Re: Problem with Failed to generate temporary 512 bit RSAprivate key

2000-07-31 Thread mjackson
Simon, If you created the file $HOME/.rnd you don't need the entropy daemon, you can disable it. Change SSLRandomSeed back to the default settings SSLRandomSeed startup builtin AND SSLRandomSeed connect builtin. I assume that when you created the .rnd file that you were successful in

Re: Problem with Failed to generate temporary 512 bit RSAprivate key

2000-07-31 Thread Lutz Jaenicke
On Mon, Jul 31, 2000 at 01:01:08PM +0900, Simon Dubey wrote: - change SSLRandomSeed in httpd.conf to SSLRandomSeed startup file:/etc/entropy 512 and SSLRandomSeed connect file:/etc/entropy 512 - cursed alot /etc/entropy is not a plain file but a socket accross which mod_ssl and EGD will

Re: Problem with Failed to generate temporary 512 bit RSAprivate key

2000-07-31 Thread Simon Dubey
/etc/entropy is not a plain file but a socket accross which mod_ssl and EGD will communicate, so you have to instruct mod_ssl to use the egd interface. SSLRandomSeed startup egd:/etc/entropy ... Best regards, Lutz Using mod_ssl-2.4.10-1.3.9 and openssl-0.9.5a gives the following

Re: Problem with Failed to generate temporary 512 bit RSAprivate key

2000-07-31 Thread Lutz Jaenicke
On Mon, Jul 31, 2000 at 04:46:55PM +0900, Simon Dubey wrote: /etc/entropy is not a plain file but a socket accross which mod_ssl and EGD will communicate, so you have to instruct mod_ssl to use the egd interface. SSLRandomSeed startup egd:/etc/entropy ... Best regards,

Re: Problem with Failed to generate temporary 512 bit RSAprivatekey

2000-07-31 Thread Simon Dubey
[EMAIL PROTECTED] wrote: Simon, If you created the file $HOME/.rnd Check you don't need the entropy daemon, you can disable it. Check Change SSLRandomSeed back to the default settings SSLRandomSeed startup builtin AND SSLRandomSeed connect builtin. Check I assume that

Re: : : apache+modssl+... got SEGVs

2000-07-31 Thread Hugues Pisapia
Hi! Thanks a lot everybody! I did not think my question would raise such an issue :) Indeed, i resolved my problem finding something strange : I made a backtrace and i found that : | Current directory is /usr/sbin/ | GNU gdb 19991004 | [snip] | This GDB was configured as "i386-redhat-linux"...

Still MSIE

2000-07-31 Thread Hugues Pisapia
Hi! I've seen in the mailing list archive that turning SSLProtocols to SSLv2 resolved the problem with IE. But, SSLv2 is known to be weak, isn't it? So does it exist a finer tunning to use SSLv3 with IE? Best Regards. -- ( )- Hugues Pisapia -( )

Re: Frames Javascript - insecure?

2000-07-31 Thread Paul
--- Lee Feigenbaum [EMAIL PROTECTED] wrote: the page gives the warning "this page contains both secure and insecure elements" This will happen if ANYTHING is accessed by a nonsecure protocol, even so much as a single banner from another site. You did say all links were relative, though

RE: Still MSIE

2000-07-31 Thread David Rees
Please refer to the FAQ: http://www.modssl.org/docs/2.6/ssl_faq.html#ToC48 In short, adding the lines: SetEnvIf User-Agent ".*MSIE.*" \ nokeepalive ssl-unclean-shutdown \ downgrade-1.0 force-response-1.0 SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP

prebuilt for Solaris 8

2000-07-31 Thread Kirk Benson
Can anyone point me to a prebuilt binary distribution of Apache and modssl for Solaris 8/sparc? Kirk Benson __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List

Re: prebuilt for Solaris 8

2000-07-31 Thread Mads Toftum
On Mon, Jul 31, 2000 at 05:01:48PM -0400, Kirk Benson wrote: Can anyone point me to a prebuilt binary distribution of Apache and modssl for Solaris 8/sparc? There's been a couple of reports on the openssl lists that openssl doesn't build on Solaris 8. I'm just doing some final testing on my

RE: prebuilt for Solaris 8

2000-07-31 Thread Kirk Benson
Thanks for the info on openssl (I'm not subscribed on that list). I'm working on a "clean" machine, and we can reinstall Solaris 7 on it w/o any problem. So now the question is: Can anyone point me to a prebuilt binary distribution of Apache and modssl for Solaris 7/sparc? OTOH, I've

Re: prebuilt for Solaris 8

2000-07-31 Thread Mads Toftum
On Mon, Jul 31, 2000 at 05:31:40PM -0400, Kirk Benson wrote: Can anyone point me to a prebuilt binary distribution of Apache and modssl for Solaris 7/sparc? I'll have one next week - if that isn't too late for you (I've actually already got a 2.6.4 package, but it has some nonstandard file

Re: Problem with Failed to generate temporary 512 bit RSAprivate key

2000-07-31 Thread Simon Dubey
Lutz Jaenicke wrote: On Mon, Jul 31, 2000 at 04:46:55PM +0900, Simon Dubey wrote: /etc/entropy is not a plain file but a socket accross which mod_ssl and EGD will communicate, so you have to instruct mod_ssl to use the egd interface. SSLRandomSeed startup egd:/etc/entropy ...