[BugDB] mod_ssl assumes SSL_BASE to be /usr/local/ssl if the directory exists (PR#739)

2002-08-01 Thread modssl-bugdb
Full_Name: CJ Version: mod_ssl-2.8.10-1.3.26 OS: FreeBSD 4.6-STABLE Submission from: (NULL) (216.17.129.22) In the file pkg.sslmod/libssl.module there is the following code: if [ .$SSL_BASE = . ]; then if [ -d /usr/local/ssl ]; then SSL_BASE=/usr/local/ssl

[BugDB] SSL_connect:error in SSLv2/v3 read server hello A (PR#738)

2002-07-29 Thread modssl-bugdb
Full_Name: Keith Mastin Version: mod_ssl-2.8.5-3 OS: Redhat 7.2 Submission from: (NULL) (216.138.194.32) The webserver has a site http:www.mcleodlake.com that I configured ssl with a document root directory of mcleodlake.com/webmail/, where I have squirrelmail running. I want the login process

[BugDB] SSLLog into pipe on Solaris hangs when restarted (PR#732)

2002-07-10 Thread modssl-bugdb
Full_Name: Ralph Mengen Version: 2.8.10-1.3.26 OS: SunOS 5.8 Submission from: (NULL) (129.26.9.7) Hi. I pipe the SSLLog (and apache's ErrorLog also) into a command like SSLLog |/mylogger ErrorLog |/mylogger When I now sent a SIGHUP to the apache server for restarting it will hang. This is a

[BugDB] Security Information! (PR#731)

2002-07-08 Thread modssl-bugdb
Full_Name: Di Vincenzo Renzo Version: 2.8.5 OS: windows 2000 advanced server Submission from: (NULL) (194.184.159.70) I Use windows 2000 Advanced server + Apache 1.3.22 + tomcat 4.0.3 + mod_jk 1.1.0. When i connect via HTTPS whith MSIE 5.00.29 i get Security Information! error. I get this

[BugDB] compile fails (OpenBSD 3.0, mod_ssl/Apache 1.3.26) (PR#730)

2002-07-08 Thread modssl-bugdb
Full_Name: Denis Chatelain Version: 2.8.10-1.3.26 OS: OpenBSD 3.0 Submission from: (NULL) (193.252.202.117) Apache fails to compile with the mod_ssl 2.8.10-1.3.26 patch (I might do something wrong somewhere, but it's easier to suspect somebody else :). It looks for openssl and ssleay in bin,

[BugDB] SSLRandomSeed: Number of bytes to read from EGD is ignored (PR#729)

2002-07-04 Thread modssl-bugdb
Full_Name: Philipp Hullmann Version: 2.8.10 OS: AIX 4.3.3 Submission from: (NULL) (130.75.48.131) When using EGD to seed the random number generator, mod_ssl always reads 255 bytes of entropy instead of the number given in the configuration file. Patch (the SSL_LIBRARY_VERSION parameter

[BugDB] error when i create private key (PR#728)

2002-07-03 Thread modssl-bugdb
Full_Name: saher Version: OS: Submission from: (NULL) (195.226.230.37) Hi The problem i have it , when i wont create a new RSA Private Key for our Apache server using this command $ openssl genrsa -des3 -out ca.key 1024 OR $ openssl genrsa -des3 1024 ca.key this error coming for

[BugDB] POST re-negotiation with Apache2 (PR#727)

2002-07-02 Thread modssl-bugdb
Full_Name: kuba lipinski Version: 2.8.10-1.3.26 OS: Windows Submission from: (NULL) (213.17.133.2) hello, when will POST re-negotiation be implemented for Apache2? it is very important feature. __ Apache Interface to OpenSSL

[BugDB] PRIVATE: problem on mod_ssl-2.8.10-1.3.26 and openssl-0.9.7-pre1.tar.gz (PR#726)

2002-07-01 Thread modssl-bugdb
Full_Name: Dante Picca Version: 2.8.10 OS: Linux RedHat 7.2 Athlon Submission from: (NULL) (195.110.148.66) Hi, I've found a problem compiling mod_ssl-2.8.10-1.3.26 with openssl-0.9.7-pre1.tar.gz I've used the following commands: cd openssl-0.9.7 make make test make install cd

[BugDB] SSL_CLIENT_CERT_CHAIN_* ist missing (bugfix included) (PR#725)

2002-06-29 Thread modssl-bugdb
Full_Name: Steffen Ullrich Version: 2.8.10 OS: Linux Submission from: (NULL) (217.228.234.65) SSL_CLIENT_CERT_CHAIN_* is missing. The problem can be tracked down to following code in ssl_engine_vars.c: 309 else if (ssl != NULL strlen(var) 18 strcEQn(var, CLIENT_CERT_CHAIN_, 18)) {

Re: [BugDB] Performance issue (PR#723)

2002-06-29 Thread modssl-bugdb
Hi, I tried with the prngd and exactly the same problem appeared. =( Regards On Mon, 2002-06-24 at 05:52, Thomas Binder wrote: Hi! On Sat, Jun 22, 2002 at 01:49:12AM +0200, [EMAIL PROTECTED] wrote: This caused a different behavior. I mean, it took a little while (~3 minutes), to the

Re: [BugDB] Performance issue (PR#723)

2002-06-26 Thread modssl-bugdb
Hi Thomas, I'll try that and send the results to the list. thank you On Mon, 2002-06-24 at 05:52, Thomas Binder wrote: Hi! On Sat, Jun 22, 2002 at 01:49:12AM +0200, [EMAIL PROTECTED] wrote: This caused a different behavior. I mean, it took a little while (~3 minutes), to the loadav get

[BugDB] Buffer overflow in mod_ssl (patch enclosed) (PR#724)

2002-06-23 Thread modssl-bugdb
Full_Name: Frank Denis - Jedi/Sector One Version: 2.8.8 (OpenBSD-current) OS: OpenBSD Submission from: (NULL) (212.198.0.93) There's an easy to exploit (through .htaccess files) buffer overflow in mod_ssl. The EAPI's rewrite parser hook skips spaces without checking whether the pointer went

[BugDB] Performance issue (PR#723)

2002-06-22 Thread modssl-bugdb
Full_Name: Denis Almeida Vieira Junior Version: 2.8.9 OS: Solaris 2.7 Submission from: (NULL) (200.221.27.122) Hey there. I've been detecting some performance problems, since the version 2.8.6. Today, I'm testing with Apache 1.3.26 + mod_ssl 2.8.9 and openssl 0.9.6d. The configuration Apache

[BugDB] Pb start apacheSSL (PR#722)

2002-06-21 Thread modssl-bugdb
Full_Name: Rebolj Version: openssl 9.6a OS: Solaris Submission from: (NULL) (171.16.0.60) when i start it writes Init: Loading certificate private key of SSL-aware server pise.:443[19/Jun/2002 11:24:06 00536] [error] Init: Unable to read server certificate from file

Re: [BugDB] PRIVATE: apache 1.3.26 (PR#720)

2002-06-20 Thread modssl-bugdb
On Wed, Jun 19, 2002 at 01:38:07AM +0200, [EMAIL PROTECTED] wrote: Full_Name: Michael Duncan Version: 2.8.8 OS: RedHat 7.2 Submission from: (NULL) (216.224.74.74) I was trying to apply the latest apache 1.3.26 to my server and the mod_ssl is not allowing the install. Is there any time

[BugDB] Broken stdout when using https and http (PR#721)

2002-06-20 Thread modssl-bugdb
Full_Name: Alex Barylo Version: 2.8.8-1.3.24 OS: Red Hat 6.2 Submission from: (NULL) (170.115.249.14) PROBLEM === Sorry for a lot of details, thought you might need them. I have a small FTP site writen in Perl using Apache::Registry. The site is one script that gets invoked all over again.

[BugDB] I/O Error when using https (PR#715)

2002-06-13 Thread modssl-bugdb
Full_Name: Stephan PAVEK, Mag. Version: 2.8.1 OS: Win NT 40 Submission from: (NULL) (193.83.101.90) We are running a web-application using SSL. The environment is as follows: IAS 1.0.2.2.2 (ORACLE) using Apache (v 1.3.19) and open_ssl (v 0.9.5a) on an AIX-Machine, ORACLE-DB v. 8.1.7.3. Using IE

[BugDB] Invalid signature on CRL (PR#716)

2002-06-12 Thread modssl-bugdb
Full_Name: Philippe Jourdain Version: 2.8.8 OS: Linux Windows Submission from: (NULL) (62.23.37.12) My case: We have an AC with 2 public keys, one is used to sign our SmartCard certificate and the other is used to sign the CRL according to the SmartCard certificate. The DN is the same for the

[BugDB] I/O Error when using https (PR#715)

2002-06-10 Thread modssl-bugdb
Full_Name: Stephan PAVEK, Mag. Version: 2.8.1 OS: Win NT 40 Submission from: (NULL) (193.83.101.90) We are running a web-application using SSL. The environment is as follows: IAS 1.0.2.2.2 (ORACLE) using Apache (v 1.3.19) and open_ssl (v 0.9.5a) on an AIX-Machine, ORACLE-DB v. 8.1.7.3. Using IE

[BugDB] Errors on log file and IE5.5+ gets errors when conneting to my Apache site. (PR#714)

2002-06-07 Thread modssl-bugdb
Full_Name: Victoria Version: OS: Dynix-ptx Submission from: (NULL) (196.23.192.242) I am though getting a lot of errors in our log files. Please see also the error that Internet Explorer 5.5 + gives when accessing the site. Any help in this regard would be appreciated. Below are three of

[BugDB] require field via FakeBasicAuth broken on indexes (PR#708)

2002-05-30 Thread modssl-bugdb
Full_Name: Jason Haar Version: 2.8.4 through 2.8.8 OS: Linux Submission from: (NULL) (203.96.111.202) I've got SSL certs and FakeBasicAuth 99.9% working well. e.g. With a valid client cert and that DN put into a DB file, I can view https://domain/dir/test.php, and I've written that to show me

[BugDB] ssl_rand_seed needs to open in binary mode (PR#705)

2002-05-17 Thread modssl-bugdb
Full_Name: EKR Version: 2.8.8-1.3.24 OS: NT 4.0 Submission from: (NULL) (198.144.203.242) ssl_engine_rand.c:ssl_rand_seed() fopens the random file in text mode. On Unix this is fine but on Windows this means that it will stop as soon as it sees an EOD in the file. Since the random file is often

[BugDB] mod_ssl.so does not load (again, sorry) (PR#704)

2002-05-15 Thread modssl-bugdb
Full_Name: Dimitri Pochet Version: Apache_1.3.24-Mod_SSL_2.8.8-OpenSSL_0.9.6c-WIN32.zip OS: NT4 SP6a Submission from: (NULL) (217.136.205.41) Steps to reproduce: Installation of Apache, keys generation and installation of modSSL, according to http://tud.at/programm/apache-ssl-win32-howto.php3

RE: [BugDB] Client Authentication BUG with FakeBasicAuth (PR#695)

2002-05-07 Thread modssl-bugdb
After discussing this with the author I realized I had misread the patch. The new code moves the check in question from before the if (!SC-bEnabled) to later in the sequence: (check used to be here) /* * We decline operation in various situations... */ if (!sc-bEnabled)

[BugDB] mod_ssl on HP-UX 11.00 (PR#699)

2002-04-27 Thread modssl-bugdb
Full_Name: Luca Fasolo Version: httpd-2.0.35 OS: HP-UX Submission from: (NULL) (212.141.20.125) Compiling Apache 2.0.35 with these configuration options: # cat config2035Luca CC=cc CFLAGS=-O2 +DD32 ./configure \ --enable-mods-shared=all \ --enable-ssl

RE: [BugDB] Client Authentication BUG with FakeBasicAuth (PR#695)

2002-04-24 Thread modssl-bugdb
This submission is missing a conditional expression before line 1161. What test is performed prior to executing the DN/password check in the new code? Rick Barry Compaq Computer Corporation Compaq Secure Web Server Project Team 110 Spit Brook Road OpenVMS System Software Group

[BugDB] cannot open pages with ssl (PR#697)

2002-04-23 Thread modssl-bugdb
Full_Name: Version: 2-.8.8 1.3.24 OS: w2k server Submission from: (NULL) (195.23.102.93) i have a ie 6 and all pages with ssl works fine but when ie5 with 98se request a page with ssl he read cert we confirm but give a error page? i look to ssl log and i detect this: Connection: Client

[BugDB] Client Authentication BUG with FakeBasicAuth (PR#695)

2002-04-18 Thread modssl-bugdb
Full_Name: Sergio Rabellino Version: 2.8.8 OS: Solaris 7 Submission from: (NULL) (130.192.239.73) The if in ssl_engine_kernel.c at line 1130 to check against DN/password authorization directly form a client, break also the internal redirect done by apache under some conditions, as the directory

Re: [BugDB] can't load x:\apache\mod_ssl.so into server (PR#694)

2002-04-17 Thread modssl-bugdb
Full_Name: Daphne Chen Version: 2.8.4 OS: win2K Submission from: (NULL) (12.44.172.142) Receive the following error: C:\WINNT\Profiles\Administratorapache -D SSL Syntax error on line 203 of d:/apache/conf/httpd.conf: Cannot load d:/apache/modules/mod_ssl.so into server: (126) The specified

Re: [BugDB] SSL problem question (PR#692)

2002-04-09 Thread modssl-bugdb
On Mon, 8 Apr 2002 [EMAIL PROTECTED] wrote: Hi my name is Jaymes Redus and I work with Affliated Computer Systems here in Tallahassee, I just wanted to ask a question concerning a SSL issue that we are having. We are having a problem with our Upload functionality on our Web Application. It

[BugDB] SSL problem question (PR#692)

2002-04-08 Thread modssl-bugdb
Full_Name: Jaymes Redus Version: Apache version 1.3.12 mod_ssl 2.6.2 OS: Windows 2000 Submission from: (NULL) (208.63.63.94) Hi my name is Jaymes Redus and I work with Affliated Computer Systems here in Tallahassee, I just wanted to ask a question concerning a SSL issue that we are having. We

Re: [BugDB] SSLLog into pipe (PR#678)

2002-03-27 Thread modssl-bugdb
On Wed, Mar 20, 2002, [EMAIL PROTECTED] wrote: Full_Name: martin vetter Version: 2.8.5 OS: mac os 10.1.3 Submission from: (NULL) (62.16.152.206) SSLLog |/usr/sbin/rotatelogs /var/log/httpd/ssl_engine_log 86400 does work. SSLLog | /usr/sbin/rotatelogs /var/log/httpd/ssl_engine_log

Re: [BugDB] more helpful message when failing to get mutex (PR#679)

2002-03-27 Thread modssl-bugdb
On Thu, Mar 21, 2002, [EMAIL PROTECTED] wrote: Full_Name: Fred Romelfanger Version: 2.8.7 OS: Solaris Submission from: (NULL) (130.167.114.38) During a stress test with modssl, I get the following error: [21/Mar/2002 13:37:55 14476] [warn] Failed to acquire global mutex lock

Re: [BugDB] PRIVATE: bogus SSL handshake timeouts under load? (PR#680)

2002-03-27 Thread modssl-bugdb
On Thu, Mar 21, 2002, [EMAIL PROTECTED] wrote: [...] [Thu Mar 21 12:14:29 2002] [error] mod_ssl: SSL handshake timed out (client 130.167.114.38, server hoth.stsci.edu:443) When the timeout occurs one of my threads (in java) that is making the https connection locks up. I believe the

[BugDB] more helpful message when failing to get mutex (PR#679)

2002-03-22 Thread modssl-bugdb
Full_Name: Fred Romelfanger Version: 2.8.7 OS: Solaris Submission from: (NULL) (130.167.114.38) During a stress test with modssl, I get the following error: [21/Mar/2002 13:37:55 14476] [warn] Failed to acquire global mutex lock Looking at the code, it would be nice to get the unix errno or

[BugDB] PRIVATE: bogus SSL handshake timeouts under load? (PR#680)

2002-03-22 Thread modssl-bugdb
Full_Name: Fred Romelfanger Version: 2.8.7 OS: Solaris Submission from: (NULL) (130.167.114.38) I noticed that during a stress test, that I would see the following error ocassionally. [Thu Mar 21 12:14:29 2002] [error] mod_ssl: SSL handshake timed out (client 130.167.114.38, server

[BugDB] SSLLog into pipe (PR#678)

2002-03-20 Thread modssl-bugdb
Full_Name: martin vetter Version: 2.8.5 OS: mac os 10.1.3 Submission from: (NULL) (62.16.152.206) SSLLog |/usr/sbin/rotatelogs /var/log/httpd/ssl_engine_log 86400 does work. SSLLog | /usr/sbin/rotatelogs /var/log/httpd/ssl_engine_log 86400 does not (note the whitespace after |). ErrorLog and

[BugDB] Apache/mod_ssl compilation error (PR#675)

2002-03-15 Thread modssl-bugdb
Full_Name: Haihong Wang Version: 2.8.7-1.3.23 OS: RedHat 7.1 Submission from: (NULL) (128.107.253.38) Using the following source code packages: apache_1.3.23 mod_ssl-2.8.7-1.3.23 openssl-0.9.6c OS RedHat 7.1, gcc v3.0 Compilation of openssl ok, configuration of mod_ssl is fine. But while

[BugDB] got fatal: relocation error in solaris 8 (PR#676)

2002-03-15 Thread modssl-bugdb
Full_Name: Ian Dimaunahan Version: mod_ssl-2.8.7 OS: Solaris 8 Submission from: (NULL) (203.131.77.51) hi all! i'm getting this error when starting my apache 1.3.23/mod_ssl-2.8.7 install in solaris 8 Syntax error on line 206 of /usr/local/apache/conf/httpd.conf: Cannot load

[BugDB] mod_ssl-2.8.7-1.3.23.tar.gz and mod_ssl-2.8.6-1.3.23.tar.gz not working properly (PR#673)

2002-03-13 Thread modssl-bugdb
Full_Name: Santosh pandey Version: mod_ssl-2.8.7-1.3.23.tar.gz mod_ssl-2.8.6-1.3.23.tar.gz OS: AIX4.3.3 Submission from: (NULL) (208.132.249.249) Hi, Recently I installed the latest version of mod_ssl aware apache server. Everythings till installation went fine and even I configured the

Re: [BugDB] mod_ssl segfaults under Solaris 2.8 (PR#671)

2002-03-11 Thread modssl-bugdb
On Sun, Mar 10, 2002 at 11:30:29AM -0500, R. DuFresne wrote: So the engin version should be compatible with the non-engine version unless there has been something I have missed in the list here or elsewhere? It probably is - I just haven't seen that error before, so it was an obvious place

Re: [BugDB] mod_ssl segfaults under Solaris 2.8 (PR#671)

2002-03-11 Thread modssl-bugdb
-==-=-=---=---==-==---==--=-==--=--==- Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed At 03:18 PM 3/10/2002 +0100, you wrote: On Sun, Mar 10, 2002 at 09:04:04AM +0100, [EMAIL PROTECTED] wrote: Full_Name: Ari D Jordon Version: 2.8.7 OS: Solaris 2.8

[BugDB] About CRL (PR#672)

2002-03-11 Thread modssl-bugdb
Full_Name: Shiva murugesan Version: 2.8.5 OS: unix Submission from: (NULL) (213.132.36.114) Env : Apache/1.3.22 (Unix) mod_ssl/2.8.5 OpenSSL/0.9.6c. When IE browser (5.0,5.5, 6.0 )client presents an expired/revoked certficate the modssl handsake fails and the IE browser does not display the

[BugDB] PRIVATE: Build and install the SSL-aware Apache (PR#670)

2002-03-10 Thread modssl-bugdb
Full_Name: Peter Stoehr Version: mod_ssl-2.8.5-1.3.22 OS: SuSE Linux 7.1 (Kernel 2.2.18) Submission from: (NULL) (212.17.86.61) Hello mod_ssl-Team! I used the Step-by-Step installation illustration on your modssl.org site. I've build OpenSSL well. After this, i tried the next step (nr.3): I

[BugDB] mod_ssl segfaults under Solaris 2.8 (PR#671)

2002-03-10 Thread modssl-bugdb
Full_Name: Ari D Jordon Version: 2.8.7 OS: Solaris 2.8 Submission from: (NULL) (68.49.144.213) using apache 1.3.23, starting httpd with -DSSL immediately seg faults. post mortem revealed it was dying in ssl_cmd_SSLEngine, specifically in that mySrvConfig() was returning 0. not quite sure if

Re: [BugDB] mod_ssl segfaults under Solaris 2.8 (PR#671)

2002-03-10 Thread modssl-bugdb
On Sun, Mar 10, 2002 at 09:04:04AM +0100, [EMAIL PROTECTED] wrote: Full_Name: Ari D Jordon Version: 2.8.7 OS: Solaris 2.8 Submission from: (NULL) (68.49.144.213) using apache 1.3.23, starting httpd with -DSSL immediately seg faults. post mortem revealed it was dying in

Re: [BugDB] HTTPS doesn't work (PR#669)

2002-03-08 Thread modssl-bugdb
On Thu, Mar 07, 2002 at 08:03:08PM +0100, [EMAIL PROTECTED] wrote: Full_Name: Carmen Shinzato Version: 2.8.7 OS: Solaris 2.7 Submission from: (NULL) (161.196.99.99) We have installed Apache 1.3.23 with Openssl 0.9.6b and mod_ssl 2.8.7, The HTTP protocol works well at port 8003 but the

[BugDB] HTTPS doesn't work (PR#669)

2002-03-07 Thread modssl-bugdb
Full_Name: Carmen Shinzato Version: 2.8.7 OS: Solaris 2.7 Submission from: (NULL) (161.196.99.99) We have installed Apache 1.3.23 with Openssl 0.9.6b and mod_ssl 2.8.7, The HTTP protocol works well at port 8003 but the HTTPS doesn't work at port 8443, the error is: access denied to

[BugDB] document contains no data (PR#667)

2002-03-05 Thread modssl-bugdb
Full_Name: santosh Pandey Version: mod_ssl/2.8.7 OS: AIX 4.3 Submission from: (NULL) (208.132.249.249) Hi, Recently, I have installed the mod-ssl aware Apache server and I am able to access my secure and non-secure pages when I type the absolute URL for example

[BugDB] SSLPassPhraseDialog and VirtualHost (PR#668)

2002-03-05 Thread modssl-bugdb
Hi I have a problem when trying to use the SSLPassPhraseDialog directive with exec It works ok with 1 virtual host / 1 password , but not with 2 or more The pp.out file just echo the password. Local httpd.conf shows: IfModule mod_ssl.c # Pass Phrase Dialog: #

[BugDB] SSL config w 1.3.23/2.8.6/0.9.6c +php4.1.1 (PR#666)

2002-02-26 Thread modssl-bugdb
Full_Name: Amael Version: mod_ssl-2.8.6-1.3.23 OS: FreeBSD 4.5 Submission from: (NULL) (194.237.142.7) I have problems creating a SSL vhost. I cant define SSL options ie SSLEngine etc outside IfDefine SSL part of the httpd.conf. If i do, i get this error message: Invalid command 'SSLEngine',

[BugDB] mod_ssl port to POSIX 1003.1-2001 hosts (PR#665)

2002-02-23 Thread modssl-bugdb
Full_Name: Paul Eggert Version: 2.8.6 OS: Submission from: (NULL) (209.55.111.154) The new POSIX standard is now official (IEEE Std 1003.1-2001), and it has removed support for some obsolete utility options that modssl uses. Basically, the new POSIX has removed digit-string options (e.g.,

[BugDB] Can't load mod_ssl module (PR#649)

2002-02-13 Thread modssl-bugdb
You have to download and install (unzip and add to %PATH%) this tool:openssl-0.9.6c-win32.zip (http://www.modssl.org/contrib/) to solve this problem. I have somme trouble with the installation of SSL on apache. I downloaded and installed the files : apache_1.3.22-win32-x86.exe

[BugDB] SSLMutex lock 'sem' and SSLSessionCache storage 'shm:' not available on Solaris8 (PR#664)

2002-02-08 Thread modssl-bugdb
Full_Name: Bert Courtin Version: mod_ssl-2.8.6-1.3.23 OS: sparc-sun-solaris2.8 Submission from: (NULL) (195.243.113.252) Hi, I'm trying to compile the following apache_1.3.23 mm-1.1.3 openssl-0.9.6c mod_ssl-2.8.6-1.3.23 and get SSLMutex lock 'sem' and SSLSessionCache storage 'shm:'

Re: [BugDB] Resource on win2000 (PR#657)

2002-02-01 Thread modssl-bugdb
On Wed, Jan 09, 2002, [EMAIL PROTECTED] wrote: Full_Name: Zheng XiangYang Version: 2.8.5 OS: win2000 Submission from: (NULL) (211.155.22.200) the mutex handles lock_cs[i] in ssl_util_thread_setup are not closed when the module is unloaded. Each time the child dies, more handles are

Re: [BugDB] Resource on win2000 (PR#657)

2002-02-01 Thread modssl-bugdb
Hi Ralf, the call is CloseHandle(HANDLE toBeClosed); Regards, Patrick [EMAIL PROTECTED] wrote: On Wed, Jan 09, 2002, [EMAIL PROTECTED] wrote: Full_Name: Zheng XiangYang Version: 2.8.5 OS: win2000 Submission from: (NULL) (211.155.22.200) the mutex handles lock_cs[i] in

[BugDB] IE Problems connecting to mod_ssl server Linux (PR#663)

2002-01-31 Thread modssl-bugdb
Full_Name: Version: OS: Submission from: (NULL) (80.132.185.116) I'm having some very weird problems getting some IE clients to connect to a mod_ssl-enabled apache install, and I'm hoping someone has some insight on this beyond what's in the FAQ. The environment is as follows: Webserver

[BugDB] Problem with Opera 6.0 (PR#662)

2002-01-30 Thread modssl-bugdb
Full_Name: Roman Y. Shibrick Version: 2.8.5 OS: FreeBSD 4.4-stable Submission from: (NULL) (212.188.123.131) 1. I use Apache-1.3.22+mod_ssl_2.8.5+mod_perl+HTML-Embperl-1.3.4. 2. There is a following code: [- open FILE, /tmp/$filename; print FILE $buffer while read(

[BugDB] bug (PR#661)

2002-01-21 Thread modssl-bugdb
Full_Name: amit gupta Version: 2.6.1 OS: windows nt Submission from: (NULL) (203.200.122.35) Hi all, When I try to connect to my apache(1.3.12) mod_ssl server (mod_ssl-2.6.1) using Internet Explorer 5 running on Win98/95/WinNT 4.0 I get a page not found error, just after accepting the (test)

Re: [BugDB] bug (PR#661)

2002-01-21 Thread modssl-bugdb
On Mon, Jan 21, 2002 at 08:02:06AM +0100, [EMAIL PROTECTED] wrote: When I try to connect to my apache(1.3.12) mod_ssl server (mod_ssl-2.6.1) using Internet Explorer 5 running on Win98/95/WinNT 4.0 I get a page not found error, just after accepting the (test) certificate I requested created

[BugDB] apache/tomcat/mod_ssl 304 error (PR#660)

2002-01-16 Thread modssl-bugdb
Full_Name: Version: 2.8.5 OS: Solaris 2.8 Submission from: (NULL) (199.46.199.231) Configured the mod_ssl with ./configure \ --with-apache=../apache_1.3.22 \ --with-ssl=/usr/local/ssl \ --prefix=/usr/local/apache \ --enable-shared=ssl \ --enable-module=most \ --enable-shared=max \

[BugDB] DirectoryIndex/Indexes with Client Auth (PR#658)

2002-01-11 Thread modssl-bugdb
Full_Name: Peter Pramberger Version: 2.8.4/2.8.5 OS: Linux Submission from: (NULL) (212.95.31.57) Sorry if this has been referenced elsewhere, I could find no mention of it. When I configure the following ssl virtual host, entering the following urls work fine - I get the index.html and the

[BugDB] Openssl+modssl+Apache (PR#519)

2002-01-10 Thread modssl-bugdb
Hi, Got into the similar situation with Solaris and the error went away when I removed the binutils package . The package binutils installs ranlib which has become obsalate with SunOS5.X The utility (ar) will do this automatically. (Make sure you have /usr/ccs/bin in your path though ..) But

[BugDB] Resource on win2000 (PR#657)

2002-01-10 Thread modssl-bugdb
Full_Name: Zheng XiangYang Version: 2.8.5 OS: win2000 Submission from: (NULL) (211.155.22.200) the mutex handles lock_cs[i] in ssl_util_thread_setup are not closed when the module is unloaded. Each time the child dies, more handles are opened (can see from task manager)

Re: [BugDB] Intermittent Cannot find server or DNS error and Page cann (PR#656)

2002-01-07 Thread modssl-bugdb
How do I close out a bug report? After receiving no response on my bug report for some time, I pursued the issue with Oracle Worldwide Support, since they package the Apache Web Server and mod_ssl with their Oracle9i Application Server. I found a working solution and would like reply to the bug

[BugDB] apachectl startssl failure (PR#655)

2001-12-31 Thread modssl-bugdb
Full_Name: Tomki Camp Version: 2.8.5 OS: RH Linux 6.1 base Submission from: (NULL) (203.146.126.222) I have installed apache 1.3.22 with Mod-ssl 2.8.5 as a DSO. I have PHP 4.1.1 compiled into the HTTPD binary statically. The 'apachectl start' works fine, but with 'startssl' I get a failure

[BugDB] segv on hup signal (PR#651)

2001-12-25 Thread modssl-bugdb
Full_Name: J. Nick Koston Version: 2.8.5-1.3.22 OS: rh 6.2 Submission from: (NULL) (24.40.46.67) (gdb) back #0 0x400b9665 in SSL_CTX_ctrl () at netmsg.c:98 #1 0x8071b37 in ssl_init_ConfigureServer () at netmsg.c:98 #2 0x80713a7 in ssl_init_Module () at netmsg.c:98 #3 0x808eb49 in

[BugDB] bug 651 (PR#652)

2001-12-25 Thread modssl-bugdb
Full_Name: J. Nick Koston Version: same OS: same Submission from: (NULL) (24.40.46.67) Using the patch on bug 643 I was able to get the following error, however I have no idea what it means. [Sat Dec 22 14:35:07 2001] [error] mod_ssl: Init: (servb.webbserv.net:443) Unable to create SSL context

[BugDB] 651 (more) (PR#653)

2001-12-25 Thread modssl-bugdb
Full_Name: J. Nick Koston Version: same OS: same Submission from: (NULL) (24.40.46.67) Using the patch on bug 643 I was able to get the following error, however I have no idea what it means. [Sat Dec 22 14:35:07 2001] [error] mod_ssl: Init: (servb.webbserv.net:443) Unable to create SSL context

[BugDB] SSL negotiation failure (PR#650)

2001-12-22 Thread modssl-bugdb
Full_Name: Jason Terry Version: mod_ssl/2.8.5 OS: RedHat Linux 7.2 (fully up2dated) Submission from: (NULL) (207.173.85.120) Please note I have read up on this to try to find the problem, and all the fixes labeled on the message archives do not work. I have tried SSLSessionCache

[BugDB] SSL handshake error (PR#647)

2001-12-21 Thread modssl-bugdb
Full_Name: Tom Watson Version: 2.5.1 OS: Solaris 2.8 Submission from: (NULL) (152.135.230.4) The following message is continuously being written to the error_log (approx. every second) [Tue Dec 18 13:41:26 2001] [error] mod_ssl: SSL handshake interrupted by system [Hint: Stop button pressed

[BugDB] Can't load mod_ssl module (PR#649)

2001-12-21 Thread modssl-bugdb
Full_Name: Franck Beulé Version: 2.8.5 OS: WinNT4 Submission from: (NULL) (194.2.208.236) I have somme trouble with the installation of SSL on apache. I downloaded and installed the files : apache_1.3.22-win32-x86.exe Apache_1.3.22-Mod_SSL_2.8.5-OpenSSL_0.9.6b-WIN32.zip following exactly the

Re: [BugDB] graceful needed after CRL update? (PR#641)

2001-12-14 Thread modssl-bugdb
On Tue, Dec 11, 2001 at 03:15:05PM +0100, [EMAIL PROTECTED] wrote: Full_Name: robert joop Version: 2.8.0 OS: Submission from: (NULL) (193.175.135.28) on an apache 1.3.17 with mod_ssl 2.8.0, i installed new CRLs, called make in the ssl.crl directory, but even days later, it still

[BugDB] Problem with Handshake (PR#646)

2001-12-14 Thread modssl-bugdb
Full_Name: Juan Version: using mod_ssl under Win32 OS: Submission from: (NULL) (64.164.164.250) What could be the problem? [12/Dec/2001 18:56:20 00532] [trace] OpenSSL: Read: SSLv3 read client certificate A [12/Dec/2001 18:56:20 00532] [trace] OpenSSL: Exit: failed in SSLv3 read client

[BugDB] server startup failure (PR#645)

2001-12-14 Thread modssl-bugdb
Full_Name: Aryeh Katz Version: 2.8.5 OS: nt Submission from: (NULL) (209.140.121.226) Due to undefined symbols in the apachecore dll, I modified makefile.win and Makefile in the ssl directory, to define EAPI_MM. This allowed the apache server to start up However, once I did this, the server

[BugDB] Wasteful use of /dev/urandom (PR#642)

2001-12-11 Thread modssl-bugdb
Full_Name: Charles Jardine Version: 2.8.4 OS: Solaris 8 Submission from: (NULL) (131.111.8.103) While trussing my Apache to trace another problem, I noticed reads of 8k bytes from /dev/urandom. My configuration has SSLRandomSeed connect file:/dev/urandom 32 so I was hoping for reads of 32

[BugDB] graceful needed after CRL update? (PR#641)

2001-12-11 Thread modssl-bugdb
Full_Name: robert joop Version: 2.8.0 OS: Submission from: (NULL) (193.175.135.28) on an apache 1.3.17 with mod_ssl 2.8.0, i installed new CRLs, called make in the ssl.crl directory, but even days later, it still considers the CRLs as expired (which they aren't). is it necessary to restart

[BugDB] Configuration problems (PR#640)

2001-12-10 Thread modssl-bugdb
Full_Name: Version: 2.8.5 OS: Linux Submission from: (NULL) (216.72.177.4) I have defined 2 domains in one server, based on IP address my etc/hosts file is like: 20.30.70.40server_namewww.domain_A domain_A 20.30.70.48 server_name www.domain_B domain_B my httpd.conf is like ..

[BugDB] handshake problem by pocket IE thru SSLv3 (PR#570)

2001-05-24 Thread modssl-bugdb
Full_Name: Adrian Mak Version: 2.8.1 OS: RH 7.0 Submission from: (NULL) (152.101.109.228) this is the linux config RH 7.0 openssl 0.9.6 mod_ssl 2.8.1 apache 1.3.19 I found that there is a handshake time-out problem by IPaq H3630 pocket PC, IE using SSLv3 I have to disable SSLv3 so that

[BugDB] apache crash with mod_ssl (PR#569)

2001-05-24 Thread modssl-bugdb
Full_Name: Josef Goebel Version: 2.8.4 OS: Win2k Submission from: (NULL) (62.138.8.66) We are running an application causing lots of traffic on the server including file upload. On the server side we've written two Apache modules handling incoming requests. The problem is, that Apache (1.3.20)

[BugDB] Symbol referencing errors (PR#568)

2001-05-24 Thread modssl-bugdb
Full_Name: Gabriel Hung Version: 2.8.4-1.3.20 OS: Solaris 7 Submission from: (NULL) (128.107.248.220) After fixed alloc.c file not found by renaming it to ap_alloc.c, it seems to compile fine 'til it hit by another error as following: ranlib libssl.a === src/modules/ssl === src/modules gcc -c

[BugDB] client authentication (PR#567)

2001-05-24 Thread modssl-bugdb
Full_Name: R.Chu Version: mod_ssl-2.7.1-1.3.14 OS: Redhat Linux 7.0 Submission from: (NULL) (61.187.56.10) I have installed mod_ssl-2.7.1-1.3.14 with apache_1.3.14 and openssl-0.9.6a successfully. Now I want to get client authentication, I modified the httpd.conf as this: SSLVerifyClient

[BugDB] modssl ostensibly not working... (PR#561)

2001-05-15 Thread modssl-bugdb
Full_Name: cube Version: 2.8.1-1.3.19 OS: redhat 6.2 Submission from: (NULL) (4.33.194.174) It seems as though modssl is compiled in, and when I startssl, it looks like it works fine. [Fri May 4 16:57:05 2001] [notice] Apache/1.3.19 (Unix) mod_ssl/2.8.2 OpenSSL/0.9.6a PHP/4.0.4pl1

[BugDB] modssl x509 nameopt support (PR#563)

2001-05-15 Thread modssl-bugdb
Full_Name: Ari Suutari Version: 2.8.2 OS: FreeBSD 4.3 Submission from: (NULL) (195.197.177.229) Hi, Could it be possible that future mod_ssl versions included some kind of support similar as openssl x509 -nameopt ? This would help on formatting subject for certificates which contain characters

[BugDB] +FakeBasicAuth and ApJServAction (PR#562)

2001-05-15 Thread modssl-bugdb
Full_Name: Ari Suutari Version: 2.8.2 OS: FreeBSD 4.3 Submission from: (NULL) (195.197.177.229) I have a SSL site using SSLOptions +FakeBasicAuth and SSLVerifyClient require. Access to static content works OK, but when trying to access pages served by Apache JServ 1.1.2, I get FORBIDDEN error.

[BugDB] ssl_engine_mutex compile problems (PR#564)

2001-05-15 Thread modssl-bugdb
Full_Name: Marcel Erkens Version: 2.8.2 OS: Linux 2.2.7 Submission from: (NULL) (209.180.107.60) Trying to build Apache 1.3.19 with mod_ssl 2.8.2, php4.0.4pl1, mod_perl 1.25 and mod_auth_mysql 2.20 and I'm about ready to teach that box how to fly! First it bailed on me at line 297, 306 and 338

Re: [BugDB] Apache won't start with error:0B080074 (PR#560)

2001-05-15 Thread modssl-bugdb
On Wed, May 02, 2001 at 01:29:12AM +0200, [EMAIL PROTECTED] wrote: [TRUE] [01/May/2001 15:53:06 24203] [warn] Init: (sun20057.dn.net:80) RSA server certificate is a CA certificate (BasicConstraints: CA = = TRUE !?) Your server certificate should not be a CA certificate. [01/May/2001

[BugDB] PRIVATE: mod_ssl error (PR#557)

2001-05-04 Thread modssl-bugdb
Full_Name: Tri Tu Version: mod_ssl/2.8.1 OS: Solaris 7 Submission from: (NULL) (209.245.131.128) Hello, I'm getting these error message from the error_log file but I can not file any answer from the mailing list. Please help me out and tell me how to fix it. Here is the error message: [Mon

[BugDB] invalid password for keyfile (PR#554)

2001-05-04 Thread modssl-bugdb
Full_Name: tran tam Version: OS: WINDOW NT 4.0 Submission from: (NULL) (194.158.8.2) Dear SSL experts, We use IBM HTTP SERVER on Windown NT4.0, After request, I got a certitifcat from CertPlus/Verisign, then using IBM HTTP SERVER/key management utility to receive this certificat in Database

[BugDB] www.modssl.org/support give empty page (PR#392)

2001-05-04 Thread modssl-bugdb
Full_Name: Kees Vonk Version: OS: Submission from: (NULL) (62.188.15.202) Clicking on the 'Support' tab in www.modssl.org displays an empty page, there is some html source, but no display. Looks like there might be a table tag missing or something like that. I am using Netscape 4.05 on

[BugDB] loadcacert.cgi (PR#555)

2001-05-04 Thread modssl-bugdb
Full_Name: Dan Anderson Version: 2.8.2-1.3.19 OS: Linux 2.2.19 Submission from: (NULL) (24.161.160.5) File loadcacert.cgi, which loads a CA certificate, needs some minor modifications to run as a mod_perl program (with perl -Tw and use strict;): #!/usr/bin/perl -Tw ## ## loadcacert.cgi --

[BugDB] netscape I/O error - server reports client hit stop button (PR#558)

2001-05-04 Thread modssl-bugdb
Full_Name: Todd Demaray Version: mod_ssl/2.4.10 OpenSSL/0.9.4 OS: Gnu Debian Linux woody kernel 2.4.1 Submission from: (NULL) (206.47.244.57) IE gives me no useful error message. Netscape gives an Network Error: I/O error upon attempt to connect to my https url. While this is covered in FAQ,

[BugDB] Compile failure on Solaris 7 (PR#559)

2001-05-04 Thread modssl-bugdb
Full_Name: Todd Taft Version: 2.8.2 OS: Solaris 7 Submission from: (NULL) (63.78.179.5) I'm having trouble building Apache with mod_ssl on my Solaris 7 system. I'm using openssl-0.9.6a, apache-1.3.19, and mod-ssl-2.8.2-1.3.19. gcc 2.95.3 is my compiler. I am not using mm. All of the previous

[BugDB] Apache won't start with error:0B080074 (PR#560)

2001-05-04 Thread modssl-bugdb
Full_Name: Ray Siapno Version: 2.7.1 OS: Solaris 8.0 Submission from: (NULL) (204.247.197.6) Apache won't start and give me these messages: [01/May/2001 15:53:00 24202] [info] Server: Apache/1.3.14, Interface: mod_ssl/2.7.1, Library: OpenSSL/0.9.6 [01/May/2001 15:53:00 24202] [info] Init: 1st

[BugDB] Slew of compile probs (PR#549)

2001-04-22 Thread modssl-bugdb
Full_Name: Phil Allen Version: 2.8.2-1.3.19 OS: Solaris 7 Submission from: (NULL) (209.22.30.2) Compiled mod_ssl with shared enabled, openssl is made with shared libs, and as per instructions I do configure on apache and get a slew of Undefined functions in libssl.a. However, to get it to

[BugDB] per-server rewrite does not work with mod_ssl (PR#551)

2001-04-22 Thread modssl-bugdb
Full_Name: joey wang Version: 2.8.2-1.3.19 OS: solaris Submission from: (NULL) (63.148.55.4) I have recently installed Apache 1.3.19 w/mod_ssl 2.8.2-1.3.19. I try to use mod_rewrite to rewrite URLs in both per-server and per-directory levels. Both works fine for http requests, but only

[BugDB] Slew of compile probs (PR#550)

2001-04-22 Thread modssl-bugdb
Full_Name: Phil Allen Version: 2.8.2-1.3.19 OS: Solaris 7 Submission from: (NULL) (209.22.30.2) Compiled mod_ssl with shared enabled, openssl is made with shared libs, and as per instructions I do configure on apache and get a slew of Undefined functions in libssl.a. However, to get it to

[BugDB] PRIVATE: errno 10054, 10053 (PR#548)

2001-04-22 Thread modssl-bugdb
Full_Name: Chris Lyon Version: 2.7.2 OS: win2000 Submission from: (NULL) (212.187.205.138) Hopefully this is submitted to the right area. I am running Apache 1.3.17 and modsl 2.7.2 openssl 0.9.6 A number of clients of our site are repeatedly refused access on I.E. selecting secure pages.

[BugDB] per-server rewrite does not work with mod_ssl (PR#552)

2001-04-22 Thread modssl-bugdb
Full_Name: joey wang Version: 2.8.2-1.3.19 OS: solaris Submission from: (NULL) (63.148.55.4) I have recently installed Apache 1.3.19 w/mod_ssl 2.8.2-1.3.19. I try to use mod_rewrite to rewrite URLs in both per-server and per-directory levels. Both works fine for http requests, but only

  1   2   3   4   5   6   >