Re: client certificates

2000-07-10 Thread Lutz Jaenicke
On Tue, Jul 11, 2000 at 08:32:09AM +0200, Thomas Barthel wrote: > Hello, > > I have installed apache with mod_ssl and it works well. > Now I create client certificates with openssl and want > to send them with "application/x-x509-user-cert" to the > browser. I tested DER, PEM and PKCS12 but nothi

client certificates

2000-07-10 Thread Thomas Barthel
Hello, I have installed apache with mod_ssl and it works well. Now I create client certificates with openssl and want to send them with "application/x-x509-user-cert" to the browser. I tested DER, PEM and PKCS12 but nothing really worked. Netscape says it doesn't know the corresponding private k

RE: which port ? 80 or 443

2000-07-10 Thread Filip Van Laenen
Hi, I don't know why your servlet always prints that it is listening on port 80, but yesterday I managed to remove port 80 from my server by changing the httpd.conf file in the following manner: 8>< # # Port: The port to which the standalon

Re: certificates

2000-07-10 Thread Ralf S. Engelschall
On Tue, Jul 11, 2000, Segerlund, Lars wrote: > Anybody who knows if mod_ssl can handle 'step up' connections ? > > In other words start a 40 bit and send a Thawte certificate wich makes the > browser renegotiate for 128 bit ? ( encryption key's ). Yes, mod_ssl supports the step up of the Serve

certificates

2000-07-10 Thread Segerlund, Lars
Hi Anybody who knows if mod_ssl can handle 'step up' connections ? In other words start a 40 bit and send a Thawte certificate wich makes the browser renegotiate for 128 bit ? ( encryption key's ). / Lars Segerlund. __ Apach

Problems Starting up Apache and mod_ssl

2000-07-10 Thread george
Hello, I recently installed the following: Apache 1.3.12 mod_ssl-2.6.5-1.3.12 openssl-0.9.5a mod_php-4.0.1pl2 The specs of my computer are: Best Linux 2000 R2 Pentium 166 48 MB RAM 10 GB HD # /usr/local/apache/bin/apachec

BSDI 4.1 and modssl help. *urgent*

2000-07-10 Thread moses von
We have had modssl working for a very long time, and it worked fine from BSDI 2.1 till 4.0.1. As soon as we installed BSDI 4.1, our httpd server stopped working.. It starts up but only a single process starts, and basically does nothing. So we decided to re-compile apache, and used all of the la

which port ? 80 or 443

2000-07-10 Thread Yu, Leo
Title: which port ? 80 or 443   Hi, I  configure a  Linux system to run Apache and Jserv and SSL.  The server is listening to both port 80     and port 443 (for SSL).  I have a servlet running on the system to print out which port is request is coming form The pr

Re: Client auth (certs): Do I really need to say "OK" every time

2000-07-10 Thread Mads Toftum
On Mon, Jul 10, 2000 at 10:36:07AM +0200, Albert Mietus wrote: > > Hai all > > I have installed apache with modssl on a FreeBSD box. I also made > several CA's, server-cert an client-certs. Nice. > > At the along run, I want to use client authorization for a (big) part > of my server; now I'm

Re: Password

2000-07-10 Thread Ralf S. Engelschall
On Mon, Jul 10, 2000, Al Faller wrote: > Hi, I am new with this list and modssl. I am attempting to have my secure > server come up when my linux server restarts. Unfortunately it prompts for > the unencryption password, so I cannot automate it. What can I do to > automate this process? http:

Re: Anyone seen cpu->100% with mod_ssl 2.6.5, apache 1.3.12

2000-07-10 Thread Mads Toftum
On Mon, Jul 10, 2000 at 09:52:26AM -0700, David Rees wrote: > > Keep in mind the large performance penalty going with no shared ssl cache. > Running some tests I've found the speed drops by about 30% when going dbm to > none. shm was about 20-30% faster than dbm. > This is AFAIK only true if yo

[BugDB] apachectl restart problem (PR#409)

2000-07-10 Thread modssl-bugdb
Full_Name: Tom Emmel Version: 2.6.5-1.3.12 OS: linux Submission from: (NULL) (198.76.172.200) Running "apachectl restart" causes the apache servers to stop when apache is running with mod_ssl enabled (startssl). Configuration: linux 6.0 apache-1.3.12 mod_ssl-2.6.5-1.3.12 openssl-0.9.4 Steps t

HTTP spoken on HTTPS port?

2000-07-10 Thread Ajay Sharma
One of our users is saying that they can't get connected to the secured site in Netscape (don't know the *exact* version). I tried to connect on several different versions and it works fine for me. But I did find this error in the log file: [Sun Jul 9 11:41:39 2000] [error] mod_ssl: SSL hands

Re: From Saroj

2000-07-10 Thread James L Bond
saroj, you can install apache along with mod_ssl . I have recently insatlled it on my site, and it works just fine. As far as the certificates are concerned, when you install apache, either you can make your own certificate (which the ppl. accessing your site should be ready to accept ), or yo

RE: Anyone seen cpu->100% with mod_ssl 2.6.5, apache 1.3.12

2000-07-10 Thread David Rees
> From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Mads Toftum > Sent: Monday, July 10, 2000 7:03 AM > > On Mon, Jul 10, 2000 at 04:58:37PM +1000, [EMAIL PROTECTED] wrote: > > Anyone seen this with mod_ssl 2.6.5 and apache 1.3.12? Web server > > non-responsive, > > check the box an

Re: [OT] Mailing list test

2000-07-10 Thread Ralf S. Engelschall
On Sun, Jul 09, 2000, Mads Toftum wrote: > Is the mailing list down ... no need to answer that - if it turns up on the > list then the answer is no ;-) > There seems to have been no postings to modssl-users or any of the openssl-* > lists since some time saturday afternoon when openssl-users wen

Re: Testing https

2000-07-10 Thread phil foster
configure it to a different port and fire it up. it should run fine in conjunction with your production server. On Mon, 10 Jul 2000, Diana Moreland wrote: > Date: Mon, 10 Jul 2000 09:32:11 -0400 > From: Diana Moreland <[EMAIL PROTECTED]> > Reply-To: [EMAIL PROTECTED] > To: [EMAIL PROTECTED] > Su

Re: Client auth (certs): Do I really need to say "OK" every time

2000-07-10 Thread Schaefer,Lorrayne J.
Here's what you need to do to not have Netscape prompt you each and every time for a certificate: Click on the Security icon at the top of your browser window (there's a lock on it). Next, click on the Navigator tab. You will see a pull down menu labeled "Certificate to identify you to a web sit

Re: Netscape Crash if "SSLVerifyClient require" !!!

2000-07-10 Thread Mads Toftum
On Mon, Jul 10, 2000 at 03:05:14PM +0200, Mohamed LRHAZI wrote: > Astonishing anough, I found a workaround! > If I enter in navigator propreties and choose my personal certificate so > that Netscape > doesnt tell me the site requests client certificate and just goes ahead > and sends mine > IT

Re: Anyone seen cpu->100% with mod_ssl 2.6.5, apache 1.3.12

2000-07-10 Thread Mads Toftum
On Mon, Jul 10, 2000 at 04:58:37PM +1000, [EMAIL PROTECTED] wrote: > Anyone seen this with mod_ssl 2.6.5 and apache 1.3.12? Web server > non-responsive, > check the box and one httpd process is maxing out a CPU. Attach using gdb > and it > seems to be stuck in ssl_scache_dbm_status. Oh, and the ss

Client auth (certs): Do I really need to say "OK" every time

2000-07-10 Thread Albert Mietus
Hai all I have installed apache with modssl on a FreeBSD box. I also made several CA's, server-cert an client-certs. Nice. At the along run, I want to use client authorization for a (big) part of my server; now I'm doing some test. Functionally it is working, I can only "login" when I have a

Password

2000-07-10 Thread Al Faller
Hi, I am new with this list and modssl. I am attempting to have my secure server come up when my linux server restarts. Unfortunately it prompts for the unencryption password, so I cannot automate it. What can I do to automate this process? Thanks Al __

Testing https

2000-07-10 Thread Diana Moreland
Hello everybody, What methods would you folks recommend for testing https once modssl is installed? Thanks in advance, Diana __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List

Netscape Crash if "SSLVerifyClient require" !!!

2000-07-10 Thread Mohamed LRHAZI
Hello all, I am not quite sure that this is the right forum to ask for help, but maybe you could tell me where to go... I am setting up SSL secured webmail access using this software config : Solaris 2.6/Sparc openssl-0.9.5a mod_ssl-2.6.4-1.3.12 apache_1.3.12 php-4.0.0 imap-4.7c mm-1.1.2 imp-2.2.

Re: Help : Annoying information windows in Internet Explorer ?

2000-07-10 Thread Gianluca Morello
- Original Message - From: Paykar Chamani   What are 'Enroll' and 'IControl'?     Thank you,   Paykar Chamani Enroll and IControl are ActiveX controls provided by Microsoft (only!) for MS Internet Explorer  to handle the request and the download of c

Anyone seen cpu->100% with mod_ssl 2.6.5, apache 1.3.12

2000-07-10 Thread BAnderson
Anyone seen this with mod_ssl 2.6.5 and apache 1.3.12? Web server non-responsive, check the box and one httpd process is maxing out a CPU. Attach using gdb and it seems to be stuck in ssl_scache_dbm_status. Oh, and the ssl_scache.pag seems quite large too. cheers, Barry ps forgive the .sig polic

SSLCipherSuite: HIGH / MEDIUM

2000-07-10 Thread Filip Van Laenen
Hi all, I have a question regarding the HIGH and MEDIUM cipher suites in the option SSLCipherSuite. The reference (chapter 3) says that HIGH is short for 'all ciphers using Triple-DES', while MEDIUM is short for 'all ciphers with 128 bit encryption'. It seems to me that this gives the appreciatio

[OT] Mailing list test

2000-07-10 Thread Mads Toftum
Is the mailing list down ... no need to answer that - if it turns up on the list then the answer is no ;-) There seems to have been no postings to modssl-users or any of the openssl-* lists since some time saturday afternoon when openssl-users went into overdrive sending the same messages more th

SSL/TCP shutdown-behaviour

2000-07-10 Thread Harald Langaker
Hi, The last few days I scanned the web for problems regarding Netscape Navigator and SSL but I only came across those MSIE related threads here on the list (I/O errors, EXP56, just to name a few details). One of those postings sent by Ralf Engelschall includes the following > Bascially there a

Re: Netscape Crash if "SSLVerifyClient require" !!!

2000-07-10 Thread Mohamed LRHAZI
Astonishing anough, I found a workaround! If I enter in navigator propreties and choose my personal certificate so that Netscape doesnt tell me the site requests client certificate and just goes ahead and sends mine IT WORKS!!! any ideas still welcome though... Mohamed~ Mohamed LRHAZI wrot