ca cert questions (was Re: Dumb SSL question)

2002-04-02 Thread jon schatz
On Tue, 2002-04-02 at 13:50, Ladner, Eric (Eric.Ladner) wrote: What mechanism is it that will allow an encrypted communication (a connection to the https side of the web server) without popping up the View/Accept/Whatever dialog for the certificate? All that's required is a valid cert ( valid

Re: Problem with reading client certificate - downgrade doens'tseem to work

2002-03-11 Thread jon schatz
On Mon, 2002-03-11 at 08:45, Bruno Georges wrote: It looks like it is not possible to get anything from the client, and the connection is broken. I am a bit confused, according to the SetEnvIf directive IE response should be HTTP/1.0, also we force the form method to POST, which has no

Re: IE browser does not disply proper error message if thecertificate is expired

2002-03-04 Thread jon schatz
On Mon, 2002-03-04 at 09:20, Shiva Murugesan wrote: It just displays the misleading error Page cannot be displayed DNS errors. if you uncheck Tools - Internet Options - Advanced - Show Friendly HTTP error messages, you can get more useful info. Unfortunately, the default is to show the same

Re: apache and mod_ssl

2002-02-08 Thread jon schatz
On Thu, 2002-02-07 at 16:02, bhawna sinha wrote: Also in the error log it says invalid method in request. that means you're talking SSL to a normal http server. in other words, port 443 is not listening for ssl connections. -- [EMAIL PROTECTED] || www.divisionbyzero.com gpg key:

RE: [BugDB] IE Problems connecting to mod_ssl server Linux (PR#66 3)

2002-01-31 Thread jon schatz
On Thu, 2002-01-31 at 07:59, R. DuFresne wrote: It was my understanding, and perhaps I've misread posts here, that the list here has long advocated this setting for IE issues: SetEnvIf User-Agent .*MSIE.* nokeepalive ssl-unclean-shutdown except on current (apache 1.3.22) builds, this

Re: strange problem with unclean shutdown

2002-01-25 Thread jon schatz
On Thu, 2002-01-24 at 08:24, Thomas Binder wrote: Test this using OpenSSL's s_client: [jon@devotchka jon]$ openssl s_client -quiet -connect devotchka:23456 EOF GET / HTTP/1.1 Host: devotchka EOF snip HTTP/1.1 200 OK Date: Fri, 25 Jan 2002 17:56:17 GMT Server: Apache/1.3.22 (Unix)

Re: strange problem with unclean shutdown

2002-01-23 Thread jon schatz
On Wed, 2002-01-23 at 10:12, Andreas Gietl wrote: i've got a really really strange problem with mod_ssl 2.8.5-1.3.22 on Apache 1.3.22 with openssl 0.9.6c. ---snip--- This are the user-agent for these browsers: Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0; DT) Mozilla/4.0 (compatible;

Re: strange problem with unclean shutdown

2002-01-23 Thread jon schatz
On Wed, 2002-01-23 at 12:10, Andreas Gietl wrote: uh - how did you fix this problem? I haven't fixed it. I've gotten no feedback from either list (modssl-users and apache-users) on this, and i've found older reports in the apache bug db. so i'm not sure what to do. i've tried unconditionally