, i.e. in context of an SSL webserver the DN which described the server. The DN here is usually something like I see, but will someone check the subject (manually?) for the identity of the owner

Re: How to enable SSL in per directory basis?

1998-11-26 Thread Ralf S. Engelschall
On Thu, Nov 26, 1998, Surasak Sukhsawas wrote: If I wanna run only one httpd, how can I config it like this: Directory /htdocs Options SSLEnable /Dir Dir UserDir Options SSLDisable /Dir Dir /htdocs/somedir Options SSLDisable /Dir Please tell me. Thanks in

Re: Newbie question: what's the subject name of certificate?

1998-11-26 Thread Ralf S. Engelschall
On Thu, Nov 26, 1998, S.T. Wong wrote: The Subject of a certificate is the _owner_ of the certificate, i.e. in context of an SSL webserver the DN which described the server. The DN here is usually something like I see, but will someone check the subject (manually?) for the identity of

Re: Howto transfer certificate from IIS to apache

1998-11-26 Thread Ralf S. Engelschall
On Thu, Nov 26, 1998, Nuno Grilo wrote: I have a machine running WindowsNT+IIS with a certificate issued by verisign and which I will soon change to Unix+apache+mod_ssl. I would like to know if it is possible to transfer the private key/certificate from IIS to apache or will I have to ask

Re: How to enable SSL in per directory basis?

1998-11-26 Thread Ralf S. Engelschall
On Thu, Nov 26, 1998, T. Freeland wrote: Our admittedly not very good way around this (and hopefully someone will show a much nicer way after I post this) is: We add the following Rewrite rules to a .htaccess file ... RewriteEngine On RewriteCond %{SERVER_PORT} 80 RewriteRule

Re: Virtual Host

1998-11-26 Thread Ralf S. Engelschall
On Thu, Nov 26, 1998, Surasak Sukhsawas wrote: Thank you for your reply mail. I have another question. If I have a host with the following info: IP: 208.1.2.3 HOSTNAME: myhost.mycompany.com CNAME1: news.mycompany.com CNAME2: secure.mycompany.com Then I wanna run https server on

Re: SSLRequireSSL

1998-11-26 Thread Ralf S. Engelschall
On Thu, Nov 26, 1998, Ernst Heiri wrote: I just tryed to configure in the general part of the configuration (not inside a virtual server). # the SSL part of the document-tree Directory "/xxx/yyy/htdocs/sec" SSLRequireSSL /Directory Starting apache with SSL results in the

Re: Howto transfer certificate from IIS to apache

1998-11-26 Thread Nuno Grilo
On Thu, 26 Nov 1998, Ralf S. Engelschall wrote: On Thu, Nov 26, 1998, Michael Hallgren wrote: On Thu, Nov 26, 1998 at 08:16:14AM +0100, Ralf S. Engelschall wrote: On Thu, Nov 26, 1998, Nuno Grilo wrote: I have a machine running WindowsNT+IIS with a certificate issued by

Re: Howto transfer certificate from IIS to apache

1998-11-26 Thread Ralf S. Engelschall
On Thu, Nov 26, 1998, Nuno Grilo wrote: [..] For instance you can use the following SSLeay commands to convert your iis-server.crt/iis-server.key files (assuming they are named this way and are in DER format) to the server.crt/server.key files for mod_ssl: $ ssleay x509

Re: Howto transfer certificate from IIS to apache

1998-11-26 Thread Michael Hallgren
On Thu, Nov 26, 1998 at 04:54:19PM +, Nuno Grilo wrote: On Thu, 26 Nov 1998, Ralf S. Engelschall wrote: On Thu, Nov 26, 1998, Michael Hallgren wrote: On Thu, Nov 26, 1998 at 08:16:14AM +0100, Ralf S. Engelschall wrote: On Thu, Nov 26, 1998, Nuno Grilo wrote: I