Re: Secure Email

1999-12-08 Thread R. DuFresne
There are a number of ssl wrappers for doing mail, pop/imap, nntp, smtp, telnet, etc: edssl, sslproxy, sslwrap, stunnel These are a few I've looked at. Thanks, Ron DuFresne On Wed, 8 Dec 1999, Daniel Sutcliffe wrote: > "Michael A. Clubine" wrote: > > Has anyone setup SSL encryption for Em

Re: Multiple SSL domains?

1999-12-08 Thread Franck Chionna
Nate Carlson wrote: > On Wed, 8 Dec 1999, Franck Chionna wrote: > > > Unless if you configure virtual Ip addresses > > > > Franck > > > > What do you mean by this? Did someone actually figure out a way to host > multiple SSL hosts on a single IP? =) > > -- > Nate Carlson <[EMAIL PROTECTED]>|

Re: Multiple SSL domains?

1999-12-08 Thread wwebb
You can have ONE SSL domain and multiple name based non-SSL domains on the same IP. Date sent: Wed, 8 Dec 1999 14:42:11 -0600 (CST) From: Nate Carlson <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject:Re: Multiple SSL domains? Se

Re: Secure Email

1999-12-08 Thread Steve Palmer
An option, web based email, would be to use one of the many php web mail utilities like IMP, or TWIG. But depending on how fruity (or rather, how much functionality) you want to get with it, it can be time consuming to get it all setup, but it's worth it. http://www.php.net/projects.php3 Ste

Re: CRL Refresh

1999-12-08 Thread Christian Buysschaert
> Hmmm... yes, AFAIK OpenSSL doesn't cache the contents of files under > SSLCARevocationPath, so this should work as a workaround. But, BTW, is it > really a problem to do a graceful restart if a CRL changed? Well, I'm not too familiar with a graceful restart... that is, what's the effect to a h

Re: Secure Email

1999-12-08 Thread Jason Thaxter
There are three things you might mean: 1) ssl-enabled POP or IMAP servers 2) ssh-based tunnelling 3) mod_ssl protecting access to web-based mail Here's some hints: 1) You might want to build in security by finding an SSL patch for your favorite POP or IMAP server. This sounds like what yo

Re: Secure Email

1999-12-08 Thread Daniel Sutcliffe
"Michael A. Clubine" wrote: > Has anyone setup SSL encryption for Email? I have the ssh package up > and running, but haven't read anything about securing email. I did > notice it in my Netscape options however. Sorry for the last reply, one too many glasses of Wine tonight :@) Wrong question

Re: Secure Email

1999-12-08 Thread Daniel Sutcliffe
"Michael A. Clubine" wrote: > Has anyone setup SSL encryption for Email? I have the ssh package up > and running, but haven't read anything about securing email. I did > notice it in my Netscape options however. You want to do some searches on S/MIME, loads of info out there. Haven't seen many

How Can I : Single Sign-on ?

1999-12-08 Thread Jean-Luc Rochat
Hi, I configured mod_ssl for requiring a user certificate in a location. Every time I access an URL in this location I am asked for a certificate (good !) Every sublevel asks again for a certificate , all the time :-( Is there a way to create an "authenticated user session" after the first han

Re: How can I...

1999-12-08 Thread Simon Weijgers
On Wed, 8 Dec 1999, Cliff Woolley wrote: > >>> Simon Weijgers <[EMAIL PROTECTED]> 12/08/99 10:18AM >>> > > >You can infact, but you'll have to recompile OpenSSL with Anonymous > DH > >(diffie-helman) enabled. > > Ahh, true enough. I stand corrected. I was only talking about > RSA-style encryp

Re: Multiple SSL domains?

1999-12-08 Thread Nate Carlson
On Wed, 8 Dec 1999, Franck Chionna wrote: > Unless if you configure virtual Ip addresses > > Franck > What do you mean by this? Did someone actually figure out a way to host multiple SSL hosts on a single IP? =) -- Nate Carlson <[EMAIL PROTECTED]>| Phone : (612)943-8700 http://www.real-

Re: CRL Refresh

1999-12-08 Thread Ralf S. Engelschall
On Wed, Dec 08, 1999, Christian Buysschaert wrote: > I've been experimenting a bit with the SSLCARevocationFile > directive. It does seem to work but when you update the > referenced file (with a new CRL) it is only 'reread' > when you restart Apache. Is this correct? Yes. > Is there any > wa

Secure Email

1999-12-08 Thread Michael A. Clubine
Has anyone setup SSL encryption for Email? I have the ssh package up and running, but haven't read anything about securing email. I did notice it in my Netscape options however. I am running i386 RH 6.1 and sendmail-8.9. Thanks! - Mike -- Michael A. Clubine - [EMAIL PROTECTED] Outer

Re: How can I...

1999-12-08 Thread Cliff Woolley
>>> Simon Weijgers <[EMAIL PROTECTED]> 12/08/99 10:18AM >>> >You can infact, but you'll have to recompile OpenSSL with Anonymous DH >(diffie-helman) enabled. Ahh, true enough. I stand corrected. I was only talking about RSA-style encryption, not even thinking about ADH. I never use ADH (becau

Re: How can I...

1999-12-08 Thread Cliff Woolley
>>> Kenneth Mutka <[EMAIL PROTECTED]> 12/08/99 07:55AM >>> >... run mod_ssl without having Certificates? I just want the crypto from the >package, nothing else. >Is that possible? >If not, what should I choose instead? That's not possible for *any* Public-Key cryptography system unless the clien

[BugDB] Problem with certificates from my own CA (PR#325)

1999-12-08 Thread modssl-bugdb
Full_Name: Claude Gross Version: 2.4.9 OS: Linux 2.2.12-20smp i386 (redhat 6.1) Submission from: noyer.grenoble.urec.cnrs.fr (195.220.197.22) Server: Apache/1.3.9 (Unix) mod_ssl/2.4.9 OpenSSL/0.9.4 I want to use certificate delivered by my own CA. I have done the following : - openssl gen

Re: [BugDB] Invalid method in request E% (PR#324)

1999-12-08 Thread modssl-bugdb
On Wed, Dec 08, 1999, [EMAIL PROTECTED] wrote: > Full_Name: Ken > Version: 2.4.9-1.3.9 > OS: Solaris 2.6 Sparc > Submission from: (NULL) (202.64.57.66) > > This is a question from a newbie. > > I've installed openssl-0.9.4, mm-1.0.12, modssl-2.4.9-1.3.9, apache-1.3.9. I > tried to make my own

Re: How can I...

1999-12-08 Thread Simon Weijgers
On Wed, 8 Dec 1999, Kenneth Mutka wrote: > ... run mod_ssl without having Certificates? I just want the crypto from the > package, nothing else. > Is that possible? > If not, what should I choose instead? You can infact, but you'll have to recompile OpenSSL with Anonymous DH (diffie-helman) enab

RE: Combain Apache + Php + Mod_ssl + OpenSSL

1999-12-08 Thread Rob Bastille
I just set that very same configuration up not a week ago. Was a rather easy install. The way I did it was the typical (right out of the INSTALL file) configuration and makes for setting up apache with mod-ssl. Then I did the apxs install of php. (Read the INSTALL.DSO file). Rob Bastille IT

RE: Combain Apache + Php + Mod_ssl + OpenSSL

1999-12-08 Thread Fitzpatrick, Matthew
With redhat 6.1, I was able to get all of the rpm's I needed from www.modssl.org/contrib/. -Original Message- From: roy [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 07, 1999 10:19 PM To: SSL Subject: Combain Apache + Php + Mod_ssl + OpenSSL Hi, Does any body in here ever try to co

Newbie Question

1999-12-08 Thread wwebb
Extracted the latest distributions of Apache, mod_ssl and Open SSL and the installation went well. I noticed that if named is not running, Apache would not boot, with that fixed it booted and ran well for days. I followed the instructions so that the password would not have to be entered on

MS SGC

1999-12-08 Thread Christian Buysschaert
Hi, I've seen some messages in the 'GlobalID problem' thread which could explain a problem I have... Some new CAs (apart from VeriSign have been allowed to issue SGC certs: Thawte, GlobalSign - ourselves, etc.). I am doing right now some tests on Apache/mod_ssl and as Matthias Loepfe indicated,

CRL Refresh

1999-12-08 Thread Christian Buysschaert
Hi, I've been experimenting a bit with the SSLCARevocationFile directive. It does seem to work but when you update the referenced file (with a new CRL) it is only 'reread' when you restart Apache. Is this correct? Is there any way around it? Perhaps using SSLCARevocationPath is more flexible in

How can I...

1999-12-08 Thread Kenneth Mutka
... run mod_ssl without having Certificates? I just want the crypto from the package, nothing else. Is that possible? If not, what should I choose instead? Regards, Kenneth __ Apache Interface to OpenSSL (mod_ssl)

RE: Error launching Apache

1999-12-08 Thread Philibert de Mercey
Sorry, I've only forgotten to put : --enable-rule=SHARED_CHAIN --enable-rule=SHARED_CORE... Does anyone know where I could buy a brain ? ;-) > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Ralf S. Engelschall > Sent: Wednesday, December 08, 1999

Combain Apache + Php + Mod_ssl + OpenSSL

1999-12-08 Thread roy
Hi, Does any body in here ever try to combain: apache 1.3.9 + mod_ssl2.4.9-1.3.9 + openssl-0.9.4 + php-3.0.12 and success ? Can I get more info how to do that ? Thanks a lot __ Apache Interface to OpenSSL (mod_ssl)

[BugDB] Invalid method in request E% (PR#324)

1999-12-08 Thread modssl-bugdb
Full_Name: Ken Version: 2.4.9-1.3.9 OS: Solaris 2.6 Sparc Submission from: (NULL) (202.64.57.66) This is a question from a newbie. I've installed openssl-0.9.4, mm-1.0.12, modssl-2.4.9-1.3.9, apache-1.3.9. I tried to make my own certificate, signed by a self-created ca.crt. I also tried "make