configuring 2.8.16 fails on HP-UX 11.00

2004-04-14 Thread Marko Asplund
i'm trying to build Apache 1.3.29 with mod_ssl 2.8.16 as 64-bit application on HP-UX 11.00 using HP C/ANSI C compiler. the build fails during configuration phase. here's what happens: gtar zxf ../apache_1.3.29.tar.gz gtar zxf ../mod_ssl-2.8.16-1.3.29.tar.gz cd mod_ssl-2.8.16-1.3.29 CC=cc

Re: Proxy http with modssl?

2003-03-05 Thread Marko Asplund
On Wed, 5 Mar 2003, Chris Davis wrote: I'm looking for a method to hide an old web server behind a modssl server. The hidden server has several applications served over http. What I'd like is for https requests to be rewritten in modssl and proxied to the hidden internal system. ...

Re: question.

2003-03-05 Thread Marko Asplund
On Wed, 5 Mar 2003, kulkarni veena wrote: To have SSL enabled server with self-signed certificate do we need Apache+openSSL+ModSSL or just Apache+ModSSL ? mod_ssl needs to be linked against OpenSSL libraries so you need to have OpenSSL if you want to compile mod_ssl. you don't need to have

Re: Preprocessor bug in ssl_exp_scan.l when building with nativecompiler on HP-UX 11

2003-02-19 Thread Marko Asplund
On Tue, 4 Feb 2003, Stuart Cook wrote: I have been building Apache 1.3.27 on HP-UX 11 via the native compiler with Mod SSL 2.8.12-1.3.27 and have come across and resolved a build bug during the Apache compilation process. In the Mod SSL file .../pkg.sslmod/ssl_expr_scan.l from line 91

entropy source logging request (patch included)

2003-01-27 Thread Marko Asplund
i thought it might be usefull for mod_ssl to log (at debug level) the entropy source from which the PRNG will be seeded from so that proper entropy source configuration can be verified. i've attached a small patch (mod_ssl-2.8.12-1.3.27) which does this. best regards, -- aspa

CRL distribution

2002-03-13 Thread Marko Asplund
what's the best way of distributing certificate revocation lists to clients which are mainly web browsers like Netscape communicator and MS Internet Explorer? -- aspa __ Apache Interface to OpenSSL (mod_ssl)

expired CA certificate

2001-07-20 Thread Marko Asplund
what's the best way to renew an expired, self-signed CA certificate? i'd like to be able to automate the steps that users (https, imaps with Netscape and Outlook) will have to go through during the renewal process so, they don't have to find the old CA certificate in their programs and delete

PRNG seeding problems with mod_ssl v2.8.1

2001-03-22 Thread Marko Asplund
hi i'm problems starting Apache v1.3.19 compiled with mod_ssl v2.8.1-1.3.19 (OpenSSL v0.9.6) on HP-UX B.11.00 and SunOS v5.6 platforms. Apache starts normally the mod_ssl SSL configuration is read (-DSSL option), but when Apache is started without reading the SSL configs

crypto board experiences

2001-02-22 Thread Marko Asplund
i'm interested in using crypto accelerator cards with mod_ssl. mod_ssl seems to support crypto devices using the OpenSSL v0.9.6 engine feature. is the accelerator card support in mod_ssl/OpenSSL ready for production use? which cards are known to work well with mod_ssl? could someone post some