For the record ... close BugDB-PR#580 [Duplicate CVE-2005-2700]

2008-02-08 Thread James Collier
I'm not sure if anyone ever inherited or merged the original Apache mod_ssl bug list from engelschall.com - or less likely, still cares - but if so, the vulnerability & proposed fix given as BugDB-PR#580 [14-Jun-2001] can be closed as a duplicate of CVE-2005-2700. Yes, OK, I'

bugdb

2002-11-30 Thread Rainer Jung
Hi, does anybody know, why the mod_ssl bugdb is not accessible at the moment? The link to the bugdb on the support page only gives the listing of a directory, instead of activating the cgi. Maybe someone is able to repair it. Thanks for your help Rainer Jung kippdata

bugdb broken

2002-08-15 Thread Dan Stromberg
The FAQ says the bugdb is the preferred way of reporting a bug, however, the bugdb link just gives a small directory index instead of a useful bug-submission page. -- Dan Stromberg UCI/NACS/DCS

[BugDB] mod_ssl assumes SSL_BASE to be /usr/local/ssl if the directory exists (PR#739)

2002-08-01 Thread modssl-bugdb
Full_Name: CJ Version: mod_ssl-2.8.10-1.3.26 OS: FreeBSD 4.6-STABLE Submission from: (NULL) (216.17.129.22) In the file pkg.sslmod/libssl.module there is the following code: if [ ".$SSL_BASE" = . ]; then if [ -d /usr/local/ssl ]; then SSL_BASE="/usr/local/ssl

[BugDB] SSL_connect:error in SSLv2/v3 read server hello A (PR#738)

2002-07-29 Thread modssl-bugdb
Full_Name: Keith Mastin Version: mod_ssl-2.8.5-3 OS: Redhat 7.2 Submission from: (NULL) (216.138.194.32) The webserver has a site http:www.mcleodlake.com that I configured ssl with a document root directory of mcleodlake.com/webmail/, where I have squirrelmail running. I want the login process f

[BugDB] SSLLog into pipe on Solaris hangs when restarted (PR#732)

2002-07-09 Thread modssl-bugdb
Full_Name: Ralph Mengen Version: 2.8.10-1.3.26 OS: SunOS 5.8 Submission from: (NULL) (129.26.9.7) Hi. I pipe the SSLLog (and apache's ErrorLog also) into a command like SSLLog "|/mylogger" ErrorLog "|/mylogger" When I now sent a SIGHUP to the apache server for restarting it will hang. This is

RE: [BugDB] Security Information! (PR#731)

2002-07-08 Thread Gilles Gros
This can also happend when you have a frame (or iframe ) with no src. > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Colm McCartan > Sent: Monday, July 08, 2002 10:04 AM > To: [EMAIL PROTECTED] > Subject: Re: [BugDB] Securit

Re: [BugDB] Security Information! (PR#731)

2002-07-08 Thread Colm McCartan
At 17:49 08/07/2002 +0200, you wrote: >I Use windows 2000 Advanced server + Apache 1.3.22 + tomcat 4.0.3 + mod_jk >1.1.0. >When i connect via HTTPS whith MSIE 5.00.29 i get "Security Information!" >error. >I get this random and my pages haven't "NonSecure Items". >The detail of message is: "This p

[BugDB] compile fails (OpenBSD 3.0, mod_ssl/Apache 1.3.26) (PR#730)

2002-07-08 Thread modssl-bugdb
Full_Name: Denis Chatelain Version: 2.8.10-1.3.26 OS: OpenBSD 3.0 Submission from: (NULL) (193.252.202.117) Apache fails to compile with the mod_ssl 2.8.10-1.3.26 patch (I might do something wrong somewhere, but it's easier to suspect somebody else :). It looks for openssl and ssleay in bin, app

[BugDB] Security Information! (PR#731)

2002-07-08 Thread modssl-bugdb
Full_Name: Di Vincenzo Renzo Version: 2.8.5 OS: windows 2000 advanced server Submission from: (NULL) (194.184.159.70) I Use windows 2000 Advanced server + Apache 1.3.22 + tomcat 4.0.3 + mod_jk 1.1.0. When i connect via HTTPS whith MSIE 5.00.29 i get "Security Information!" error. I get this rand

[BugDB] SSLRandomSeed: Number of bytes to read from EGD is ignored (PR#729)

2002-07-04 Thread modssl-bugdb
Full_Name: Philipp Hullmann Version: 2.8.10 OS: AIX 4.3.3 Submission from: (NULL) (130.75.48.131) When using EGD to seed the random number generator, mod_ssl always reads 255 bytes of entropy instead of the number given in the configuration file. Patch (the SSL_LIBRARY_VERSION parameter shoul

[BugDB] error when i create private key (PR#728)

2002-07-03 Thread modssl-bugdb
Full_Name: saher Version: OS: Submission from: (NULL) (195.226.230.37) Hi The problem i have it , when i wont create a new RSA Private Key for our Apache server using this command $ openssl genrsa -des3 -out ca.key 1024 OR $ openssl genrsa -des3 1024 > ca.key this error coming for m

[BugDB] POST re-negotiation with Apache2 (PR#727)

2002-07-02 Thread modssl-bugdb
Full_Name: kuba lipinski Version: 2.8.10-1.3.26 OS: Windows Submission from: (NULL) (213.17.133.2) hello, when will POST re-negotiation be implemented for Apache2? it is very important feature. __ Apache Interface to OpenSSL (m

Re: [BugDB] Performance issue (PR#723)

2002-07-01 Thread Denis A.V.Jr.
Hi Lutz... I compile apache using...: (from mod_ssl dir) export CFLAGS='-DHARD_SERVER_LIMIT=8192'; ./configure --disable-rule=DEV_RANDOM --disable-rule=EXPAT --disable-rule=IRIXN32 --disable-rule=IRIXNIS --disable-rule=SHARED_CHAIN --disable-rule=WANTHSREGEX --enable-module=most --enable-module=

Re: [BugDB] PRIVATE: problem on mod_ssl-2.8.10-1.3.26 and openssl-0.9.7-pre1.tar.gz (PR#726)

2002-07-01 Thread Lutz Jaenicke
On Mon, Jul 01, 2002 at 12:52:14PM +0200, [EMAIL PROTECTED] wrote: > Full_Name: Dante Picca > Version: 2.8.10 > OS: Linux RedHat 7.2 Athlon > Submission from: (NULL) (195.110.148.66) > > > I've found a problem compiling mod_ssl-2.8.10-1.3.26 with > openssl-0.9.7-pre1.tar.gz ... > ssl_engine_vars

[BugDB] PRIVATE: problem on mod_ssl-2.8.10-1.3.26 and openssl-0.9.7-pre1.tar.gz (PR#726)

2002-07-01 Thread modssl-bugdb
Full_Name: Dante Picca Version: 2.8.10 OS: Linux RedHat 7.2 Athlon Submission from: (NULL) (195.110.148.66) Hi, I've found a problem compiling mod_ssl-2.8.10-1.3.26 with openssl-0.9.7-pre1.tar.gz I've used the following commands: cd openssl-0.9.7 make make test make install cd ../mod_ssl-2.8.10

Re: [BugDB] Performance issue (PR#723)

2002-06-29 Thread Lutz Jaenicke
On Fri, Jun 28, 2002 at 11:25:09PM +0200, [EMAIL PROTECTED] wrote: > I tried with the prngd and exactly the same problem appeared. I don't think, that your problem has to do with random seeding. Even the built-in seeding should not cause significant load increases. What other modules or add-ons

Re: [BugDB] Performance issue (PR#723)

2002-06-29 Thread modssl-bugdb
Hi, I tried with the prngd and exactly the same problem appeared. =( Regards On Mon, 2002-06-24 at 05:52, Thomas Binder wrote: > Hi! > > On Sat, Jun 22, 2002 at 01:49:12AM +0200, [EMAIL PROTECTED] wrote: > > This caused a different behavior. I mean, it took a little while > > (~3 minutes), to

[BugDB] SSL_CLIENT_CERT_CHAIN_* ist missing (bugfix included) (PR#725)

2002-06-29 Thread modssl-bugdb
Full_Name: Steffen Ullrich Version: 2.8.10 OS: Linux Submission from: (NULL) (217.228.234.65) SSL_CLIENT_CERT_CHAIN_* is missing. The problem can be tracked down to following code in ssl_engine_vars.c: 309 else if (ssl != NULL && strlen(var) > 18 && strcEQn(var, "CLIENT_CERT_CHAIN_", 18

Re: [BugDB] Performance issue (PR#723)

2002-06-25 Thread modssl-bugdb
Hi Thomas, I'll try that and send the results to the list. thank you On Mon, 2002-06-24 at 05:52, Thomas Binder wrote: > Hi! > > On Sat, Jun 22, 2002 at 01:49:12AM +0200, [EMAIL PROTECTED] wrote: > > This caused a different behavior. I mean, it took a little while > > (~3 minutes), to the load

Re: [BugDB] Performance issue (PR#723)

2002-06-24 Thread Thomas Binder
Hi! On Sat, Jun 22, 2002 at 01:49:12AM +0200, [EMAIL PROTECTED] wrote: > This caused a different behavior. I mean, it took a little while > (~3 minutes), to the loadav get high, and after a few minutes, > it got worse... the loadav reached ~60... Without the > "no-threads no-idea -fPIC" options a

[BugDB] Buffer overflow in mod_ssl (patch enclosed) (PR#724)

2002-06-23 Thread modssl-bugdb
Full_Name: Frank Denis - Jedi/Sector One Version: 2.8.8 (OpenBSD-current) OS: OpenBSD Submission from: (NULL) (212.198.0.93) There's an easy to exploit (through .htaccess files) buffer overflow in mod_ssl. The EAPI's rewrite parser hook skips spaces without checking whether the pointer went past

[BugDB] Performance issue (PR#723)

2002-06-22 Thread modssl-bugdb
Full_Name: Denis Almeida Vieira Junior Version: 2.8.9 OS: Solaris 2.7 Submission from: (NULL) (200.221.27.122) Hey there. I've been detecting some performance problems, since the version 2.8.6. Today, I'm testing with Apache 1.3.26 + mod_ssl 2.8.9 and openssl 0.9.6d. The configuration "Apache

[BugDB] Pb start apacheSSL (PR#722)

2002-06-21 Thread modssl-bugdb
Full_Name: Rebolj Version: openssl 9.6a OS: Solaris Submission from: (NULL) (171.16.0.60) when i start it writes Init: Loading certificate & private key of SSL-aware server pise.:443[19/Jun/2002 11:24:06 00536] [error] Init: Unable to read server certificate from file /HOME/webadm/Config/ssl.

[BugDB] Broken stdout when using https and http (PR#721)

2002-06-20 Thread modssl-bugdb
Full_Name: Alex Barylo Version: 2.8.8-1.3.24 OS: Red Hat 6.2 Submission from: (NULL) (170.115.249.14) PROBLEM === Sorry for a lot of details, thought you might need them. I have a small FTP site writen in Perl using Apache::Registry. The site is one script that gets invoked all over again.

Re: [BugDB] PRIVATE: apache 1.3.26 (PR#720)

2002-06-20 Thread modssl-bugdb
On Wed, Jun 19, 2002 at 01:38:07AM +0200, [EMAIL PROTECTED] wrote: > Full_Name: Michael Duncan > Version: 2.8.8 > OS: RedHat 7.2 > Submission from: (NULL) (216.224.74.74) > > > I was trying to apply the latest apache 1.3.26 to my server and the mod_ssl is > not allowing the install. Is there an

[BugDB] I/O Error when using https (PR#715)

2002-06-13 Thread modssl-bugdb
Full_Name: Stephan PAVEK, Mag. Version: 2.8.1 OS: Win NT 40 Submission from: (NULL) (193.83.101.90) We are running a web-application using SSL. The environment is as follows: IAS 1.0.2.2.2 (ORACLE) using Apache (v 1.3.19) and open_ssl (v 0.9.5a) on an AIX-Machine, ORACLE-DB v. 8.1.7.3. Using IE

[BugDB] Invalid signature on CRL (PR#716)

2002-06-12 Thread modssl-bugdb
Full_Name: Philippe Jourdain Version: 2.8.8 OS: Linux & Windows Submission from: (NULL) (62.23.37.12) My case: We have an AC with 2 public keys, one is used to sign our SmartCard certificate and the other is used to sign the CRL according to the SmartCard certificate. The DN is the same for the

Re: [BugDB] I/O Error when using https (PR#715)

2002-06-10 Thread Jason
om: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Monday, June 10, 2002 8:24 AM Subject: [BugDB] I/O Error when using https (PR#715) > Full_Name: Stephan PAVEK, Mag. > Version: 2.8.1 > OS: Win NT 40 > Submission from: (NULL) (193.83.101.90) &

[BugDB] I/O Error when using https (PR#715)

2002-06-10 Thread modssl-bugdb
Full_Name: Stephan PAVEK, Mag. Version: 2.8.1 OS: Win NT 40 Submission from: (NULL) (193.83.101.90) We are running a web-application using SSL. The environment is as follows: IAS 1.0.2.2.2 (ORACLE) using Apache (v 1.3.19) and open_ssl (v 0.9.5a) on an AIX-Machine, ORACLE-DB v. 8.1.7.3. Using IE

RE: [BugDB] Error Starting Apache when trying to usemod_ssl(PR#712)

2002-06-08 Thread Prachait Saxena
TED]> To: [EMAIL PROTECTED] Date: Fri, 07 Jun 2002 09:22:16 -0400 Subject: RE: [BugDB] Error Starting Apache when trying to use mod_ssl (PR#712) > It looks like you are installing on a Windows platform. I had the same > problem. Then I remembered that I had not overwritten my Apache files

[BugDB] Errors on log file and IE5.5+ gets errors when conneting to my Apache site. (PR#714)

2002-06-07 Thread modssl-bugdb
Full_Name: Victoria Version: OS: Dynix-ptx Submission from: (NULL) (196.23.192.242) I am though getting a lot of errors in our log files. Please see also the error that Internet Explorer 5.5 + gives when accessing the site. Any help in this regard would be appreciated. Below are three of t

RE: [BugDB] Error Starting Apache when trying to use mod_ssl(PR#712)

2002-06-07 Thread John Wagner
ohn Wagner *** Carpe Diem Before the Diem Carpes You! *** -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Prachait Saxena Sent: Friday, June 07, 2002 5:31 AM To: [EMAIL PROTECTED] Subject: Re: [BugDB] Error Starting Apache when trying to use mod_ssl(PR#712)

Re: [BugDB] Error Starting Apache when trying to use mod_ssl(PR#712)

2002-06-07 Thread Prachait Saxena
I also have excatly same problem... Prachait Saxena -Original Message- From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Date: Thu, 6 Jun 2002 04:39:06 +0200 (MET DST) Subject: [BugDB] Error Starting Apache when trying to use mod_ssl (PR#712) > Full_Name: Luke Whitford > Version:

[BugDB] Error Starting Apache when trying to use mod_ssl (PR#712)

2002-06-06 Thread modssl-bugdb
Full_Name: Luke Whitford Version: 2.8.8 OS: Win98 Submission from: (NULL) (203.59.68.234) When trying to start apache (1.3.24) with the mod_ssl module being loaded the following error occurs: C:\Program Files\Apache Group\Apache>apache Syntax error on line 195 of c:/program files/apache group/a

[BugDB] "require" field via FakeBasicAuth broken on indexes (PR#708)

2002-05-30 Thread modssl-bugdb
Full_Name: Jason Haar Version: 2.8.4 through 2.8.8 OS: Linux Submission from: (NULL) (203.96.111.202) I've got SSL certs and FakeBasicAuth 99.9% working well. e.g. With a valid client cert and that DN put into a DB file, I can view https://domain/dir/test.php, and I've written that to show me

[BugDB] ssl_rand_seed needs to open in binary mode (PR#705)

2002-05-17 Thread modssl-bugdb
Full_Name: EKR Version: 2.8.8-1.3.24 OS: NT 4.0 Submission from: (NULL) (198.144.203.242) ssl_engine_rand.c:ssl_rand_seed() fopens the random file in text mode. On Unix this is fine but on Windows this means that it will stop as soon as it sees an EOD in the file. Since the random file is often

RE: [BugDB] mod_ssl.so does not load (again, sorry) (PR#704)

2002-05-16 Thread John . Airey
; To: [EMAIL PROTECTED] > Subject: Re: [BugDB] mod_ssl.so does not load (again, sorry) (PR#704) > > > Oeps, > > Let me correct myself... only no-ssl binaries on > httpd.apache.org for now. > Guess someone should compile it for you then (if possible at all). > > Sorry, >

[BugDB] mod_ssl.so does not load (again, sorry) (PR#704)

2002-05-15 Thread modssl-bugdb
Full_Name: Dimitri Pochet Version: Apache_1.3.24-Mod_SSL_2.8.8-OpenSSL_0.9.6c-WIN32.zip OS: NT4 SP6a Submission from: (NULL) (217.136.205.41) Steps to reproduce: Installation of Apache, keys generation and installation of modSSL, according to http://tud.at/programm/apache-ssl-win32-howto.php3 li

RE: [BugDB] Client Authentication BUG with FakeBasicAuth (PR#695)

2002-05-07 Thread modssl-bugdb
th this code care to comment? Rick Barry Compaq Computer Corporation Compaq Secure Web Server Project Team 110 Spit Brook Road OpenVMS System Software Group Nashua, NH 03062 Business Critical Server Group (603) 884-0634 -----Original Message- From: Barry, Richard Sent: We

[BugDB] sig 11 in mod_ssl module init (PR#702)

2002-05-03 Thread modssl-bugdb
Full_Name: Bart van Leeuwen Version: various OS: FreeBSD Submission from: (NULL) (195.64.50.136) Situation: Server has multiple virtual hosts and uses the namevirtualhost option. A ssl virtual host is defined using its hostname instead of its ip. Due to a dns failure, 1 of the names used for a

[BugDB] mod_ssl on HP-UX 11.00 (PR#699)

2002-04-27 Thread modssl-bugdb
Full_Name: Luca Fasolo Version: httpd-2.0.35 OS: HP-UX Submission from: (NULL) (212.141.20.125) Compiling Apache 2.0.35 with these configuration options: # cat config2035Luca CC=cc CFLAGS="-O2 +DD32" ./configure \ --enable-mods-shared=all \ --enable-ssl

RE: [BugDB] Client Authentication BUG with FakeBasicAuth (PR#695)

2002-04-24 Thread modssl-bugdb
Nashua, NH 03062 Business Critical Server Group (603) 884-0634 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 17, 2002 6:54 AM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: [BugDB] Client Authentication BUG with FakeBasicAuth (PR

[BugDB] cannot open pages with ssl (PR#697)

2002-04-23 Thread modssl-bugdb
Full_Name: Version: 2-.8.8 1.3.24 OS: w2k server Submission from: (NULL) (195.23.102.93) i have a ie 6 and all pages with ssl works fine but when ie5 with 98se request a page with ssl he read cert we confirm but give a error page? i look to ssl log and i detect this: Connection: Client IP:

[BugDB] mod_ssl long hostnames still broken??? (PR#696)

2002-04-19 Thread modssl-bugdb
problem. I experimented by shortening ServerName and sure enough the server started working but with other error messages about the certificate not matching ServerName. I must confess that there was this bug report 300 from 1999 that clued me in. http://www.modssl.org/support/bugdb/index.cgi/open?id

[BugDB] Client Authentication BUG with FakeBasicAuth (PR#695)

2002-04-18 Thread modssl-bugdb
Full_Name: Sergio Rabellino Version: 2.8.8 OS: Solaris 7 Submission from: (NULL) (130.192.239.73) The "if" in ssl_engine_kernel.c at line 1130 to check against DN/password authorization directly form a client, break also the internal redirect done by apache under some conditions, as the director

Re: [BugDB] can't load x:\apache\mod_ssl.so into server (PR#694)

2002-04-17 Thread modssl-bugdb
Full_Name: Daphne Chen Version: 2.8.4 OS: win2K Submission from: (NULL) (12.44.172.142) Receive the following error: C:\WINNT\Profiles\Administrator>apache -D SSL Syntax error on line 203 of d:/apache/conf/httpd.conf: Cannot load d:/apache/modules/mod_ssl.so into server: (126) The specified mod

Re: [BugDB] SSL problem question (PR#692)

2002-04-09 Thread modssl-bugdb
On Mon, 8 Apr 2002 [EMAIL PROTECTED] wrote: > Hi my name is Jaymes Redus and I work with Affliated Computer Systems > here in Tallahassee, I just wanted to ask a question concerning a SSL > issue that we are having. We are having a problem with our Upload > functionality on our Web Application. I

Re: [BugDB] SSL problem question (PR#692)

2002-04-08 Thread Cliff Woolley
On Mon, 8 Apr 2002 [EMAIL PROTECTED] wrote: > Hi my name is Jaymes Redus and I work with Affliated Computer Systems > here in Tallahassee, I just wanted to ask a question concerning a SSL > issue that we are having. We are having a problem with our Upload > functionality on our Web Application. I

[BugDB] SSL problem question (PR#692)

2002-04-08 Thread modssl-bugdb
Full_Name: Jaymes Redus Version: Apache version 1.3.12 mod_ssl 2.6.2 OS: Windows 2000 Submission from: (NULL) (208.63.63.94) Hi my name is Jaymes Redus and I work with Affliated Computer Systems here in Tallahassee, I just wanted to ask a question concerning a SSL issue that we are having. We ar

AW: [BugDB] PRIVATE: Build and install the SSL-aware Apache (PR#670)

2002-03-31 Thread Peter Stöhr
] Gesendet: Samstag, 09. März 2002 21:28 An: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Betreff: [BugDB] PRIVATE: Build and install the SSL-aware Apache (PR#670) Full_Name: Peter Stoehr Version: mod_ssl-2.8.5-1.3.22 OS: SuSE Linux 7.1 (Kernel 2.2.18) Submission from: (NULL) (212.17.86.61) Hello mod_ss

Re: [BugDB] PRIVATE: bogus SSL handshake timeouts under load? (PR#680)

2002-03-27 Thread modssl-bugdb
On Thu, Mar 21, 2002, [EMAIL PROTECTED] wrote: > [...] > [Thu Mar 21 12:14:29 2002] [error] mod_ssl: SSL handshake timed out (client > 130.167.114.38, server hoth.stsci.edu:443) > > When the timeout occurs one of my threads (in java) that is making the > https connection locks up. > > I believe

Re: [BugDB] more helpful message when failing to get mutex (PR#679)

2002-03-27 Thread modssl-bugdb
On Thu, Mar 21, 2002, [EMAIL PROTECTED] wrote: > Full_Name: Fred Romelfanger > Version: 2.8.7 > OS: Solaris > Submission from: (NULL) (130.167.114.38) > > During a stress test with modssl, I get the following error: > > [21/Mar/2002 13:37:55 14476] [warn] Failed to acquire global mutex lock >

Re: [BugDB] SSLLog into pipe (PR#678)

2002-03-27 Thread modssl-bugdb
On Wed, Mar 20, 2002, [EMAIL PROTECTED] wrote: > Full_Name: martin vetter > Version: 2.8.5 > OS: mac os 10.1.3 > Submission from: (NULL) (62.16.152.206) > > SSLLog "|/usr/sbin/rotatelogs /var/log/httpd/ssl_engine_log 86400" > > does work. > > SSLLog "| /usr/sbin/rotatelogs /var/log/httpd/ssl_e

[BugDB] more helpful message when failing to get mutex (PR#679)

2002-03-22 Thread a . moon
I am not in the office for the week 18-22 March 2002 If it's an Online Learning Support Unit / Web/ MUBSWEB/ MUBS Online matter that requires urgent attention then please contact either Kirsteen1 or Sanjay1 who should be able to help. Otherwise I will contact you as soon as possible on my retur

[BugDB] PRIVATE: bogus SSL handshake timeouts under load? (PR#680)

2002-03-22 Thread modssl-bugdb
Full_Name: Fred Romelfanger Version: 2.8.7 OS: Solaris Submission from: (NULL) (130.167.114.38) I noticed that during a stress test, that I would see the following error ocassionally. [Thu Mar 21 12:14:29 2002] [error] mod_ssl: SSL handshake timed out (client 130.167.114.38, server hoth.stsci.e

[BugDB] more helpful message when failing to get mutex (PR#679)

2002-03-22 Thread modssl-bugdb
Full_Name: Fred Romelfanger Version: 2.8.7 OS: Solaris Submission from: (NULL) (130.167.114.38) During a stress test with modssl, I get the following error: [21/Mar/2002 13:37:55 14476] [warn] Failed to acquire global mutex lock Looking at the code, it would be nice to get the unix errno or

[BugDB] SSLLog into pipe (PR#678)

2002-03-20 Thread modssl-bugdb
Full_Name: martin vetter Version: 2.8.5 OS: mac os 10.1.3 Submission from: (NULL) (62.16.152.206) SSLLog "|/usr/sbin/rotatelogs /var/log/httpd/ssl_engine_log 86400" does work. SSLLog "| /usr/sbin/rotatelogs /var/log/httpd/ssl_engine_log 86400" does not (note the whitespace after "|"). "ErrorL

[BugDB] got fatal: relocation error in solaris 8 (PR#676)

2002-03-15 Thread modssl-bugdb
Full_Name: Ian Dimaunahan Version: mod_ssl-2.8.7 OS: Solaris 8 Submission from: (NULL) (203.131.77.51) hi all! i'm getting this error when starting my apache 1.3.23/mod_ssl-2.8.7 install in solaris 8 Syntax error on line 206 of /usr/local/apache/conf/httpd.conf: Cannot load /usr/local/apache/l

[BugDB] Apache/mod_ssl compilation error (PR#675)

2002-03-15 Thread modssl-bugdb
Full_Name: Haihong Wang Version: 2.8.7-1.3.23 OS: RedHat 7.1 Submission from: (NULL) (128.107.253.38) Using the following source code packages: apache_1.3.23 mod_ssl-2.8.7-1.3.23 openssl-0.9.6c OS RedHat 7.1, gcc v3.0 Compilation of openssl ok, configuration of mod_ssl is fine. But while compi

[BugDB] compilation problem with Allaire Jrun and EAPI (PR#674)

2002-03-14 Thread modssl-bugdb
Full_Name: Brian Chen Version: 2.8.6 OS: linux Submission from: (NULL) (63.203.135.108) After I install the apache everything works fine but it crashes sometimes and I noticed this in the error log for the web server. [Thu Mar 14 03:29:16 2002] [warn] Loaded DSO /usr/local/jrun/connectors/apa

[BugDB] mod_ssl-2.8.7-1.3.23.tar.gz and mod_ssl-2.8.6-1.3.23.tar.gz not working properly (PR#673)

2002-03-13 Thread modssl-bugdb
Full_Name: Santosh pandey Version: mod_ssl-2.8.7-1.3.23.tar.gz& mod_ssl-2.8.6-1.3.23.tar.gz OS: AIX4.3.3 Submission from: (NULL) (208.132.249.249) Hi, Recently I installed the latest version of mod_ssl aware apache server. Everythings till installation went fine and even I configured the httpd.c

[BugDB] About CRL (PR#672)

2002-03-11 Thread modssl-bugdb
Full_Name: Shiva murugesan Version: 2.8.5 OS: unix Submission from: (NULL) (213.132.36.114) Env : Apache/1.3.22 (Unix) mod_ssl/2.8.5 OpenSSL/0.9.6c. When IE browser (5.0,5.5, 6.0 )client presents an expired/revoked certficate the modssl handsake fails and the IE browser does not display the cor

Re: [BugDB] mod_ssl segfaults under Solaris 2.8 (PR#671)

2002-03-11 Thread modssl-bugdb
-==-=-=---=---==-==---==--=-==--=--==- Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed At 03:18 PM 3/10/2002 +0100, you wrote: On Sun, Mar 10, 2002 at 09:04:04AM +0100, [EMAIL PROTECTED] wrote: > Full_Name: Ari D Jordon > Version: 2.8.7 > OS: Solaris 2

Re: [BugDB] mod_ssl segfaults under Solaris 2.8 (PR#671)

2002-03-11 Thread modssl-bugdb
so it was an obvious place to start. BTW: when replying to [BugDB] postings, then please let your replies go to [EMAIL PROTECTED] - that way they will go into the bug database and get sent automagically to the list. vh Mads Toftum -- With a rubber duck, one's never alone. -- &

Re: [BugDB] mod_ssl segfaults under Solaris 2.8 (PR#671)

2002-03-10 Thread Geoff Thorpe
Hi, On Monday 11 March 2002 03:18, [EMAIL PROTECTED] wrote: > Are you using the engine version of openssl? Unless you have a supported > crypto accelerator, then you shouldn't be using the engine version. I can assure you that it should make no difference. The only reason the non-engine version

Re: [BugDB] mod_ssl segfaults under Solaris 2.8 (PR#671)

2002-03-10 Thread R. DuFresne
On Sun, 10 Mar 2002 [EMAIL PROTECTED] wrote: > On Sun, Mar 10, 2002 at 09:04:04AM +0100, [EMAIL PROTECTED] wrote: > > Full_Name: Ari D Jordon > > Version: 2.8.7 > > OS: Solaris 2.8 > > Submission from: (NULL) (68.49.144.213) > > > > > > using apache 1.3.23, starting httpd with -DSSL immediately

Re: [BugDB] mod_ssl segfaults under Solaris 2.8 (PR#671)

2002-03-10 Thread modssl-bugdb
On Sun, Mar 10, 2002 at 09:04:04AM +0100, [EMAIL PROTECTED] wrote: > Full_Name: Ari D Jordon > Version: 2.8.7 > OS: Solaris 2.8 > Submission from: (NULL) (68.49.144.213) > > > using apache 1.3.23, starting httpd with -DSSL immediately seg faults. post > mortem revealed it was dying in ssl_cmd_S

[BugDB] mod_ssl segfaults under Solaris 2.8 (PR#671)

2002-03-10 Thread modssl-bugdb
Full_Name: Ari D Jordon Version: 2.8.7 OS: Solaris 2.8 Submission from: (NULL) (68.49.144.213) using apache 1.3.23, starting httpd with -DSSL immediately seg faults. post mortem revealed it was dying in ssl_cmd_SSLEngine, specifically in that mySrvConfig() was returning 0. not quite sure if th

[BugDB] PRIVATE: Build and install the SSL-aware Apache (PR#670)

2002-03-10 Thread modssl-bugdb
Full_Name: Peter Stoehr Version: mod_ssl-2.8.5-1.3.22 OS: SuSE Linux 7.1 (Kernel 2.2.18) Submission from: (NULL) (212.17.86.61) Hello mod_ssl-Team! I used the Step-by-Step installation illustration on your modssl.org site. I've build OpenSSL well. After this, i tried the next step (nr.3): I st

Re: [BugDB] HTTPS doesn't work (PR#669)

2002-03-08 Thread modssl-bugdb
On Thu, Mar 07, 2002 at 08:03:08PM +0100, [EMAIL PROTECTED] wrote: > Full_Name: Carmen Shinzato > Version: 2.8.7 > OS: Solaris 2.7 > Submission from: (NULL) (161.196.99.99) > > > We have installed Apache 1.3.23 with Openssl 0.9.6b and mod_ssl 2.8.7, The HTTP > protocol works well at port 8003 bu

[BugDB] HTTPS doesn't work (PR#669)

2002-03-07 Thread modssl-bugdb
Full_Name: Carmen Shinzato Version: 2.8.7 OS: Solaris 2.7 Submission from: (NULL) (161.196.99.99) We have installed Apache 1.3.23 with Openssl 0.9.6b and mod_ssl 2.8.7, The HTTP protocol works well at port 8003 but the HTTPS doesn't work at port 8443, the error is: access denied to www.movilnet.

[BugDB] SSLPassPhraseDialog and VirtualHost (PR#668)

2002-03-05 Thread modssl-bugdb
Hi I have a problem when trying to use the SSLPassPhraseDialog directive with "exec" It works ok with 1 virtual host / 1 password , but not with 2 or more The pp.out file just echo the password. Local httpd.conf shows: # Pass Phrase Dialog: # #SSLPassPhraseDialo

[BugDB] document contains no data (PR#667)

2002-03-05 Thread modssl-bugdb
Full_Name: santosh Pandey Version: mod_ssl/2.8.7 OS: AIX 4.3 Submission from: (NULL) (208.132.249.249) Hi, Recently, I have installed the mod-ssl aware Apache server and I am able to access my secure and non-secure pages when I type the absolute URL for example https://qwfeeu21.poceur1:5543/pro

[BugDB] SSL config w 1.3.23/2.8.6/0.9.6c +php4.1.1 (PR#666)

2002-02-26 Thread modssl-bugdb
Full_Name: Amael Version: mod_ssl-2.8.6-1.3.23 OS: FreeBSD 4.5 Submission from: (NULL) (194.237.142.7) I have problems creating a SSL vhost. I cant define SSL "options" ie SSLEngine etc outside part of the httpd.conf. If i do, i get this error message: Invalid command 'SSLEngine', perhaps mis-

[BugDB] mod_ssl port to POSIX 1003.1-2001 hosts (PR#665)

2002-02-23 Thread modssl-bugdb
Full_Name: Paul Eggert Version: 2.8.6 OS: Submission from: (NULL) (209.55.111.154) The new POSIX standard is now official (IEEE Std 1003.1-2001), and it has removed support for some obsolete utility options that modssl uses. Basically, the new POSIX has removed digit-string options (e.g., "tai

[BugDB] Can't load mod_ssl module (PR#649)

2002-02-13 Thread modssl-bugdb
You have to download and install (unzip and add to %PATH%) this tool:openssl-0.9.6c-win32.zip (http://www.modssl.org/contrib/) to solve this problem. >I have somme trouble with the installation of SSL on apache. >I downloaded and installed the files : >apache_1.3.22-win32-x86.exe >Apache_1.3.22

[BugDB] SSLMutex lock 'sem' and SSLSessionCache storage 'shm:' not available on Solaris8 (PR#664)

2002-02-08 Thread modssl-bugdb
Full_Name: Bert Courtin Version: mod_ssl-2.8.6-1.3.23 OS: sparc-sun-solaris2.8 Submission from: (NULL) (195.243.113.252) Hi, I'm trying to compile the following apache_1.3.23 & mm-1.1.3 & openssl-0.9.6c & mod_ssl-2.8.6-1.3.23 and get SSLMutex lock 'sem' and SSLSessionCache storage 'shm:' ava

Re: [BugDB] Resource on win2000 (PR#657)

2002-02-01 Thread modssl-bugdb
On Fri, Feb 01, 2002, Patrick Mayweg wrote: > > Ok, but can anybody of the Win32 folks give me the prototype of the > > DestroyMutex (or whatever it is called) function we had to call? I've no > > Win32 development environment available to figure this out myself... > [...] > the call is CloseHand

Re: [BugDB] Resource on win2000 (PR#657)

2002-02-01 Thread modssl-bugdb
Hi Ralf, the call is CloseHandle(HANDLE toBeClosed); Regards, Patrick [EMAIL PROTECTED] wrote: > On Wed, Jan 09, 2002, [EMAIL PROTECTED] wrote: > > > Full_Name: Zheng XiangYang > > Version: 2.8.5 > > OS: win2000 > > Submission from: (NULL) (211.155.22.200) > > > > the mutex handles "lock_cs[i]"

Re: [BugDB] Resource on win2000 (PR#657)

2002-02-01 Thread Patrick Mayweg
Hi Ralf, the call is CloseHandle(HANDLE toBeClosed); Regards, Patrick [EMAIL PROTECTED] wrote: > On Wed, Jan 09, 2002, [EMAIL PROTECTED] wrote: > > > Full_Name: Zheng XiangYang > > Version: 2.8.5 > > OS: win2000 > > Submission from: (NULL) (211.155.22.200) > > > > the mutex handles "lock_cs[i]"

Re: [BugDB] Resource on win2000 (PR#657)

2002-02-01 Thread modssl-bugdb
On Wed, Jan 09, 2002, [EMAIL PROTECTED] wrote: > Full_Name: Zheng XiangYang > Version: 2.8.5 > OS: win2000 > Submission from: (NULL) (211.155.22.200) > > the mutex handles "lock_cs[i]" "in ssl_util_thread_setup" are not closed when > the module is unloaded. Each time the child dies, more handle

RE: [BugDB] IE Problems connecting to mod_ssl server Linux (PR#66 3)

2002-01-31 Thread jon schatz
On Thu, 2002-01-31 at 07:59, R. DuFresne wrote: > It was my understanding, and perhaps I've misread posts here, that the > list here has long advocated this setting for IE issues: > > SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown except on current (apache 1.3.22) builds, this d

Re: [BugDB] IE Problems connecting to mod_ssl server Linux (PR#663)

2002-01-31 Thread Lennert de Waal
Hi, I have searched and searched the past days, and have come across a new schannel.dll file (which resides in \windows\system for 9x and in \winnt\system32 for nt/win2k). It seems that the original installed with MSIE 4 and 5 is broken. When replacing the original with this file, the MSIE 'DNS-er

RE: [BugDB] IE Problems connecting to mod_ssl server Linux (PR#663)

2002-01-31 Thread R. DuFresne
ey added a retry loop so that if a read from the socket failed, > it tried the read again. > > Carol Kuczborski > EDS - Enabling Business Solutions > MS A6N-B47 > 13600 EDS Drive > Herndon, VA 20171 > > * phone: +01-703-742-1025 (8-432) > * mailto:[EMAIL PROTECTED] >

RE: [BugDB] IE Problems connecting to mod_ssl server Linux (PR#663)

2002-01-31 Thread Kuczborski, Carol L
0171 * phone: +01-703-742-1025 (8-432) * mailto:[EMAIL PROTECTED] www.eds.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Thursday, January 31, 2002 9:42 AM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: [BugDB] IE Problems connecting to mod_ssl s

[BugDB] IE Problems connecting to mod_ssl server Linux (PR#663)

2002-01-31 Thread modssl-bugdb
Full_Name: Version: OS: Submission from: (NULL) (80.132.185.116) I'm having some very weird problems getting some IE clients to connect to a mod_ssl-enabled apache install, and I'm hoping someone has some insight on this beyond what's in the FAQ. The environment is as follows: Webserver vers

[BugDB] Problem with Opera 6.0 (PR#662)

2002-01-30 Thread modssl-bugdb
Full_Name: Roman Y. Shibrick Version: 2.8.5 OS: FreeBSD 4.4-stable Submission from: (NULL) (212.188.123.131) 1. I use Apache-1.3.22+mod_ssl_2.8.5+mod_perl+HTML-Embperl-1.3.4. 2. There is a following code: [- open FILE, "> /tmp/$filename"; print FILE $buffer while read( $fdat{myUp

Re: [BugDB] bug (PR#661)

2002-01-21 Thread modssl-bugdb
On Mon, Jan 21, 2002 at 08:02:06AM +0100, [EMAIL PROTECTED] wrote: > When I try to connect to my apache(1.3.12) mod_ssl server (mod_ssl-2.6.1) > using Internet Explorer 5 running on Win98/95/WinNT 4.0 I get a "page > not found error", just after accepting the (test) certificate I > requested creat

[BugDB] bug (PR#661)

2002-01-21 Thread modssl-bugdb
Full_Name: amit gupta Version: 2.6.1 OS: windows nt Submission from: (NULL) (203.200.122.35) Hi all, When I try to connect to my apache(1.3.12) mod_ssl server (mod_ssl-2.6.1) using Internet Explorer 5 running on Win98/95/WinNT 4.0 I get a "page not found error", just after accepting the (test)

[BugDB] apache/tomcat/mod_ssl 304 error (PR#660)

2002-01-16 Thread modssl-bugdb
Full_Name: Version: 2.8.5 OS: Solaris 2.8 Submission from: (NULL) (199.46.199.231) Configured the mod_ssl with ./configure \ "--with-apache=../apache_1.3.22" \ "--with-ssl=/usr/local/ssl" \ "--prefix=/usr/local/apache" \ "--enable-shared=ssl" \ "--enable-module=most" \ "--enable-shared=max" \

[BugDB] DirectoryIndex/Indexes with Client Auth (PR#658)

2002-01-11 Thread modssl-bugdb
Full_Name: Peter Pramberger Version: 2.8.4/2.8.5 OS: Linux Submission from: (NULL) (212.95.31.57) Sorry if this has been referenced elsewhere, I could find no mention of it. When I configure the following ssl virtual host, entering the following urls work fine - I get the index.html and the dir

[BugDB] Resource on win2000 (PR#657)

2002-01-10 Thread modssl-bugdb
Full_Name: Zheng XiangYang Version: 2.8.5 OS: win2000 Submission from: (NULL) (211.155.22.200) the mutex handles "lock_cs[i]" "in ssl_util_thread_setup" are not closed when the module is unloaded. Each time the child dies, more handles are opened (can see from task manager)

[BugDB] Openssl+modssl+Apache (PR#519)

2002-01-10 Thread modssl-bugdb
Hi, Got into the similar situation with Solaris and the error went away when I removed the binutils package . The package binutils installs ranlib which has become obsalate with SunOS5.X The utility (ar) will do this automatically. (Make sure you have /usr/ccs/bin in your path though ..) But a

Re: [BugDB] Intermittent "Cannot find server or DNS error" and "Page cann (PR#656)

2002-01-07 Thread modssl-bugdb
ubmitting your feedback to the mod_ssl project. Your message was recognized and filed to the mod_ssl Bug Database (see http://www.engelschall.com/sw/mod_ssl/bugdb/) under the problem report PR#596 __ Apache

Re: [BugDB] apachectl startssl failure (PR#655)

2001-12-31 Thread J. Johnson
Look in apachectl to see how it calls httpd in the cases of 'start' and 'startssl'. These should work out to something like 'httpd' and 'httpd -DSSL'. Try each of these directly from the command line. Possibly the second instance fails (check the return status with 'echo $?'); that would indica

[BugDB] apachectl startssl failure (PR#655)

2001-12-31 Thread modssl-bugdb
Full_Name: Tomki Camp Version: 2.8.5 OS: RH Linux 6.1 base Submission from: (NULL) (203.146.126.222) I have installed apache 1.3.22 with Mod-ssl 2.8.5 as a DSO. I have PHP 4.1.1 compiled into the HTTPD binary statically. The 'apachectl start' works fine, but with 'startssl' I get a failure 'ht

[BugDB] 651 (more) (PR#653)

2001-12-25 Thread modssl-bugdb
Full_Name: J. Nick Koston Version: same OS: same Submission from: (NULL) (24.40.46.67) Using the patch on bug 643 I was able to get the following error, however I have no idea what it means. [Sat Dec 22 14:35:07 2001] [error] mod_ssl: Init: (servb.webbserv.net:443) Unable to create SSL context

[BugDB] bug 651 (PR#652)

2001-12-25 Thread modssl-bugdb
Full_Name: J. Nick Koston Version: same OS: same Submission from: (NULL) (24.40.46.67) Using the patch on bug 643 I was able to get the following error, however I have no idea what it means. [Sat Dec 22 14:35:07 2001] [error] mod_ssl: Init: (servb.webbserv.net:443) Unable to create SSL context

[BugDB] segv on hup signal (PR#651)

2001-12-25 Thread modssl-bugdb
Full_Name: J. Nick Koston Version: 2.8.5-1.3.22 OS: rh 6.2 Submission from: (NULL) (24.40.46.67) (gdb) back #0 0x400b9665 in SSL_CTX_ctrl () at netmsg.c:98 #1 0x8071b37 in ssl_init_ConfigureServer () at netmsg.c:98 #2 0x80713a7 in ssl_init_Module () at netmsg.c:98 #3 0x808eb49 in ap_init_mod

  1   2   3   4   5   6   7   8   9   10   >