RE: Problem with IE5.0 connecting

2000-07-19 Thread Seb Bacon
> On Tue, Jul 18, 2000 at 03:02:11PM +0200, Ronald Bootsman wrote: > > I have just installed apache 1.3.12 with mod_ssl > 2.6.4-1.3.12 on FreeBSD 3.2 > > Starting Apache with SSL runs, http on 80 and https on 443 > > But trying to connect to https port fails > > Checked with curl, gives me the

RE: What's this error?

2000-07-19 Thread David Rees
Hmmm, I'm seeing occasional messages like: [Wed Jul 19 11:57:35 2000] [notice] child pid 237216 exit signal Abort (6) [Wed Jul 19 14:39:28 2000] [notice] child pid 231042 exit signal Bus error (10) We mostly see Bus errors, and not that frequent. This is on IRIX 6.5 running with mod_ssl as a DS

RE: Problem with Apache

2000-07-19 Thread David Rees
Judging by the problems you, Jeff Gelina and others have had with using RPMs to install mod_ssl, I can't say that I recommend it! It seems that the most reliable way to get mod_ssl running is to compile entirely from source. -Dave > -Original Message- > From: [EMAIL PROTECTED] > [mailto

Re: Problem with Apache

2000-07-19 Thread Dana Powers
Are you using the mm package with apache (shared memory libs)? I also added that when recompiling and I no longer have the restart coredump. Dana On Wed, 19 Jul 2000, Victor wrote: > Well, anyone have any clue as to why this crashing might occur? Here is > the backtrace again, just in case you

Re: using an https URL from a WAP device

2000-07-19 Thread Bruce
I'm not sure if this is correct. The Nokia simulator IMPLIES that httpS does in fact work although I currently do not have a valid vertificate to test it out on. BUT the tracing mechanism is NOT showing an error... There is a an excellent decsription on how to setup sites for WAP browsers on Pag

RE: SSLMutex error

2000-07-19 Thread David Rees
Hmmm, looks like an entry for the FAQ! -Dave > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Diana Moreland > Sent: Wednesday, July 19, 2000 10:00 AM > To: [EMAIL PROTECTED] > Subject: Re: SSLMutex error > > > Thanks for everybody's help. I fina

Re: SSLMutex error

2000-07-19 Thread Diana Moreland
Thanks for everybody's help. I finally got it fixed. Here's what I did (for anybody else that might run in to this.) I tried to change the ownership of the logs directory to the nobody user but it would not change. I looked in my passwd file and discovered the nobody user had the shell set to

Re: Problem with Apache

2000-07-19 Thread Victor
Well, anyone have any clue as to why this crashing might occur? Here is the backtrace again, just in case you didn't see it (I kind of messed up on the first post, sorry) (gdb) bt #0 0x1c1110 in SSL_CTX_ctrl () #1 0x4b7d8 in ssl_init_ConfigureServer (s=0x2f73b8, p=0x2ca1d0, sc=0x2f9ca8) at ssl_

Re: using an https URL from a WAP device

2000-07-19 Thread Balázs Nagy
Bruno Melloni wrote: > > It was my understanding that the WAP forum (as well as all of the WAP gateway > vendors) claim that even though you need extra components for a mobile device to > encrypt the communication between the device and the WAP gateway, the > communication between the WAP gateway

RE: Problem with Apache

2000-07-19 Thread Dana Powers
I had this same problem and the stack trace pointed to mod_ssl. I am not sure what the problem was, but I recompiled everything (openssl, mod_ssl, mod_perl (JServ in your case) and apache) and it no longer dumped core. I originally installed precompiled openssl packages and I think this was my pro

Re: using an https URL from a WAP device

2000-07-19 Thread Winged Wolf
If there was some list of error messages that you were getting, we might be able to assist. As it is, though, "cryptic error messages" are the only things that allow us to diagnose a problem and assist you in resolving it. One error message might be because you don't have a trusted third party s

Re: Problem with Apache

2000-07-19 Thread Victor
It's not JServ. When I first start apache, JServ works (so does everything else). However, when I restart, nothing appears in the error log. I can only assume it's Mod-SSL since that is what the backtrace is showing (I posted it earlier). Any help welcome. Thanks Craig Skelton wrote: > -BEG

Re: Problem with Apache

2000-07-19 Thread Victor
Here is a more complete BackTrace. data[/usr/www]# gdb ./bin/httpsd core (gdb) bt #0 0x1c1110 in SSL_CTX_ctrl () #1 0x4b7d8 in ssl_init_ConfigureServer (s=0x2f7408, p=0x2ca1d0, sc=0x2f9cd0) at ssl_engine_init.c:533 #2 0x4adac in ssl_init_Module (s=0x2ca1f8, p=0x2ca1d0) at ssl_engine_init.c:298

mod_ssl, mod_perl and Apache::DBI

2000-07-19 Thread Edward Thomas
Dear All, I have a site which utilises two Apache servers one one machine. One handes port 80 and supplies runs most of the site, the other is built with mod_ssl and handles port 443, performingnall the checkout operations. My problem is, whenever I include (with a startup file) Apache::DBI, the

Re: mod_ssl/Internet Explorer/Thawte incompatibility

2000-07-19 Thread David Rees
On Wed, Jul 19, 2000 at 12:24:01PM +0100, Edward Thomas wrote: > Dear All, > > I am running a site based around mod_ssl 2.6.5, open ssl 0.9.5a and Apache > 1.3.12 using a Thawte "Super Certificate" (designed to allow new browsers to > use 128 bit encryption outside the USA). > > The problem is t

Re: IE5 and Client Authentication

2000-07-19 Thread David Rees
On Tue, Jul 18, 2000 at 01:10:12PM +0100, Stuart Gall wrote: > > It all works just fine with Netscape, however with IE5 5.01 and 5.01SP1 > it is very unreliable. > Most of the time when I enter the URL I get > "DNS Error or server unreachable" > > After several refreshes it prompts for the cert

Re: Problem with Apache

2000-07-19 Thread Victor
Here is a backtrace, however it could be JServ. Anything useful here? data[/usr/www]# gdb ./bin/httpsd core GNU gdb 4.17 Copyright 1998 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it u

Re: What's this error?

2000-07-19 Thread Paul
> > I have also noted a fair amount of > > [Wed Jul 19 16:01:58 2000] [notice] child pid 24703 exit signal > > Segmentation Fault (11) I get this, too, a *LOT*. > Err... I'm convinced that our current mod_ssl 2.6.5 is 100% stable > and does not produce any segfaults. If you really get segfa

Re: using an https URL from a WAP device

2000-07-19 Thread Bruno Melloni
It was my understanding that the WAP forum (as well as all of the WAP gateway vendors) claim that even though you need extra components for a mobile device to encrypt the communication between the device and the WAP gateway, the communication between the WAP gateway and the web server is supposed

Client Information

2000-07-19 Thread Billy Smith
I am using modssl and I would like to be able to get the SSL_CLIENT_S_DN_CN into the environment info. When I dump the client info currently, I only get the client certificate. Any ideas on how I can get this? __ Apache

[BugDB] init: Failed to generate temporary 512 bit RSA private key (PR#407)

2000-07-19 Thread modssl-bugdb
Full_Name: Robert Aden Version: 2.6.0-1.3.12 OS: bsdi 3.1 Submission from: (NULL) (195.67.147.20) I think the subject pretty much says it all. Don't really know if this is a bug or a bad configuration on my system but i cant find anything wrong and the same setup works on bsdi4.1. using: apache

Broken link in www.modssl.org

2000-07-19 Thread Roy Bryant
There appears to be a problem on this page of your site. On your page http://www.modssl.org/news/ when you click on your link to http://www.modssl.org/bugdb/ you get the error: Not found As recommended by the Robot Guidelines, this email is to explain our robot's activities and to le

Re: Unable to configure verify locations for client authentication

2000-07-19 Thread Lynette Bellini
> On Fri, Jul 14, 2000 at 05:37:46PM -0500, Lynette Bellini wrote: > > > > solaris 2.5.1, apache 1.3.12, mod_ssl 2.6.5-1.3.12, openssl-0.9.5a > > > > [Fri Jul 14 17:28:19 2000] [error] mod_ssl: Init: (www.jaws.umn.edu:8443) U nable to configure verify locations for client authentication >

Too restrictive SSLCipherSuite

2000-07-19 Thread Andreas de Pretis
Hi everybody, i just received my Certificate from Thawte, Inc., configured Apache to use this Certificate and restarted. When connection via IE 5.01 (56 bit) or NS 4.7 (128 bit) the connection refused and i get the following entry in my SSL-Engine Logfile: [18/Jul/2000 18:41:24 05805] [error] Op

IE5 and Client Authentication

2000-07-19 Thread Stuart Gall
Hello, I have set up mod-ssl with SSLVerifyClient require It all works just fine with Netscape, however with IE5 5.01 and 5.01SP1 it is very unreliable. Most of the time when I enter the URL I get "DNS Error or server unreachable" After several refreshes it prompts for the certificate to use.

RE: [BugDB] Problems connecting to https thru RadWare WSD (PR#413)

2000-07-19 Thread Segerlund, Lars
Radware got some persistent connection thing you also can try out, the same setup works for me :-) -Original Message- From: Mads Toftum [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 19, 2000 12:49 PM To: [EMAIL P

mod_ssl/Internet Explorer/Thawte incompatibility

2000-07-19 Thread Edward Thomas
Dear All, I am running a site based around mod_ssl 2.6.5, open ssl 0.9.5a and Apache 1.3.12 using a Thawte "Super Certificate" (designed to allow new browsers to use 128 bit encryption outside the USA). The problem is that, while the site works fine with Netscape (versions < 4.7 using 56 bit enc

Re: [BugDB] Problems connecting to https thru RadWare WSD (PR#413)

2000-07-19 Thread Mads Toftum
On Wed, Jul 19, 2000 at 12:38:59PM +0200, [EMAIL PROTECTED] wrote: > Hi ! > > Did dig deeper into the problem and found out that an ssl connect works > thru the wsd when opening a server with openssl: > openssl s_server -accept 8080 -cert server.crt -key server.key -www > > To this I can connect

Re: [BugDB] Problems connecting to https thru RadWare WSD (PR#413)

2000-07-19 Thread modssl-bugdb
Hi ! Did dig deeper into the problem and found out that an ssl connect works thru the wsd when opening a server with openssl: openssl s_server -accept 8080 -cert server.crt -key server.key -www To this I can connect with netscape to port 8080 and get a webpage. But direct connection to the web-s

Re: What's this error?

2000-07-19 Thread Mads Toftum
On Wed, Jul 19, 2000 at 10:37:59AM +0200, Ralf S. Engelschall wrote: > > Err... I'm convinced that our current mod_ssl 2.6.5 is 100% stable and does > not produce any segfaults. If you really get segfaults, some other component > causes it. Let me guess: You're running PHP or mod_ssl+OpenSSL as

Re: What's this error?

2000-07-19 Thread Ralf S. Engelschall
On Wed, Jul 19, 2000, Jie Gao wrote: > > > I am getting this error in the log: > > > > > > [Tue Jul 18 10:16:57 2000] [error] OpenSSL: error:14094412::lib(20) >:func(148) :reason(1042) > > > > > > How is error message interpreted? > > > > Hmm... strange, I cannot imagine why this happens.

Re: 'sign.sh' equivalent for WinNT?

2000-07-19 Thread Mads Toftum
On Wed, Jul 19, 2000 at 01:02:37PM +0530, Anil BR wrote: > Hello, > > I am running Apache/1.3.12 (Win32) + mod_ssl/2.6.4 + OpenSSL/0.9.5a on > WinNT. > For testing purpose I tried to create a new server certificate using the FAQ > list at: > http://www.modssl.org/docs/2.6/ssl_faq.html #ToC28 an

Re: SSLMutex error

2000-07-19 Thread Mads Toftum
On Tue, Jul 18, 2000 at 06:02:24PM -0400, Diana Moreland wrote: > Thanks for the suggestion but when I tried it, the ownership of the mutex file did > not change. The owner is still displayed as root. Hmmm - try stopping apache rm any leftover mutex files and start again. vh Mads Toftum -- `D

'sign.sh' equivalent for WinNT?

2000-07-19 Thread Anil BR
Hello, I am running Apache/1.3.12 (Win32) + mod_ssl/2.6.4 + OpenSSL/0.9.5a on WinNT. For testing purpose I tried to create a new server certificate using the FAQ list at: http://www.modssl.org/docs/2.6/ssl_faq.html #ToC28 and #ToC29 I could create a server.csr file.Since I want to create and u