ANNOUNCE: mod_ssl 2.8.1 for Apache 1.3.19

2001-03-03 Thread Ralf S. Engelschall
Sorry for the short delay, but here it finally is: mod_ssl 2.8.1 for Apache 1.3.19. The corresponding CHANGES entries are appended below. Grab it from: http://www.modssl.org/source/ ftp://ftp.modssl.org/source/ Yours, Ralf S. Engelschall

IE: An error has occured in the secure channel support

2001-03-03 Thread Christian Hammers
Hello I'm getting the following error when accessing my web server with a Internet Explorer IE 4.0 4.72.3110.1 SP1 40bit, on a Win98 4.10.1998: german: " Internet Explorer konnte folgende Internetsite nicht ffnen: https://.. Im Support des sicheren Channels ist ein

Re: AW: SSL v3 works with IE5.x on Apple Macintosh?

2001-03-03 Thread Hans Lohmander
My guess is that the image is not https so the page is not considered secure. img src="http://zapdos.keytrade.com/graphs/index.html?market=USsymbol=aaplname=Apple%20Computer" ... Does not show at all in Netscape for Mac. /Hans Christian Jrges wrote: Thank you Thierry, for your link. I

CA

2001-03-03 Thread Rasputin
I was wondering if there was a public CA facility availabel anywhere? I don't really want to use SnakeOil for obvious reasons, but openca.org doesn't seem to be what I was looking for? -- Rasputin Jack of All Trades :: Master of Nuns

[BugDB] Compilation problem (PR#525)

2001-03-03 Thread modssl-bugdb
Full_Name: Jean-Luc OMS Version: 2.8.0 OS: Solaris 8 gcc 2.95.2 Submission from: (NULL) (193.49.105.34) In src/modules/ssl, the generation of the file ssl_expr_scan.c seems to have a mistake. At line 254 : YY_BUFFER_STATE yy_scan_string YY_PROTO(( yyconst char *str )); and for the lines

Re: How to make the browser download a chain of certificates

2001-03-03 Thread Harald Falkenberg
Hi, thanks for your answer. You mentioned problems with user certs running apache in the described way below. Could you please go in more details? Furthermore the described configuation makes the certs visible to the browser for the complete chain. But I need to know if it is possible to offer

http for intranet accesses, https for internet accesses.

2001-03-03 Thread Fergus Donohue
Hi all, I'm using the config detailed at: http://www.modssl.org/docs/2.8/ssl_howto.html#auth-intranet to require SSL access for people connecting to an area of our website over the internet. The problem is that the username/password dialog box is brought up before we go into SSL mode and so

Please help me to find some solution

2001-03-03 Thread Wolffe H. Song
Hi, I have some trouble to find how to set up client authentication using general certificate like VeriSign. I tried to do something, but it does not work. I just got the same error message like "No CAs known to server for verification?" in server log. I think it should be configuration problem

[BugDB] 5997:error:140790E5:SSL routines:SSL23_WRITE:ssl handshak (PR#526)

2001-03-03 Thread modssl-bugdb
This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. --_=_NextPart_001_01C0A0FA.12EB42D0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi=20 I've had the

how to install mod_ssl apache is already installed

2001-03-03 Thread emurguia
Hello! I want to install mod_ssl but I already have apache installed and I don't have the dir /where/apache/was/installed, I only have the httpd in /etc/httpd/ and its config. I don't want to re-install apache again, how can i do it? -- --- Edgar Murguía Gutiérrez. Ing.

?

2001-03-03 Thread fory
Hello, Ihave some problem when i want to start mysq https sesionThe problem is that when i installed RedHat7 i have choose to install : OpenSSl,mod_ssl,php,apache and mysql together and now i dont now from where i start "httpd-DSSL"any answers? Thanks Christopher

Apache 1.3.19 and modSSL

2001-03-03 Thread Paolo Fiorenzani
I would like to upgrade my Web Server to Apache 1.3.19 + mod_jk (for Servlet/JSP exstention) and SSL security support. Is it possible to use mod_SSL2.8.0-1.3.17 with the last release of Apache or I have to use Apache 1.3.17 ? Thanks in advance. best regards Paolo Fiorenzani

Encryption level problem

2001-03-03 Thread Ted Fines
I am trying to modify the modssl settings so that only 128-bit encryption is allowed. I have read the HOW-TO page at http://www.modssl.org/docs/2.6/ssl_howto.html#ToC3 ...but when I try what it suggests, replacing my SSLCipherSuite line with the following, SSLProtocol all SSLCipherSuite

Re: SSL Doesn't work

2001-03-03 Thread David Rees
On Wed, Feb 28, 2001 at 02:16:54PM +, Malay Shah wrote: Hi, I'm using modssl 2.8.0 and apache 1.3.17 with php 4.0.4pl1 and SSL doesn't work. Port 443 is open and Apache is configured properly but it has something to do with PHP because when I remove the PHP module, everything works

Re: Most common setup?

2001-03-03 Thread David Rees
On Wed, Feb 28, 2001 at 10:46:45AM -0500, Dan Delaney wrote: Hi all. What is the most common setup for having a normal server and a secure server on the same machine? Should I just have one instance of Apache running with a virtual domain that handles the https:// connections? or should I

Re: SSL Doesn't work

2001-03-03 Thread David Rees
On Wed, Feb 28, 2001 at 02:16:54PM +, Malay Shah wrote: Hi, I'm using modssl 2.8.0 and apache 1.3.17 with php 4.0.4pl1 and SSL doesn't work. Port 443 is open and Apache is configured properly but it has something to do with PHP because when I remove the PHP module, everything works

W2K Wildcard Certificate workaround?

2001-03-03 Thread Ladd Angelius
Does anyone know about a workaround/fix for the below problem? We'd like to use a wildcard certificate ... I tested the "wildcard" test-certificate offered by www.thawte.com The test: I control the DNS, so I put a "*.gmoney.com" entry in my DNS file, and ping tested multiple names, ie.

%{SSL_CIPHER} !~ m/^(EXP|NULL)-/

2001-03-03 Thread David Benjamin
We've been testing mod_ssl to verify client certificates. Some users were having difficulty getting into the site with their Netscape browsers. The reason for this appears to be the "SSLRequire" expression which includes (in part) SSLRequire %{SSL_CIPHER} !~ m/^(EXP|NULL)-/ I had actually

[BugDB] MSIE 5.x connection failure timing issue (PR#528)

2001-03-03 Thread modssl-bugdb
Full_Name: Martin Dickau Version: 2.7.2.2 OS: Windows 2000 Submission from: (NULL) (216.57.24.244) We are experiencing an MSIE 5.x connection failure problem similar to what others are reporting. There is a timing aspect to the problem, however. Environment: OpenSA 1.0.0b3 (Apache 1.3.14,

[BugDB] FakeBasicAuth (PR#527)

2001-03-03 Thread modssl-bugdb
Full_Name: Jan Dundacek Version: mod_ssl-2.8.0-1.3.17 OS: Red Hat Linux 6.2 Submission from: (NULL) (194.149.101.194) I have a problem with autentificaton based on client certificates using FakeBasicAuth and mod_auth. When I use SSLRequire %{SSL_CLIENT_S_DN} eq "..." instead of mod_auth, it

Re: key value mismatch error, but I don't believe it.

2001-03-03 Thread Götz Babin-Ebell
Mark Stosberg wrote: On Tue, 27 Feb 2001, Michelle Govender wrote: normally that error means your private key and certificate file does not match. To test it try using these commands: for the private key: $ openssl rsa -noout -text -in keyfile -modulus for the certficate file:

Apache 1.3.17 - mod_ssl.2.8.0 - openssl.0.9.6 Reverse Proxy SSL

2001-03-03 Thread De Taeye, Herman
Hi, I have setup on two system the apach/openssl/mod_ssl products. The first system named "gate.ecb" is configured as a reverse proxy. A Verisign CA test certificate, a verisign signed server certificate and his private key are installed. The second system is our application server and is named

Re: apache 1.3.19 / mod_ssl 2.8.1

2001-03-03 Thread Ralf S. Engelschall
On Thu, Mar 01, 2001, ModSSL user wrote: Just to know when mod_ssl 2.8.1 for apache 1.3.19 will be available ? Now ;) Ralf S. Engelschall [EMAIL PROTECTED] www.engelschall.com

Re: mod_ssl vs Apache-SSL

2001-03-03 Thread Ralf S. Engelschall
On Fri, Mar 02, 2001, [EMAIL PROTECTED] wrote: [...] In my opinion, this is one of the best support lists I've ever seen, although I think it would be safe to say that it is very difficult to elicit a response from Ralf (I've never had a reply regarding removing broken RPMs from the ftp

problem with modssl 2.81/apache 1.3.19 on windows

2001-03-03 Thread Jonathon Douglas
when running configure.bat i get an error as follows C:\apdev\modsslconfigure.bat --with-apache=..\apache --with-ssl=c:\apdev\op enssl Global symbol "$first2" requires explicit package name at configure.bat line 269 . BEGIN not safe after errors--compilation aborted at configure.bat line 283.

Re: problem with modssl 2.81/apache 1.3.19 on windows

2001-03-03 Thread Ralf S. Engelschall
On Sat, Mar 03, 2001, Jonathon Douglas wrote: when running configure.bat i get an error as follows C:\apdev\modsslconfigure.bat --with-apache=..\apache --with-ssl=c:\apdev\op enssl Global symbol "$first2" requires explicit package name at configure.bat line 269 . BEGIN not safe after

Re: problem with modssl 2.81/apache 1.3.19 on windows

2001-03-03 Thread Joachim Feise
"Ralf S. Engelschall" wrote: On Sat, Mar 03, 2001, Jonathon Douglas wrote: when running configure.bat i get an error as follows C:\apdev\modsslconfigure.bat --with-apache=..\apache --with-ssl=c:\apdev\op enssl Global symbol "$first2" requires explicit package name at configure.bat

Re: http for intranet accesses, https for internet accesses.

2001-03-03 Thread Balázs Nagy
Fergus Donohue wrote: I'm using the config detailed at: http://www.modssl.org/docs/2.8/ssl_howto.html#auth-intranet to require SSL access for people connecting to an area of our website over the internet. The problem is that the username/password dialog box is brought up before we go