[BugDB] mod_ssl assumes SSL_BASE to be /usr/local/ssl if the directory exists (PR#739)

2002-08-01 Thread modssl-bugdb
Full_Name: CJ Version: mod_ssl-2.8.10-1.3.26 OS: FreeBSD 4.6-STABLE Submission from: (NULL) (216.17.129.22) In the file pkg.sslmod/libssl.module there is the following code: if [ ".$SSL_BASE" = . ]; then if [ -d /usr/local/ssl ]; then SSL_BASE="/usr/local/ssl

[BugDB] SSL_connect:error in SSLv2/v3 read server hello A (PR#738)

2002-07-29 Thread modssl-bugdb
Full_Name: Keith Mastin Version: mod_ssl-2.8.5-3 OS: Redhat 7.2 Submission from: (NULL) (216.138.194.32) The webserver has a site http:www.mcleodlake.com that I configured ssl with a document root directory of mcleodlake.com/webmail/, where I have squirrelmail running. I want the login process f

[BugDB] SSLLog into pipe on Solaris hangs when restarted (PR#732)

2002-07-09 Thread modssl-bugdb
Full_Name: Ralph Mengen Version: 2.8.10-1.3.26 OS: SunOS 5.8 Submission from: (NULL) (129.26.9.7) Hi. I pipe the SSLLog (and apache's ErrorLog also) into a command like SSLLog "|/mylogger" ErrorLog "|/mylogger" When I now sent a SIGHUP to the apache server for restarting it will hang. This is

[BugDB] compile fails (OpenBSD 3.0, mod_ssl/Apache 1.3.26) (PR#730)

2002-07-08 Thread modssl-bugdb
Full_Name: Denis Chatelain Version: 2.8.10-1.3.26 OS: OpenBSD 3.0 Submission from: (NULL) (193.252.202.117) Apache fails to compile with the mod_ssl 2.8.10-1.3.26 patch (I might do something wrong somewhere, but it's easier to suspect somebody else :). It looks for openssl and ssleay in bin, app

[BugDB] Security Information! (PR#731)

2002-07-08 Thread modssl-bugdb
Full_Name: Di Vincenzo Renzo Version: 2.8.5 OS: windows 2000 advanced server Submission from: (NULL) (194.184.159.70) I Use windows 2000 Advanced server + Apache 1.3.22 + tomcat 4.0.3 + mod_jk 1.1.0. When i connect via HTTPS whith MSIE 5.00.29 i get "Security Information!" error. I get this rand

[BugDB] SSLRandomSeed: Number of bytes to read from EGD is ignored (PR#729)

2002-07-04 Thread modssl-bugdb
Full_Name: Philipp Hullmann Version: 2.8.10 OS: AIX 4.3.3 Submission from: (NULL) (130.75.48.131) When using EGD to seed the random number generator, mod_ssl always reads 255 bytes of entropy instead of the number given in the configuration file. Patch (the SSL_LIBRARY_VERSION parameter shoul

[BugDB] error when i create private key (PR#728)

2002-07-03 Thread modssl-bugdb
Full_Name: saher Version: OS: Submission from: (NULL) (195.226.230.37) Hi The problem i have it , when i wont create a new RSA Private Key for our Apache server using this command $ openssl genrsa -des3 -out ca.key 1024 OR $ openssl genrsa -des3 1024 > ca.key this error coming for m

[BugDB] POST re-negotiation with Apache2 (PR#727)

2002-07-02 Thread modssl-bugdb
Full_Name: kuba lipinski Version: 2.8.10-1.3.26 OS: Windows Submission from: (NULL) (213.17.133.2) hello, when will POST re-negotiation be implemented for Apache2? it is very important feature. __ Apache Interface to OpenSSL (m

[BugDB] PRIVATE: problem on mod_ssl-2.8.10-1.3.26 and openssl-0.9.7-pre1.tar.gz (PR#726)

2002-07-01 Thread modssl-bugdb
Full_Name: Dante Picca Version: 2.8.10 OS: Linux RedHat 7.2 Athlon Submission from: (NULL) (195.110.148.66) Hi, I've found a problem compiling mod_ssl-2.8.10-1.3.26 with openssl-0.9.7-pre1.tar.gz I've used the following commands: cd openssl-0.9.7 make make test make install cd ../mod_ssl-2.8.10

Re: [BugDB] Performance issue (PR#723)

2002-06-29 Thread modssl-bugdb
Hi, I tried with the prngd and exactly the same problem appeared. =( Regards On Mon, 2002-06-24 at 05:52, Thomas Binder wrote: > Hi! > > On Sat, Jun 22, 2002 at 01:49:12AM +0200, [EMAIL PROTECTED] wrote: > > This caused a different behavior. I mean, it took a little while > > (~3 minutes), to

[BugDB] SSL_CLIENT_CERT_CHAIN_* ist missing (bugfix included) (PR#725)

2002-06-29 Thread modssl-bugdb
Full_Name: Steffen Ullrich Version: 2.8.10 OS: Linux Submission from: (NULL) (217.228.234.65) SSL_CLIENT_CERT_CHAIN_* is missing. The problem can be tracked down to following code in ssl_engine_vars.c: 309 else if (ssl != NULL && strlen(var) > 18 && strcEQn(var, "CLIENT_CERT_CHAIN_", 18

Re: [BugDB] Performance issue (PR#723)

2002-06-25 Thread modssl-bugdb
Hi Thomas, I'll try that and send the results to the list. thank you On Mon, 2002-06-24 at 05:52, Thomas Binder wrote: > Hi! > > On Sat, Jun 22, 2002 at 01:49:12AM +0200, [EMAIL PROTECTED] wrote: > > This caused a different behavior. I mean, it took a little while > > (~3 minutes), to the load

[BugDB] Buffer overflow in mod_ssl (patch enclosed) (PR#724)

2002-06-23 Thread modssl-bugdb
Full_Name: Frank Denis - Jedi/Sector One Version: 2.8.8 (OpenBSD-current) OS: OpenBSD Submission from: (NULL) (212.198.0.93) There's an easy to exploit (through .htaccess files) buffer overflow in mod_ssl. The EAPI's rewrite parser hook skips spaces without checking whether the pointer went past

[BugDB] Performance issue (PR#723)

2002-06-22 Thread modssl-bugdb
Full_Name: Denis Almeida Vieira Junior Version: 2.8.9 OS: Solaris 2.7 Submission from: (NULL) (200.221.27.122) Hey there. I've been detecting some performance problems, since the version 2.8.6. Today, I'm testing with Apache 1.3.26 + mod_ssl 2.8.9 and openssl 0.9.6d. The configuration "Apache

[BugDB] Pb start apacheSSL (PR#722)

2002-06-21 Thread modssl-bugdb
Full_Name: Rebolj Version: openssl 9.6a OS: Solaris Submission from: (NULL) (171.16.0.60) when i start it writes Init: Loading certificate & private key of SSL-aware server pise.:443[19/Jun/2002 11:24:06 00536] [error] Init: Unable to read server certificate from file /HOME/webadm/Config/ssl.

[BugDB] Broken stdout when using https and http (PR#721)

2002-06-20 Thread modssl-bugdb
Full_Name: Alex Barylo Version: 2.8.8-1.3.24 OS: Red Hat 6.2 Submission from: (NULL) (170.115.249.14) PROBLEM === Sorry for a lot of details, thought you might need them. I have a small FTP site writen in Perl using Apache::Registry. The site is one script that gets invoked all over again.

Re: [BugDB] PRIVATE: apache 1.3.26 (PR#720)

2002-06-20 Thread modssl-bugdb
On Wed, Jun 19, 2002 at 01:38:07AM +0200, [EMAIL PROTECTED] wrote: > Full_Name: Michael Duncan > Version: 2.8.8 > OS: RedHat 7.2 > Submission from: (NULL) (216.224.74.74) > > > I was trying to apply the latest apache 1.3.26 to my server and the mod_ssl is > not allowing the install. Is there an

[BugDB] I/O Error when using https (PR#715)

2002-06-13 Thread modssl-bugdb
Full_Name: Stephan PAVEK, Mag. Version: 2.8.1 OS: Win NT 40 Submission from: (NULL) (193.83.101.90) We are running a web-application using SSL. The environment is as follows: IAS 1.0.2.2.2 (ORACLE) using Apache (v 1.3.19) and open_ssl (v 0.9.5a) on an AIX-Machine, ORACLE-DB v. 8.1.7.3. Using IE

[BugDB] Invalid signature on CRL (PR#716)

2002-06-12 Thread modssl-bugdb
Full_Name: Philippe Jourdain Version: 2.8.8 OS: Linux & Windows Submission from: (NULL) (62.23.37.12) My case: We have an AC with 2 public keys, one is used to sign our SmartCard certificate and the other is used to sign the CRL according to the SmartCard certificate. The DN is the same for the

[BugDB] I/O Error when using https (PR#715)

2002-06-10 Thread modssl-bugdb
Full_Name: Stephan PAVEK, Mag. Version: 2.8.1 OS: Win NT 40 Submission from: (NULL) (193.83.101.90) We are running a web-application using SSL. The environment is as follows: IAS 1.0.2.2.2 (ORACLE) using Apache (v 1.3.19) and open_ssl (v 0.9.5a) on an AIX-Machine, ORACLE-DB v. 8.1.7.3. Using IE

[BugDB] Errors on log file and IE5.5+ gets errors when conneting to my Apache site. (PR#714)

2002-06-07 Thread modssl-bugdb
Full_Name: Victoria Version: OS: Dynix-ptx Submission from: (NULL) (196.23.192.242) I am though getting a lot of errors in our log files. Please see also the error that Internet Explorer 5.5 + gives when accessing the site. Any help in this regard would be appreciated. Below are three of t

[BugDB] Error Starting Apache when trying to use mod_ssl (PR#712)

2002-06-06 Thread modssl-bugdb
Full_Name: Luke Whitford Version: 2.8.8 OS: Win98 Submission from: (NULL) (203.59.68.234) When trying to start apache (1.3.24) with the mod_ssl module being loaded the following error occurs: C:\Program Files\Apache Group\Apache>apache Syntax error on line 195 of c:/program files/apache group/a

[BugDB] "require" field via FakeBasicAuth broken on indexes (PR#708)

2002-05-30 Thread modssl-bugdb
Full_Name: Jason Haar Version: 2.8.4 through 2.8.8 OS: Linux Submission from: (NULL) (203.96.111.202) I've got SSL certs and FakeBasicAuth 99.9% working well. e.g. With a valid client cert and that DN put into a DB file, I can view https://domain/dir/test.php, and I've written that to show me

[BugDB] ssl_rand_seed needs to open in binary mode (PR#705)

2002-05-17 Thread modssl-bugdb
Full_Name: EKR Version: 2.8.8-1.3.24 OS: NT 4.0 Submission from: (NULL) (198.144.203.242) ssl_engine_rand.c:ssl_rand_seed() fopens the random file in text mode. On Unix this is fine but on Windows this means that it will stop as soon as it sees an EOD in the file. Since the random file is often

[BugDB] mod_ssl.so does not load (again, sorry) (PR#704)

2002-05-15 Thread modssl-bugdb
Full_Name: Dimitri Pochet Version: Apache_1.3.24-Mod_SSL_2.8.8-OpenSSL_0.9.6c-WIN32.zip OS: NT4 SP6a Submission from: (NULL) (217.136.205.41) Steps to reproduce: Installation of Apache, keys generation and installation of modSSL, according to http://tud.at/programm/apache-ssl-win32-howto.php3 li

RE: [BugDB] Client Authentication BUG with FakeBasicAuth (PR#695)

2002-05-07 Thread modssl-bugdb
After discussing this with the author I realized I had misread the patch. The new code moves the check in question from before the "if (!SC->bEnabled)" to later in the sequence: (check used to be here) /* * We decline operation in various situations... */ if (!sc->bEnable

[BugDB] sig 11 in mod_ssl module init (PR#702)

2002-05-03 Thread modssl-bugdb
Full_Name: Bart van Leeuwen Version: various OS: FreeBSD Submission from: (NULL) (195.64.50.136) Situation: Server has multiple virtual hosts and uses the namevirtualhost option. A ssl virtual host is defined using its hostname instead of its ip. Due to a dns failure, 1 of the names used for a

[BugDB] mod_ssl on HP-UX 11.00 (PR#699)

2002-04-27 Thread modssl-bugdb
Full_Name: Luca Fasolo Version: httpd-2.0.35 OS: HP-UX Submission from: (NULL) (212.141.20.125) Compiling Apache 2.0.35 with these configuration options: # cat config2035Luca CC=cc CFLAGS="-O2 +DD32" ./configure \ --enable-mods-shared=all \ --enable-ssl

RE: [BugDB] Client Authentication BUG with FakeBasicAuth (PR#695)

2002-04-24 Thread modssl-bugdb
This submission is missing a conditional expression before line 1161. What test is performed prior to executing the DN/password check in the new code? Rick Barry Compaq Computer Corporation Compaq Secure Web Server Project Team 110 Spit Brook Road OpenVMS System Software Group Nashu

[BugDB] cannot open pages with ssl (PR#697)

2002-04-23 Thread modssl-bugdb
Full_Name: Version: 2-.8.8 1.3.24 OS: w2k server Submission from: (NULL) (195.23.102.93) i have a ie 6 and all pages with ssl works fine but when ie5 with 98se request a page with ssl he read cert we confirm but give a error page? i look to ssl log and i detect this: Connection: Client IP:

[BugDB] mod_ssl long hostnames still broken??? (PR#696)

2002-04-19 Thread modssl-bugdb
Full_Name: Bernard L du Breuil Version: 2.8 OS: Solaris 8 Submission from: (NULL) (192.48.242.3) This is the version that is coming packaged with Apache 2.0.35. My server would start but then not work when the user tried to connect. I went so far as to translate the error codes SSL_F_SSL_SET

[BugDB] Client Authentication BUG with FakeBasicAuth (PR#695)

2002-04-18 Thread modssl-bugdb
Full_Name: Sergio Rabellino Version: 2.8.8 OS: Solaris 7 Submission from: (NULL) (130.192.239.73) The "if" in ssl_engine_kernel.c at line 1130 to check against DN/password authorization directly form a client, break also the internal redirect done by apache under some conditions, as the director

Re: [BugDB] can't load x:\apache\mod_ssl.so into server (PR#694)

2002-04-17 Thread modssl-bugdb
Full_Name: Daphne Chen Version: 2.8.4 OS: win2K Submission from: (NULL) (12.44.172.142) Receive the following error: C:\WINNT\Profiles\Administrator>apache -D SSL Syntax error on line 203 of d:/apache/conf/httpd.conf: Cannot load d:/apache/modules/mod_ssl.so into server: (126) The specified mod

Re: [BugDB] SSL problem question (PR#692)

2002-04-09 Thread modssl-bugdb
On Mon, 8 Apr 2002 [EMAIL PROTECTED] wrote: > Hi my name is Jaymes Redus and I work with Affliated Computer Systems > here in Tallahassee, I just wanted to ask a question concerning a SSL > issue that we are having. We are having a problem with our Upload > functionality on our Web Application. I

[BugDB] SSL problem question (PR#692)

2002-04-08 Thread modssl-bugdb
Full_Name: Jaymes Redus Version: Apache version 1.3.12 mod_ssl 2.6.2 OS: Windows 2000 Submission from: (NULL) (208.63.63.94) Hi my name is Jaymes Redus and I work with Affliated Computer Systems here in Tallahassee, I just wanted to ask a question concerning a SSL issue that we are having. We ar

Re: [BugDB] PRIVATE: bogus SSL handshake timeouts under load? (PR#680)

2002-03-27 Thread modssl-bugdb
On Thu, Mar 21, 2002, [EMAIL PROTECTED] wrote: > [...] > [Thu Mar 21 12:14:29 2002] [error] mod_ssl: SSL handshake timed out (client > 130.167.114.38, server hoth.stsci.edu:443) > > When the timeout occurs one of my threads (in java) that is making the > https connection locks up. > > I believe

Re: [BugDB] more helpful message when failing to get mutex (PR#679)

2002-03-27 Thread modssl-bugdb
On Thu, Mar 21, 2002, [EMAIL PROTECTED] wrote: > Full_Name: Fred Romelfanger > Version: 2.8.7 > OS: Solaris > Submission from: (NULL) (130.167.114.38) > > During a stress test with modssl, I get the following error: > > [21/Mar/2002 13:37:55 14476] [warn] Failed to acquire global mutex lock >

Re: [BugDB] SSLLog into pipe (PR#678)

2002-03-27 Thread modssl-bugdb
On Wed, Mar 20, 2002, [EMAIL PROTECTED] wrote: > Full_Name: martin vetter > Version: 2.8.5 > OS: mac os 10.1.3 > Submission from: (NULL) (62.16.152.206) > > SSLLog "|/usr/sbin/rotatelogs /var/log/httpd/ssl_engine_log 86400" > > does work. > > SSLLog "| /usr/sbin/rotatelogs /var/log/httpd/ssl_e

[BugDB] PRIVATE: bogus SSL handshake timeouts under load? (PR#680)

2002-03-22 Thread modssl-bugdb
Full_Name: Fred Romelfanger Version: 2.8.7 OS: Solaris Submission from: (NULL) (130.167.114.38) I noticed that during a stress test, that I would see the following error ocassionally. [Thu Mar 21 12:14:29 2002] [error] mod_ssl: SSL handshake timed out (client 130.167.114.38, server hoth.stsci.e

[BugDB] more helpful message when failing to get mutex (PR#679)

2002-03-22 Thread modssl-bugdb
Full_Name: Fred Romelfanger Version: 2.8.7 OS: Solaris Submission from: (NULL) (130.167.114.38) During a stress test with modssl, I get the following error: [21/Mar/2002 13:37:55 14476] [warn] Failed to acquire global mutex lock Looking at the code, it would be nice to get the unix errno or

[BugDB] SSLLog into pipe (PR#678)

2002-03-20 Thread modssl-bugdb
Full_Name: martin vetter Version: 2.8.5 OS: mac os 10.1.3 Submission from: (NULL) (62.16.152.206) SSLLog "|/usr/sbin/rotatelogs /var/log/httpd/ssl_engine_log 86400" does work. SSLLog "| /usr/sbin/rotatelogs /var/log/httpd/ssl_engine_log 86400" does not (note the whitespace after "|"). "ErrorL

[BugDB] got fatal: relocation error in solaris 8 (PR#676)

2002-03-15 Thread modssl-bugdb
Full_Name: Ian Dimaunahan Version: mod_ssl-2.8.7 OS: Solaris 8 Submission from: (NULL) (203.131.77.51) hi all! i'm getting this error when starting my apache 1.3.23/mod_ssl-2.8.7 install in solaris 8 Syntax error on line 206 of /usr/local/apache/conf/httpd.conf: Cannot load /usr/local/apache/l

[BugDB] Apache/mod_ssl compilation error (PR#675)

2002-03-15 Thread modssl-bugdb
Full_Name: Haihong Wang Version: 2.8.7-1.3.23 OS: RedHat 7.1 Submission from: (NULL) (128.107.253.38) Using the following source code packages: apache_1.3.23 mod_ssl-2.8.7-1.3.23 openssl-0.9.6c OS RedHat 7.1, gcc v3.0 Compilation of openssl ok, configuration of mod_ssl is fine. But while compi

[BugDB] compilation problem with Allaire Jrun and EAPI (PR#674)

2002-03-14 Thread modssl-bugdb
Full_Name: Brian Chen Version: 2.8.6 OS: linux Submission from: (NULL) (63.203.135.108) After I install the apache everything works fine but it crashes sometimes and I noticed this in the error log for the web server. [Thu Mar 14 03:29:16 2002] [warn] Loaded DSO /usr/local/jrun/connectors/apa

[BugDB] mod_ssl-2.8.7-1.3.23.tar.gz and mod_ssl-2.8.6-1.3.23.tar.gz not working properly (PR#673)

2002-03-13 Thread modssl-bugdb
Full_Name: Santosh pandey Version: mod_ssl-2.8.7-1.3.23.tar.gz& mod_ssl-2.8.6-1.3.23.tar.gz OS: AIX4.3.3 Submission from: (NULL) (208.132.249.249) Hi, Recently I installed the latest version of mod_ssl aware apache server. Everythings till installation went fine and even I configured the httpd.c

[BugDB] About CRL (PR#672)

2002-03-11 Thread modssl-bugdb
Full_Name: Shiva murugesan Version: 2.8.5 OS: unix Submission from: (NULL) (213.132.36.114) Env : Apache/1.3.22 (Unix) mod_ssl/2.8.5 OpenSSL/0.9.6c. When IE browser (5.0,5.5, 6.0 )client presents an expired/revoked certficate the modssl handsake fails and the IE browser does not display the cor

Re: [BugDB] mod_ssl segfaults under Solaris 2.8 (PR#671)

2002-03-11 Thread modssl-bugdb
-==-=-=---=---==-==---==--=-==--=--==- Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed At 03:18 PM 3/10/2002 +0100, you wrote: On Sun, Mar 10, 2002 at 09:04:04AM +0100, [EMAIL PROTECTED] wrote: > Full_Name: Ari D Jordon > Version: 2.8.7 > OS: Solaris 2

Re: [BugDB] mod_ssl segfaults under Solaris 2.8 (PR#671)

2002-03-11 Thread modssl-bugdb
On Sun, Mar 10, 2002 at 11:30:29AM -0500, R. DuFresne wrote: > > So the engin version should be compatible with the non-engine version > unless there has been something I have missed in the list here or > elsewhere? > It probably is - I just haven't seen that error before, so it was an obvious p

Re: [BugDB] mod_ssl segfaults under Solaris 2.8 (PR#671)

2002-03-10 Thread modssl-bugdb
On Sun, Mar 10, 2002 at 09:04:04AM +0100, [EMAIL PROTECTED] wrote: > Full_Name: Ari D Jordon > Version: 2.8.7 > OS: Solaris 2.8 > Submission from: (NULL) (68.49.144.213) > > > using apache 1.3.23, starting httpd with -DSSL immediately seg faults. post > mortem revealed it was dying in ssl_cmd_S

[BugDB] mod_ssl segfaults under Solaris 2.8 (PR#671)

2002-03-10 Thread modssl-bugdb
Full_Name: Ari D Jordon Version: 2.8.7 OS: Solaris 2.8 Submission from: (NULL) (68.49.144.213) using apache 1.3.23, starting httpd with -DSSL immediately seg faults. post mortem revealed it was dying in ssl_cmd_SSLEngine, specifically in that mySrvConfig() was returning 0. not quite sure if th

[BugDB] PRIVATE: Build and install the SSL-aware Apache (PR#670)

2002-03-10 Thread modssl-bugdb
Full_Name: Peter Stoehr Version: mod_ssl-2.8.5-1.3.22 OS: SuSE Linux 7.1 (Kernel 2.2.18) Submission from: (NULL) (212.17.86.61) Hello mod_ssl-Team! I used the Step-by-Step installation illustration on your modssl.org site. I've build OpenSSL well. After this, i tried the next step (nr.3): I st

Re: [BugDB] HTTPS doesn't work (PR#669)

2002-03-08 Thread modssl-bugdb
On Thu, Mar 07, 2002 at 08:03:08PM +0100, [EMAIL PROTECTED] wrote: > Full_Name: Carmen Shinzato > Version: 2.8.7 > OS: Solaris 2.7 > Submission from: (NULL) (161.196.99.99) > > > We have installed Apache 1.3.23 with Openssl 0.9.6b and mod_ssl 2.8.7, The HTTP > protocol works well at port 8003 bu

[BugDB] HTTPS doesn't work (PR#669)

2002-03-07 Thread modssl-bugdb
Full_Name: Carmen Shinzato Version: 2.8.7 OS: Solaris 2.7 Submission from: (NULL) (161.196.99.99) We have installed Apache 1.3.23 with Openssl 0.9.6b and mod_ssl 2.8.7, The HTTP protocol works well at port 8003 but the HTTPS doesn't work at port 8443, the error is: access denied to www.movilnet.

[BugDB] SSLPassPhraseDialog and VirtualHost (PR#668)

2002-03-05 Thread modssl-bugdb
Hi I have a problem when trying to use the SSLPassPhraseDialog directive with "exec" It works ok with 1 virtual host / 1 password , but not with 2 or more The pp.out file just echo the password. Local httpd.conf shows: # Pass Phrase Dialog: # #SSLPassPhraseDialo

[BugDB] document contains no data (PR#667)

2002-03-05 Thread modssl-bugdb
Full_Name: santosh Pandey Version: mod_ssl/2.8.7 OS: AIX 4.3 Submission from: (NULL) (208.132.249.249) Hi, Recently, I have installed the mod-ssl aware Apache server and I am able to access my secure and non-secure pages when I type the absolute URL for example https://qwfeeu21.poceur1:5543/pro

[BugDB] SSL config w 1.3.23/2.8.6/0.9.6c +php4.1.1 (PR#666)

2002-02-26 Thread modssl-bugdb
Full_Name: Amael Version: mod_ssl-2.8.6-1.3.23 OS: FreeBSD 4.5 Submission from: (NULL) (194.237.142.7) I have problems creating a SSL vhost. I cant define SSL "options" ie SSLEngine etc outside part of the httpd.conf. If i do, i get this error message: Invalid command 'SSLEngine', perhaps mis-

[BugDB] mod_ssl port to POSIX 1003.1-2001 hosts (PR#665)

2002-02-23 Thread modssl-bugdb
Full_Name: Paul Eggert Version: 2.8.6 OS: Submission from: (NULL) (209.55.111.154) The new POSIX standard is now official (IEEE Std 1003.1-2001), and it has removed support for some obsolete utility options that modssl uses. Basically, the new POSIX has removed digit-string options (e.g., "tai

[BugDB] Can't load mod_ssl module (PR#649)

2002-02-13 Thread modssl-bugdb
You have to download and install (unzip and add to %PATH%) this tool:openssl-0.9.6c-win32.zip (http://www.modssl.org/contrib/) to solve this problem. >I have somme trouble with the installation of SSL on apache. >I downloaded and installed the files : >apache_1.3.22-win32-x86.exe >Apache_1.3.22

[BugDB] SSLMutex lock 'sem' and SSLSessionCache storage 'shm:' not available on Solaris8 (PR#664)

2002-02-08 Thread modssl-bugdb
Full_Name: Bert Courtin Version: mod_ssl-2.8.6-1.3.23 OS: sparc-sun-solaris2.8 Submission from: (NULL) (195.243.113.252) Hi, I'm trying to compile the following apache_1.3.23 & mm-1.1.3 & openssl-0.9.6c & mod_ssl-2.8.6-1.3.23 and get SSLMutex lock 'sem' and SSLSessionCache storage 'shm:' ava

Re: [BugDB] Resource on win2000 (PR#657)

2002-02-01 Thread modssl-bugdb
On Fri, Feb 01, 2002, Patrick Mayweg wrote: > > Ok, but can anybody of the Win32 folks give me the prototype of the > > DestroyMutex (or whatever it is called) function we had to call? I've no > > Win32 development environment available to figure this out myself... > [...] > the call is CloseHand

Re: [BugDB] Resource on win2000 (PR#657)

2002-02-01 Thread modssl-bugdb
Hi Ralf, the call is CloseHandle(HANDLE toBeClosed); Regards, Patrick [EMAIL PROTECTED] wrote: > On Wed, Jan 09, 2002, [EMAIL PROTECTED] wrote: > > > Full_Name: Zheng XiangYang > > Version: 2.8.5 > > OS: win2000 > > Submission from: (NULL) (211.155.22.200) > > > > the mutex handles "lock_cs[i]"

Re: [BugDB] Resource on win2000 (PR#657)

2002-02-01 Thread modssl-bugdb
On Wed, Jan 09, 2002, [EMAIL PROTECTED] wrote: > Full_Name: Zheng XiangYang > Version: 2.8.5 > OS: win2000 > Submission from: (NULL) (211.155.22.200) > > the mutex handles "lock_cs[i]" "in ssl_util_thread_setup" are not closed when > the module is unloaded. Each time the child dies, more handle

[BugDB] IE Problems connecting to mod_ssl server Linux (PR#663)

2002-01-31 Thread modssl-bugdb
Full_Name: Version: OS: Submission from: (NULL) (80.132.185.116) I'm having some very weird problems getting some IE clients to connect to a mod_ssl-enabled apache install, and I'm hoping someone has some insight on this beyond what's in the FAQ. The environment is as follows: Webserver vers

[BugDB] Problem with Opera 6.0 (PR#662)

2002-01-30 Thread modssl-bugdb
Full_Name: Roman Y. Shibrick Version: 2.8.5 OS: FreeBSD 4.4-stable Submission from: (NULL) (212.188.123.131) 1. I use Apache-1.3.22+mod_ssl_2.8.5+mod_perl+HTML-Embperl-1.3.4. 2. There is a following code: [- open FILE, "> /tmp/$filename"; print FILE $buffer while read( $fdat{myUp

Re: [BugDB] bug (PR#661)

2002-01-21 Thread modssl-bugdb
On Mon, Jan 21, 2002 at 08:02:06AM +0100, [EMAIL PROTECTED] wrote: > When I try to connect to my apache(1.3.12) mod_ssl server (mod_ssl-2.6.1) > using Internet Explorer 5 running on Win98/95/WinNT 4.0 I get a "page > not found error", just after accepting the (test) certificate I > requested creat

[BugDB] bug (PR#661)

2002-01-21 Thread modssl-bugdb
Full_Name: amit gupta Version: 2.6.1 OS: windows nt Submission from: (NULL) (203.200.122.35) Hi all, When I try to connect to my apache(1.3.12) mod_ssl server (mod_ssl-2.6.1) using Internet Explorer 5 running on Win98/95/WinNT 4.0 I get a "page not found error", just after accepting the (test)

[BugDB] apache/tomcat/mod_ssl 304 error (PR#660)

2002-01-16 Thread modssl-bugdb
Full_Name: Version: 2.8.5 OS: Solaris 2.8 Submission from: (NULL) (199.46.199.231) Configured the mod_ssl with ./configure \ "--with-apache=../apache_1.3.22" \ "--with-ssl=/usr/local/ssl" \ "--prefix=/usr/local/apache" \ "--enable-shared=ssl" \ "--enable-module=most" \ "--enable-shared=max" \

[BugDB] DirectoryIndex/Indexes with Client Auth (PR#658)

2002-01-11 Thread modssl-bugdb
Full_Name: Peter Pramberger Version: 2.8.4/2.8.5 OS: Linux Submission from: (NULL) (212.95.31.57) Sorry if this has been referenced elsewhere, I could find no mention of it. When I configure the following ssl virtual host, entering the following urls work fine - I get the index.html and the dir

[BugDB] Resource on win2000 (PR#657)

2002-01-10 Thread modssl-bugdb
Full_Name: Zheng XiangYang Version: 2.8.5 OS: win2000 Submission from: (NULL) (211.155.22.200) the mutex handles "lock_cs[i]" "in ssl_util_thread_setup" are not closed when the module is unloaded. Each time the child dies, more handles are opened (can see from task manager)

[BugDB] Openssl+modssl+Apache (PR#519)

2002-01-10 Thread modssl-bugdb
Hi, Got into the similar situation with Solaris and the error went away when I removed the binutils package . The package binutils installs ranlib which has become obsalate with SunOS5.X The utility (ar) will do this automatically. (Make sure you have /usr/ccs/bin in your path though ..) But a

Re: [BugDB] Intermittent "Cannot find server or DNS error" and "Page cann (PR#656)

2002-01-07 Thread modssl-bugdb
How do I close out a bug report? After receiving no response on my bug report for some time, I pursued the issue with Oracle Worldwide Support, since they package the Apache Web Server and mod_ssl with their Oracle9i Application Server. I found a working solution and would like reply to the bug

[BugDB] apachectl startssl failure (PR#655)

2001-12-31 Thread modssl-bugdb
Full_Name: Tomki Camp Version: 2.8.5 OS: RH Linux 6.1 base Submission from: (NULL) (203.146.126.222) I have installed apache 1.3.22 with Mod-ssl 2.8.5 as a DSO. I have PHP 4.1.1 compiled into the HTTPD binary statically. The 'apachectl start' works fine, but with 'startssl' I get a failure 'ht

[BugDB] 651 (more) (PR#653)

2001-12-25 Thread modssl-bugdb
Full_Name: J. Nick Koston Version: same OS: same Submission from: (NULL) (24.40.46.67) Using the patch on bug 643 I was able to get the following error, however I have no idea what it means. [Sat Dec 22 14:35:07 2001] [error] mod_ssl: Init: (servb.webbserv.net:443) Unable to create SSL context

[BugDB] bug 651 (PR#652)

2001-12-25 Thread modssl-bugdb
Full_Name: J. Nick Koston Version: same OS: same Submission from: (NULL) (24.40.46.67) Using the patch on bug 643 I was able to get the following error, however I have no idea what it means. [Sat Dec 22 14:35:07 2001] [error] mod_ssl: Init: (servb.webbserv.net:443) Unable to create SSL context

[BugDB] segv on hup signal (PR#651)

2001-12-25 Thread modssl-bugdb
Full_Name: J. Nick Koston Version: 2.8.5-1.3.22 OS: rh 6.2 Submission from: (NULL) (24.40.46.67) (gdb) back #0 0x400b9665 in SSL_CTX_ctrl () at netmsg.c:98 #1 0x8071b37 in ssl_init_ConfigureServer () at netmsg.c:98 #2 0x80713a7 in ssl_init_Module () at netmsg.c:98 #3 0x808eb49 in ap_init_mod

[BugDB] SSL negotiation failure (PR#650)

2001-12-22 Thread modssl-bugdb
Full_Name: Jason Terry Version: mod_ssl/2.8.5 OS: RedHat Linux 7.2 (fully up2dated) Submission from: (NULL) (207.173.85.120) Please note I have read up on this to try to find the problem, and all the fixes labeled on the message archives do not work. I have tried SSLSessionCache shmcb:/

[BugDB] Can't load mod_ssl module (PR#649)

2001-12-21 Thread modssl-bugdb
Full_Name: Franck Beulé Version: 2.8.5 OS: WinNT4 Submission from: (NULL) (194.2.208.236) I have somme trouble with the installation of SSL on apache. I downloaded and installed the files : apache_1.3.22-win32-x86.exe Apache_1.3.22-Mod_SSL_2.8.5-OpenSSL_0.9.6b-WIN32.zip following exactly the i

[BugDB] SSL handshake error (PR#647)

2001-12-21 Thread modssl-bugdb
Full_Name: Tom Watson Version: 2.5.1 OS: Solaris 2.8 Submission from: (NULL) (152.135.230.4) The following message is continuously being written to the error_log (approx. every second) [Tue Dec 18 13:41:26 2001] [error] mod_ssl: SSL handshake interrupted by system [Hint: Stop button pressed in

[BugDB] server startup failure (PR#645)

2001-12-14 Thread modssl-bugdb
Full_Name: Aryeh Katz Version: 2.8.5 OS: nt Submission from: (NULL) (209.140.121.226) Due to undefined symbols in the apachecore dll, I modified makefile.win and Makefile in the ssl directory, to define EAPI_MM. This allowed the apache server to start up However, once I did this, the server ter

[BugDB] Problem with Handshake (PR#646)

2001-12-14 Thread modssl-bugdb
Full_Name: Juan Version: using mod_ssl under Win32 OS: Submission from: (NULL) (64.164.164.250) What could be the problem? [12/Dec/2001 18:56:20 00532] [trace] OpenSSL: Read: SSLv3 read client certificate A [12/Dec/2001 18:56:20 00532] [trace] OpenSSL: Exit: failed in SSLv3 read client certifi

[BugDB] mod_ssl update for win32 using UnxUtils (PR#644)

2001-12-14 Thread modssl-bugdb
Full_Name: Aryeh Katz Version: OS: win32 Submission from: (NULL) (209.140.121.226) Fix for Makefile.win (configure.bat) requested: Instead of using cygwin (I found the download process too long), I used the gnu utilities for win32 package from http://www.wzw.tu-muenchen.de/~syring/win32/UnxUtil

[BugDB] mod_ssl cores when SSL_CTX_new fails (PR#643)

2001-12-14 Thread modssl-bugdb
Full_Name: Alex Kiernan Version: 2.8.5-1.3.22 OS: Solaris Submission from: (NULL) (194.217.90.3) Due to an unrelated problem, I had SSL_CTX_new failing, and returning NULL, causing mod_ssl to core, the attached patch avoids the core dump and provides diagnostics. Index: ssl_engine_init.c ==

Re: [BugDB] "graceful" needed after CRL update? (PR#641)

2001-12-14 Thread modssl-bugdb
On Tue, Dec 11, 2001 at 03:15:05PM +0100, [EMAIL PROTECTED] wrote: > Full_Name: robert joop > Version: 2.8.0 > OS: > Submission from: (NULL) (193.175.135.28) > > > on an apache 1.3.17 with mod_ssl 2.8.0, i installed new CRLs, called > make in the ssl.crl directory, but even days later, it still

[BugDB] Wasteful use of /dev/urandom (PR#642)

2001-12-11 Thread modssl-bugdb
Full_Name: Charles Jardine Version: 2.8.4 OS: Solaris 8 Submission from: (NULL) (131.111.8.103) While trussing my Apache to trace another problem, I noticed reads of 8k bytes from /dev/urandom. My configuration has SSLRandomSeed connect file:/dev/urandom 32 so I was hoping for reads of 32 by

[BugDB] "graceful" needed after CRL update? (PR#641)

2001-12-11 Thread modssl-bugdb
Full_Name: robert joop Version: 2.8.0 OS: Submission from: (NULL) (193.175.135.28) on an apache 1.3.17 with mod_ssl 2.8.0, i installed new CRLs, called make in the ssl.crl directory, but even days later, it still considers the CRLs as expired (which they aren't). is it necessary to restart the

[BugDB] Configuration problems (PR#640)

2001-12-10 Thread modssl-bugdb
Full_Name: Version: 2.8.5 OS: Linux Submission from: (NULL) (216.72.177.4) I have defined 2 domains in one server, based on IP address my etc/hosts file is like: 20.30.70.40server_namewww.domain_A domain_A 20.30.70.48 server_name www.domain_B domain_B my httpd.conf is like .. ..

[BugDB] client authentication (PR#567)

2001-05-24 Thread modssl-bugdb
Full_Name: R.Chu Version: mod_ssl-2.7.1-1.3.14 OS: Redhat Linux 7.0 Submission from: (NULL) (61.187.56.10) I have installed mod_ssl-2.7.1-1.3.14 with apache_1.3.14 and openssl-0.9.6a successfully. Now I want to get client authentication, I modified the httpd.conf as this: SSLVerifyClient requi

[BugDB] Symbol referencing errors (PR#568)

2001-05-24 Thread modssl-bugdb
Full_Name: Gabriel Hung Version: 2.8.4-1.3.20 OS: Solaris 7 Submission from: (NULL) (128.107.248.220) After fixed alloc.c file not found by renaming it to ap_alloc.c, it seems to compile fine 'til it hit by another error as following: ranlib libssl.a <=== src/modules/ssl <=== src/modules gcc -c

[BugDB] apache crash with mod_ssl (PR#569)

2001-05-24 Thread modssl-bugdb
Full_Name: Josef Goebel Version: 2.8.4 OS: Win2k Submission from: (NULL) (62.138.8.66) We are running an application causing lots of traffic on the server including file upload. On the server side we've written two Apache modules handling incoming requests. The problem is, that Apache (1.3.20)

[BugDB] handshake problem by pocket IE thru SSLv3 (PR#570)

2001-05-24 Thread modssl-bugdb
Full_Name: Adrian Mak Version: 2.8.1 OS: RH 7.0 Submission from: (NULL) (152.101.109.228) this is the linux config RH 7.0 openssl 0.9.6 mod_ssl 2.8.1 apache 1.3.19 I found that there is a handshake time-out problem by IPaq H3630 pocket PC, IE using SSLv3 I have to disable SSLv3 so that pocket

[BugDB] fix for compiler warning on 64bit architectures (PR#566)

2001-05-20 Thread modssl-bugdb
Full_Name: Peter Poeml Version: 2.8.3-1.3.19 OS: SuSE Linux 7.2 Submission from: (NULL) (213.95.15.201) Hi, this is a small patch that fixes a (cosmetical) cast warning on 64 bit architectures: The file is contained in pkg.contrib/sxnet.tar. Thanks, Peter --- mod_sxnet.c.origSun Feb 2

Re: [BugDB] Compile failure on Solaris 7 (PR#559)

2001-05-20 Thread modssl-bugdb
I have tried to recompile using the latest modssl (2.8.3 - 1.3.19). I fail with the same errors in alloc.c. I do not have any problems building apache as distributed by apache.org. I am not trying to build in any other modules to my apache (other than the ones that ship with the apache source).

[BugDB] It didn't worked (PR#565)

2001-05-20 Thread modssl-bugdb
Full_Name: Daniel K. S. Version: 2.8.3 OS: Linux Slackware 7.1 Submission from: (NULL) (200.176.42.80) [Tue May 15 20:35:06 2001] [notice] Apache/1.3.19 (Unix) PHP/4.0.4pl1 mod_ssl/2.8.3 OpenSSL/0.9.6a configured -- resuming normal operations [Tue May 15 20:36:15 2001] [error] mod_ssl: SSL hands

Re: [BugDB] ssl_engine_mutex compile problems (PR#564)

2001-05-20 Thread modssl-bugdb
On Wed, May 09, 2001 at 10:24:23PM +0200, [EMAIL PROTECTED] wrote: > Full_Name: Marcel Erkens > Version: 2.8.2 > OS: Linux 2.2.7 > Submission from: (NULL) (209.180.107.60) > > > Trying to build Apache 1.3.19 with mod_ssl 2.8.2, php4.0.4pl1, mod_perl 1.25 and > mod_auth_mysql 2.20 and I'm about r

Re: [BugDB] Apache won't start with error:0B080074 (PR#560)

2001-05-15 Thread modssl-bugdb
On Wed, May 02, 2001 at 01:29:12AM +0200, [EMAIL PROTECTED] wrote: [TRUE] > [01/May/2001 15:53:06 24203] [warn] Init: (sun20057.dn.net:80) RSA server > certificate is a CA certificate (BasicConstraints: CA = > = TRUE !?) Your server certificate should not be a CA certificate. > [01/May/2001 15:

[BugDB] ssl_engine_mutex compile problems (PR#564)

2001-05-15 Thread modssl-bugdb
Full_Name: Marcel Erkens Version: 2.8.2 OS: Linux 2.2.7 Submission from: (NULL) (209.180.107.60) Trying to build Apache 1.3.19 with mod_ssl 2.8.2, php4.0.4pl1, mod_perl 1.25 and mod_auth_mysql 2.20 and I'm about ready to teach that box how to fly! First it bailed on me at line 297, 306 and 338

[BugDB] +FakeBasicAuth and ApJServAction (PR#562)

2001-05-15 Thread modssl-bugdb
Full_Name: Ari Suutari Version: 2.8.2 OS: FreeBSD 4.3 Submission from: (NULL) (195.197.177.229) I have a SSL site using "SSLOptions +FakeBasicAuth" and "SSLVerifyClient require". Access to static content works OK, but when trying to access pages served by Apache JServ 1.1.2, I get FORBIDDEN erro

[BugDB] modssl x509 nameopt support (PR#563)

2001-05-15 Thread modssl-bugdb
Full_Name: Ari Suutari Version: 2.8.2 OS: FreeBSD 4.3 Submission from: (NULL) (195.197.177.229) Hi, Could it be possible that future mod_ssl versions included some kind of support similar as openssl x509 -nameopt ? This would help on formatting subject for certificates which contain characters

[BugDB] modssl ostensibly not working... (PR#561)

2001-05-15 Thread modssl-bugdb
Full_Name: cube Version: 2.8.1-1.3.19 OS: redhat 6.2 Submission from: (NULL) (4.33.194.174) It seems as though modssl is compiled in, and when I startssl, it looks like it works fine. [Fri May 4 16:57:05 2001] [notice] Apache/1.3.19 (Unix) mod_ssl/2.8.2 OpenSSL/0.9.6a PHP/4.0.4pl1 FrontPage/

[BugDB] Apache won't start with error:0B080074 (PR#560)

2001-05-04 Thread modssl-bugdb
Full_Name: Ray Siapno Version: 2.7.1 OS: Solaris 8.0 Submission from: (NULL) (204.247.197.6) Apache won't start and give me these messages: [01/May/2001 15:53:00 24202] [info] Server: Apache/1.3.14, Interface: mod_ssl/2.7.1, Library: OpenSSL/0.9.6 [01/May/2001 15:53:00 24202] [info] Init: 1st

  1   2   3   4   5   6   7   8   >