Preprocessor bug in ssl_exp_scan.l when building with native compileron HP-UX 11

2003-02-19 Thread Stuart Cook
I have been building Apache 1.3.27 on HP-UX 11 via the native compiler with Mod SSL 2.8.12-1.3.27 and have come across and resolved a build bug during the Apache compilation process. In the Mod SSL file .../pkg.sslmod/ssl_expr_scan.l from line 91 onwards there is a state variable 'str'. The

Multiple SSL VirtualHosts in apache

2003-02-19 Thread Steve Pirk
I check the mail archives, but could not find a good answer for this problem I am having. I am building out a dev environment using apache on Solaris. The dev environment needs to run under SSL (to simulate the production environment). I am starting with 4 virtual servers. They all use the same

certificate authentication alternate authentication REMOTE_USER variable

2003-02-19 Thread Sophia Petridou
Hi all, SERVER: Apache 1.3.27 + mod_ssl/2.8.12 My problem: I want to authenticate clients of my domain based on certificates and obtain my users' usenames. I try using the two methods mentioned in http://www.modssl.org/docs/2.8/ssl_howto.html#ToC9 but they don't seem to be completely equivalent.

RE: Multiple SSL VirtualHosts in apache

2003-02-19 Thread Boyle Owen
-Original Message- From: Steve Pirk [mailto:[EMAIL PROTECTED]] Sent: Donnerstag, 6. Februar 2003 02:02 To: [EMAIL PROTECTED] Subject: Multiple SSL VirtualHosts in apache I check the mail archives, but could not find a good answer for this problem I am having. I am building out a dev

add a certificate to a Certificate Revocation List

2003-02-19 Thread Zampognaro Sergio
How to add a client certificate to an already created and empty Certificate Revocation List? thanks Sergio __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List

Re: add a certificate to a Certificate Revocation List

2003-02-19 Thread Mads Toftum
On Wed, Feb 19, 2003 at 11:57:20AM +0100, Zampognaro Sergio wrote: How to add a client certificate to an already created and empty Certificate Revocation List? openssl ca -revoke filename see man ca and man crl in the openssl docs. vh Mads Toftum -- `Darn it, who spiked my coffee with

Re: add a certificate to a Certificate Revocation List

2003-02-19 Thread Mads Toftum
On Wed, Feb 19, 2003 at 12:10:14PM +0100, Mads Toftum wrote: openssl ca -revoke filename see man ca and man crl in the openssl docs. I forgot to add this link - http://www.apacheweek.com/features/crl vh Mads Toftum -- `Darn it, who spiked my coffee with water?!' - lwall

Re: add a certificate to a Certificate Revocation List

2003-02-19 Thread Burkhard Ulrich
On Wed, 19 Feb 2003, Zampognaro Sergio wrote: How to add a client certificate to an already created and empty Certificate Revocation List? Here are the instructions if you are using openssl and your own CA: First you have to revoke the certificate: openssl ca -revoke certificate-file Then

Re: Preprocessor bug in ssl_exp_scan.l when building with nativecompiler on HP-UX 11

2003-02-19 Thread Marko Asplund
On Tue, 4 Feb 2003, Stuart Cook wrote: I have been building Apache 1.3.27 on HP-UX 11 via the native compiler with Mod SSL 2.8.12-1.3.27 and have come across and resolved a build bug during the Apache compilation process. In the Mod SSL file .../pkg.sslmod/ssl_expr_scan.l from line 91

Re: tried everything on linux but SSL will not work

2003-02-19 Thread James Collier
This is a completely wild guess based on not much information, but since I gather you have two independent https servers that have failed on linux, have you checked your iptables / ipchains config? Otherwise you need to do some more checking, e.g.:

mass ip virtual host mod_ssl?

2003-02-19 Thread Ray a PowerWeb Tech
is it possible using either mod_rewrite, mod_vhosts_alias or some trick in mod_ssl to have multiple virtual hosts by ip address and there keys was thinking something like # get the server name from the Host: header UseCanonicalName Off # this log format can be split per-virtual-host based on

Re: Multiple SSL VirtualHosts in apache

2003-02-19 Thread R. DuFresne
The error you posted from logs implies the request the server is getting is http rather then https, perhaps your redirect or rewrite is not functioning properly? Thanks, Ron DuFresne On Wed, 5 Feb 2003, Steve Pirk wrote: I check the mail archives, but could not find a good answer for this

Re: Multiple SSL VirtualHosts in apache

2003-02-19 Thread Cliff Woolley
On Wed, 5 Feb 2003, Steve Pirk wrote: They all use the same cert file, but are on different ports. I'm not so sure you can do that. But anyway, assuming for a second that you can: The problem I am running into is that only the first VirtualHost works. Requests to subsequent ports result in

Re: mass ip virtual host mod_ssl?

2003-02-19 Thread Cliff Woolley
On Wed, 19 Feb 2003, Ray a PowerWeb Tech wrote: but some of the domains have SSL, and it doesn't seem like this will cover it as is. how do i setup a folder for keys that will be used? ie /www/certs/%0.key or does it automagicly pick the correct key for the ip/domain? i'm hoping to get it

Patches and Enhancements for a SSL-Proxy Based on Apache 2.0 (mod_ssl, mod_proxy, mod_headers)

2003-02-19 Thread Maik Mueller
Hello All, I want to provide updated information to my earlier described scenario using mod_ssl + mod_proxy + mod_headers: Component: Web Browser --- Proxy (mod_proxy) --- Web Server SSL Role: SSL Client --- SSL server | SSL Client --- SSL Server The following discussion

RE: Patches and Enhancements for a SSL-Proxy Based on Apache 2.0 (mod_ssl, mod_proxy, mod_headers)

2003-02-19 Thread Maik Mueller
Cool.. Can you please post the patch to the list, so that ppl can review the code, and give their comments. -Madhu No problem! Here is my short README describing the patch and its history form Apache version 2.0.43 to 2.0.44: Hello! This is the distribution point for the Apache 2.0 as SSL

RE: Multiple SSL VirtualHosts in apache

2003-02-19 Thread Ian Moon
I believe that I read somewhere that you must have a different ip address for each ssl virtualhost. Ian Moon On Wed, 19 Feb 2003, Boyle Owen wrote: -Original Message- From: Steve Pirk [mailto:[EMAIL PROTECTED]] Sent: Donnerstag, 6. Februar 2003 02:02 To: [EMAIL PROTECTED] Subject:

apache is not able to server an SSL html page

2003-02-19 Thread Pierre.HURET
Title: apache is not able to server an SSL html page I need some help, or just a new way of investigation for a msg in error_log, when handshake SSL occurs.. Config : APACHE 2.0.44 OpenSSL 0.9.7 OS = AIX 5.2 kernel 64 bits Compiler = cc_r ( IBM compiler ) No DSO MPM-WORKER When

RE: Multiple SSL VirtualHosts in apache

2003-02-19 Thread Jack L. Stone
Please excuse the top post: Ian or anyone, are you sure that a wildcard setup won't work??? Just getting ready to do a fresh install involvoing vhosts and this will become an important issue. Thanks! At 10:02 AM 2.19.2003 -0700, Ian Moon wrote: I believe that I read somewhere that you must

RE: Multiple SSL VirtualHosts in apache

2003-02-19 Thread R. DuFresne
It's IP and/or port based. But, do remember, if port based then one is server only one cert, and the trouble is making sure the cert is constructed in a fashoin such that hostnames are not contained within the CN and such. In this case, and others can correct me if I'm wrong here, you would

SSL config for Netscape 4.5 , 4.6, 4.7 on Mac

2003-02-19 Thread Takaoglu, Uzay
Hi All, My system is running on 1.3.27 / 2.8.12 / 0.9.6g.The SSL connection from Netscape 4.5, 4.6 and 4.7 browsers runningonly on "Mac"seems like takingvery long timeto load a page with or without the images (50-60K pages about 2-3 mins with aT1 connection). I'm not really sure if the