Re: servelts/certificates

2001-01-09 Thread Colin Chalmers
Try this URL, it details a servlet (supersnoop) that can be used to view all headers in the request + SSL info. http://java.apache.org/faq/fom-serve/cache/118.html Hope this helps /colin - Original Message - From: "Miguel Jorge Medeiros de Castro fontes" <[EMAIL PROTECTED]> To: <[EMAIL

RE: solaris slow with mod_ssl

2001-01-09 Thread David Rees
> Okay, I tried the open_ssl-0.95a and also a snake-oil certificate with no > luck. Hell maybe it is a dns problem...it kinda of looks like it, but I > think it just the server taking forever to push out the content...the max > speed I was getting was about 500b/s download, with most being > arou

http/https

2001-01-09 Thread Miguel Jorge Medeiros de Castro fontes
hi is it possible to configure apache such as: if the client has a certificate enter page X and if client has no certificate enter page Y?? Miguel FOntes - Email Enviado utilizando o serviço MegaMail _

Re: servelts/certificates

2001-01-09 Thread Miguel Jorge Medeiros de Castro fontes
About accessing certificates in a servlet can anyone inform me if Tomcat works. I have tomcat 3.2.1 running with apache 1.3.14 and i would like to know if it is possible to run servlets with certificate access. Miguel Fontes - Email Enviado util

Re: solaris slow with mod_ssl

2001-01-09 Thread Geoff Thorpe
Hi there, On Tue, 9 Jan 2001, Mads Toftum wrote: > > I have these settings in my httpd.conf: > > > > SSLSessionCache dbm:/www/secure_apache/logs/ssl_scache > > Whoa there! Why do you have dbm for your session cache, when you > compiled with mm support? It should be set to shm (especial

RE: solaris slow with mod_ssl

2001-01-09 Thread Colin Devine
Okay, I tried the open_ssl-0.95a and also a snake-oil certificate with no luck. Hell maybe it is a dns problem...it kinda of looks like it, but I think it just the server taking forever to push out the content...the max speed I was getting was about 500b/s download, with most being around 30/b/s

Re: solaris slow with mod_ssl

2001-01-09 Thread Mads Toftum
On Tue, Jan 09, 2001 at 11:03:14AM -0500, Colin Devine wrote: > Hello, I have just installed apache with mod_ssl (and open_ssl and mm as > well) onto a solaris 5.7 sparc machine. I configured the certificates and > the install was pretty straight forward. The problem is that the server > is real

How to install a wildcard certificate

2001-01-09 Thread Franz-Hermann Huerkamp
Hello, I read various FAQ's and some Manuals, but I didn't find anything about installing a wildcard certificate. We want install some virtual servers like: server1.questico.com server2.questico.com server3.questico.com All servers must have SSL-Support. We want install a wildcard certificat

Re: [Re: [Re: PRNGD compiler options UNIXWARE]]

2001-01-09 Thread Lutz Jaenicke
On Tue, Jan 09, 2001 at 11:29:54AM -0800, George Walsh wrote: > If this does not help, please check out the manual page of "bind" and see > what it states for EINVAL. ON HP-UX it says: >[EINVAL] The socket is already bound to an address, >

RE: solaris slow with mod_ssl

2001-01-09 Thread David Rees
Could it be your certificate? You can also try a dummy cert for testing. Just throwing out more ideas, here. ;-) -Dave > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Colin Devine > > Wow..you have no idea how depressed this makes me. Well

RE: solaris slow with mod_ssl

2001-01-09 Thread Colin Devine
Wow, thanks for all of the suggestions everyone. I am installing the 0.9.5a version now. Will let you know how it works out. --Colin Devine On Tue, 9 Jan 2001, David Rees wrote: > If going back to OpenSSL 0.9.5a doesn't work , you can get a pseudo random > number generator here: > > http://w

RE: solaris slow with mod_ssl

2001-01-09 Thread Colin Devine
Wow..you have no idea how depressed this makes me. Well so much for going back to Suitespot, now that I know it can work, I feel obligated to make it work. Thanks for the help. --Colin Devine On Tue, 9 Jan 2001, Wohlgemuth, Michael J. wrote: > > -Original Message- > > From: Col

RE: solaris slow with mod_ssl

2001-01-09 Thread Wohlgemuth, Michael J.
> -Original Message- > From: Colin Devine [mailto:[EMAIL PROTECTED]] > > No. We are using the builtin options. Is there a good way to get > /dev/random or /dev/urandom onto a solaris box. Just so you know, we are running Apache 1.3.14, mod-ssl 2.7.1, openssl 0.9.6, and mm 1.1.3 on an U

RE: solaris slow with mod_ssl

2001-01-09 Thread David Rees
If performance is a problem, I found that using OpenSSL 0.9.6 over OpenSSL 0.9.5a gave a 50% speed boost when using Webbench on my hardware (IRIX Origin 200 dual-CPU machines).I haven't tested on other hardware (and only have access to Linux i386 machines). You can see the original thread her

RE: solaris slow with mod_ssl

2001-01-09 Thread David Rees
If going back to OpenSSL 0.9.5a doesn't work , you can get a pseudo random number generator here: http://www.aet.tu-cottbus.de/personen/jaenicke/postfix_tls/prngd.html OpenSSL 0.9.6 performs better than OpenSSL 0.9.5a, so you may want to try PRNGD anyway. -Dave > -Original Message- > F

RE: solaris slow with mod_ssl

2001-01-09 Thread Austin Gonyou
Yes, go to sunfreeware.com and there is a urandom thing on there, also over at sun.com there is a urandom thing there as well, and over at google.com you can find a bunch of links to the /dev/urandom fix for your system. Hope it works man, and good luck! Austin -Original Message- From: C

Re: solaris slow with mod_ssl

2001-01-09 Thread Steve Luzzi
We are running Stronghold 3.0/Apache 1.3.12 on Solaris 2.6 and have not seen this type of behaviour. We have an UltraSparc 360 with 2GB memory, and can confirm the speed test results mentioned earlier today (25-30 KeySigns/second) but have found negligable differences in performance since turnin

RE: solaris slow with mod_ssl

2001-01-09 Thread Austin Gonyou
SuiteSpot has a Hacked up SSLEngine with built in routines to specifically not put the FPU intensive stuff on Sparcs. I installed it as well and It does NOT perform as well on x86 as it does on Sparcs. That said, I do agreee after reading some further posts that you have a more distinct problem he

Re: solaris slow with mod_ssl

2001-01-09 Thread Colin Devine
No. We are using the builtin options. Is there a good way to get /dev/random or /dev/urandom onto a solaris box. --Colin Devine On Tue, 9 Jan 2001, Rich Salz wrote: > Do you have /dev/random installed? > __ > Apache Interface

Re: solaris slow with mod_ssl

2001-01-09 Thread Rich Salz
Do you have /dev/random installed? __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL

Re: [Re: [Re: PRNGD compiler options UNIXWARE]]

2001-01-09 Thread George Walsh
Hi there, Lutz: RE Could not bind socket to /var/run/egd-pool: Invalid argument Hmm, I can only guess, but do you have a /var/run directory into which the socket can be created? Yes, /var/run directory was established for this purpose, 755 root,sys If this does not help, please check out the

RE: solaris slow with mod_ssl

2001-01-09 Thread David Rees
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Colin Devine > Here is what I used: > > /src/mod_ssl-2.7.1-1.3.14># ./configure --with-apache=../apache_1.3.14 > --with-ssl=../openssl-0.9.6 --with-mm=../mm-1.1.3 > --with-crt=../apache_1.3.14/conf/ssl.

RE: solaris slow with mod_ssl

2001-01-09 Thread Colin Devine
I am willing to try almost anything. Give me a few. --Colin Devine Again, thanks for the help. On Tue, 9 Jan 2001, David Rees wrote: > Just for kicks, can you try compiling with OpenSSL 0.9.5a instead of OpenSSL > 0.9.6? > > -Dave > > > -Original Message- > > From: [EMAIL PROTECTED]

RE: solaris slow with mod_ssl

2001-01-09 Thread Colin Devine
Here is what I used: /src/mod_ssl-2.7.1-1.3.14># ./configure --with-apache=../apache_1.3.14 --with-ssl=../openssl-0.9.6 --with-mm=../mm-1.1.3 --with-crt=../apache_1.3.14/conf/ssl.crt/veri-crt --with-key=../apache_1.3.14/conf/ssl.key/server.key Configuring mod_ssl/2.7.1 for Apache/1.3.14 + Apach

RE: solaris slow with mod_ssl

2001-01-09 Thread David Rees
Just for kicks, can you try compiling with OpenSSL 0.9.5a instead of OpenSSL 0.9.6? -Dave > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Colin Devine > Sent: Tuesday, January 09, 2001 10:56 AM > To: [EMAIL PROTECTED] > Subject: Re: solaris slow wi

Re: solaris slow with mod_ssl

2001-01-09 Thread Colin Devine
To answer the other questions, I used gcc: gcc version egcs-2.91.66 19990314 (egcs-1.1.2 release) and I followed the instructions from the mod_ssl INSTALL file. (I compiled mod_ssl --with apache, openssl, mm and then I compiles apache) The ssl_engine does show hits, and also shows a bunch of unc

RE: solaris slow with mod_ssl

2001-01-09 Thread David Rees
Something is definately wrong. How did you compile apache/mod_ssl/openssl? Which compiler did you use? -Dave > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Colin Devine > > Very slow. Like 30 seconds to a min load a 884 byte file. It is a fast

Re: solaris slow with mod_ssl

2001-01-09 Thread Colin Devine
Very slow. Like 30 seconds to a min load a 884 byte file. It is a fast web server that is also running standard apache, oracle, and a few other standard unix programs. Specifically it is an Ultra-Sparc II 296 with 512 ram. It is not DNS as our other apache server is fine and the apache reverse

Trying to contact 443 hangs on Windows NT

2001-01-09 Thread guyr
I'm new to trying to build my own Apache + mod_ssl.  In my last message, I reported that even with the latest snapshot, ApacheModuleSSL.dll was not being generated, though the source was in the tree.  I compiled it by hand, and then ran the installr part of Apache's makefile.win.  To my surp

Re: solaris slow with mod_ssl

2001-01-09 Thread David Rees
How slow is slow? How fast is the machine, is it doing anything else? Does ssl_engine_log show any hints? How did you compile apache/mod_ssl/openssl, which what compiler (gcc, cc, etc?) My first guess would be that the RNG isn't working well or there's some sort of DNS problem. -Dave On T

RE: solaris slow with mod_ssl

2001-01-09 Thread Colin Devine
The only problem I have with that is that we previously had an installation of Netscape suitespot installed and it was handling the ssl just fine. Would it then be that mod_ssl is not good with sparc's? If apache and mod_ssl isn't the solution, what is? Thanks for your help. --Colin Devine

mod_ssl on Windows NT Apache 1.3.14

2001-01-09 Thread guyr
I searched the archives for mod_ssl and found the message that said the make process on NT for mod_ssl 2.7.1 was still broken, and that I needed to get the latest snapshot.  I followed those directions, downloaded the latest snapshot - and the build still doesn't work.  If I look in the Apac

solaris slow with mod_ssl

2001-01-09 Thread Colin Devine
Hello, I have just installed apache with mod_ssl (and open_ssl and mm as well) onto a solaris 5.7 sparc machine. I configured the certificates and the install was pretty straight forward. The problem is that the server is really, really slow. It takes forever to get the smallest pages. Here is