Re: configuration question

2003-08-19 Thread Cliff Woolley
On Wed, 20 Aug 2003, Arthur Chan wrote: > But I want Netscape to load my certificate as an "Authority" for our > testing purposes. How does one go about doing that, both in Netscape and > MSIE5 ? Google knows everything... an "I'm feeling lucky" for "installing CA certificate" yields: http://www

Re: configuration question

2003-08-19 Thread Arthur Chan
Well, my eyes did glaze over somewhere betw thermodynamics and mobile perpetuum ;-) So does this mean that if I work in a less sophisticated infrastructure where only 56kbps ppp dialup is available, I can get some incremental gain by zipping it up before encrypting it ? [yes/no] Caveats ? And here

Re: configuration question

2003-08-19 Thread Cliff Woolley
On Tue, 19 Aug 2003, Eric Rescorla wrote: > "Dave Paris" <[EMAIL PROTECTED]> writes: > > In addition to Owen's salient points about compression working efficiently > > on repetitive strings in plaintext/binary data (e.g. whitespace in a Word > > document) and not on random data (e.g. encrypted dat

Re: File Acknowledgement

2003-08-19 Thread Cliff Woolley
On Tue, 19 Aug 2003, Nauman, Ahmed [IT] wrote: > How can we know at server side in apache that a GET or PUT request has > been received and it was failed or successfull ? Can we get somehow the > response code so that some script and/or tool at Server side can > delete/archive the file which have

RE: CRL updating with mod_ssl

2003-08-19 Thread Dave Paris
Your actual message issue notwithstanding, the versions you're running are not just old, they've got security flaws and vulnerabilities well documented at both CERT, apache.org, and openssl.org. http://www.cert.org/advisories/CA-2002-27.html (Linux, Apache, OpenSSL, mod_ssl) http://www.cert.org/a

File Acknowledgement

2003-08-19 Thread Nauman, Ahmed [IT]
Hi All, How can we know at server side in apache that a GET or PUT request has been received and it was failed or successfull ? Can we get somehow the response code so that some script and/or tool at Server side can delete/archive the file which have been retrieved by the client in some specific f

CRL updating with mod_ssl

2003-08-19 Thread Roberto Hoyle
I'm trying to understand when a CRL list gets read by Apache. I have cases of it being read when a new CRL is placed in the directory and the "make" is run, and cases when it does not get read under identical circumstances. The only reliable way that I have to make sure that the CRL gets upda

Re: configuration question

2003-08-19 Thread Eric Rescorla
"Dave Paris" <[EMAIL PROTECTED]> writes: > In addition to Owen's salient points about compression working efficiently > on repetitive strings in plaintext/binary data (e.g. whitespace in a Word > document) and not on random data (e.g. encrypted data), some encryption > algorithms can actually be we

Re: configuration question

2003-08-19 Thread Eric Rescorla
"Boyle Owen" <[EMAIL PROTECTED]> writes: > >-Original Message- > >From: Arthur Chan [mailto:[EMAIL PROTECTED] > > > >Hi Boyle, > >I've been debating with myself over whether to encrypt > >everything, that's a > >cogent argument you have offered. I have a few questions myself : > >(1) assu

Re: configuration question

2003-08-19 Thread Henrik Bentel
At 02:22 AM 8/19/2003 -0400, you wrote: On Wed, 20 Aug 2003, Henrik Bentel wrote: > Now, all my ssl configuration is under my secure virtual host, such that it > applies to everything. However, I have quite a bit static content(images, > css, javascript.,...) which doesn't need to be very secure.

RE: configuration question

2003-08-19 Thread Dave Paris
In addition to Owen's salient points about compression working efficiently on repetitive strings in plaintext/binary data (e.g. whitespace in a Word document) and not on random data (e.g. encrypted data), some encryption algorithms can actually be weakened by compressing the resulting data, giving

RE: configuration question

2003-08-19 Thread Boyle Owen
>-Original Message- >From: Arthur Chan [mailto:[EMAIL PROTECTED] > >Hi Boyle, >I've been debating with myself over whether to encrypt >everything, that's a >cogent argument you have offered. I have a few questions myself : >(1) assuming an openssl encrypted packet is bigger than a >plai

Re: configuration question

2003-08-19 Thread Arthur Chan
Hi Boyle, I've been debating with myself over whether to encrypt everything, that's a cogent argument you have offered. I have a few questions myself : (1) assuming an openssl encrypted packet is bigger than a plain text one, would mod_gzip shrink it significantly to warrant the effort? (2) and wou

RE: configuration question

2003-08-19 Thread Boyle Owen
>-Original Message- >From: Henrik Bentel [mailto:[EMAIL PROTECTED] > >I have a web app which serves both static and non static content, both >secure and unsecure(https and http). >Now, all my ssl configuration is under my secure virtual host, >such that it applies to everything. However,