private key not found/server cert sign failed

2003-01-27 Thread A. Putnam
Can anyone tell me what this error means and how to fix it? I'm running apache 1.3.26 with mod_ssl 2.8.10 on a SuSE8.1 box. /etc/init.d/apache start returned 7 (Program is not running.) Starting httpd [ Mailman PHP4 SSL ]Apache/1.3.26 mod_ssl/2.8.10 (Pass Phrase Dialog) Some of your private key

Re: Verifying enabled ciphers?

2003-01-27 Thread Lutz Jaenicke
On Mon, Jan 27, 2003 at 10:47:27AM -0700, Steve Chadsey wrote: > On Fri, Jan 24, 2003 at 09:30:28AM -, [EMAIL PROTECTED] wrote: > > Try http://www.netcraft.com/sslwhats. It will give you a list of ciphers. > > > > OK. I did that, and the only one I support is "RC4 with MD5". Strange, I > th

Client authnetication

2003-01-27 Thread Chris Covell
Hello guys, I have been using client authentication for a while now to verify the identity of users at our web site. We run our own CA and point to the certificate file in SSLCACertificateFile in httpd.conf. Now this all seems to work fine, but have the following errors in /var/log/httpd/error

Re: Verifying enabled ciphers?

2003-01-27 Thread Steve Chadsey
On Fri, Jan 24, 2003 at 09:30:28AM -, [EMAIL PROTECTED] wrote: > Try http://www.netcraft.com/sslwhats. It will give you a list of ciphers. > OK. I did that, and the only one I support is "RC4 with MD5". Strange, I thought I would be able to support more. Actually, to amend my previous post

Mandatory fields in Certificate

2003-01-27 Thread Frederic Viollet
Hello,   I'm trying to set up a "simple" SSL server (no client nor server verification) I've noticed that, if a generate the server's certificate with a Microsoft CA, I make the SSL work. If the certificate is generated with a Netscape CA, it works ok. While comparing the two certificates, I 

entropy source logging request (patch included)

2003-01-27 Thread Marko Asplund
i thought it might be usefull for mod_ssl to log (at debug level) the entropy source from which the PRNG will be seeded from so that proper entropy source configuration can be verified. i've attached a small patch (mod_ssl-2.8.12-1.3.27) which does this. best regards, -- aspa

RE: ScriptAlias

2003-01-27 Thread Boyle Owen
You have inconsistent notation and a confused mapping. - Do not put a trailing slash on the alias or the directory. - You should have only one ScriptAlias per CGI directory. - You can match only one directory to each alias (you can have two aliases for one directory). ... it's like buses: Two bus