certificate questions

2002-10-15 Thread yi kong
We have a Solaris Web server with Apache 1.3.12, OpenSSL 0.9.6 and ModSSL 2.6.6. Last week the own signed certificate expired. I tried to renew or recreate one, but not successful. Because we don't have ramden-number-create package, SUN suggest, instead, to install the patch 105710-01, which is

RE: Using subjectAltName

2002-10-15 Thread camccuk
Hate to repost but I'm completely stumped by this one and have noticed a few related questions for this recently... Sadly I've lost the original mail but someone a few weeks ago mentioned the use of the subjectAltName extension to store domain names in a certificate - can anyone clarify how

Problem in mod_ssl 2.8.10 + Apache 1.3.26/WIn32 ?

2002-10-15 Thread Sergey Strakhov
Hello, We are experiencing problems with our Win32 Apache 1.3.26 with mod_ssl 2.8.10 + openssl 0.9.6b running on Windows 2000. It is a sort of DoS attacks that make our web site totally inaccessible. One of those attacks was captured with Ethereal. The dump is attached. As you can see, the

Re: Problem in mod_ssl 2.8.10 + Apache 1.3.26/WIn32 ?

2002-10-15 Thread Nadav Har'El
On Tue, Oct 15, 2002, Sergey Strakhov wrote about Problem in mod_ssl 2.8.10 + Apache 1.3.26/WIn32 ?: We are experiencing problems with our Win32 Apache 1.3.26 with mod_ssl 2.8.10 + openssl 0.9.6b running on Windows 2000. It is a sort of DoS attacks that make our web site totally inaccessible.

Re: Using subjectAltName

2002-10-15 Thread Joe Orton
Hi - you might be better of asking these questions on the openssl-users list. On Thu, Oct 10, 2002 at 10:18:48AM -0400, [EMAIL PROTECTED] wrote: .. x509_extensions = usr_cert This looks like a simple typo, the above requires a section called 'usr_cert', yet

SSLProxy* directives

2002-10-15 Thread Maik Mueller
Hello, I have discovered some strange behavior using mod_proxy with SSL Client Authentication. We are talking about the following scenario: Component: Web Browser --- Proxy (mod_proxy) --- Web Server SSL Role: SSL Client --- SSL server | SSL Client --- SSL Server Let's have a

secure domains/subdomains

2002-10-15 Thread Barry Smoke
I have a question about mod_ssl, and secure domains... I know that every unique address you register as secure requires a certificate(yes it is extortion) so http://arhosting.com requires a certificate registered with that address, and secure.arhosting.com requires a seperate certificate

Re: SSLProxy* directives

2002-10-15 Thread Joe Orton
Hi, On Tue, Oct 15, 2002 at 06:16:07PM +0200, Maik Mueller wrote: This brings up some questions to me: Why aren't there two options like SSLProxyMachineCertificateFile, SSLProxyMachineKeyFile for separated certificate and key files? Is there a way to provide several certificate/key

Re: SSLProxy* directives

2002-10-15 Thread Daniel Lopez
The Apache documentation (www.apache.org) describes SSLProxy* as part of mod_ssl. Why isn't there any information about SSLProxy* on www.modssl.org? (Probably Ralf Engelschall can explain this.) Because nobody wrote it :( I was the one who wrote it for Apache 2, based on some stuff we had

Re: SSLProxy* directives

2002-10-15 Thread Joe Orton
On Tue, Oct 15, 2002 at 12:07:56PM -0700, Daniel Lopez wrote: The Apache documentation (www.apache.org) describes SSLProxy* as part of mod_ssl. Why isn't there any information about SSLProxy* on www.modssl.org? (Probably Ralf Engelschall can explain this.) Because nobody wrote it :( I

Algorithm restrictions

2002-10-15 Thread Ron Gedye
Hello all. I have set my server to only accept certain methods of SSL, ie. no export grade, no SSLv2, etc. Does anyone know of a way to restrict by Alogorithm rather than having the client simply not be able to connect (DNS or Server failure). In this case, I was wondering if I could do

Outdated box with strange logs

2002-10-15 Thread BeTa AlphA
Hi... I'm new on this mailing-list... and to show my happiness... I have a question about strange logs : I'm running Apache-AdvancedExtranetServer/1.3.23 mod_ssl/2.8.7 OpenSSL/0.9.6c PHP/4.1.2 on an old box on which I'll install a more recent GNU/Linux into (Gentoo-Linux I think)... I'd like to