https manual test

2000-07-27 Thread Raymond
hello again, from modssl's FAQ page, i tried to do the https test manually by typing openssl s_client -connect localhost:443 -state -debug but what i got after i "entered" it is: connect: Connection refused connect:errno=111 i have been trying to make my virtually hosted site secured but i

Re: Coredump

2000-07-27 Thread Mads Toftum
On Thu, Jul 27, 2000 at 12:45:08PM +1000, [EMAIL PROTECTED] wrote: Data point - mine is resolved. I rebuilt everything installing apache with EAPI only, (configuring mod_ssl --with-eapi-only), then installed mod_ssl with apxs. Apache config line as follows: EAPI_MM=SYSTEM

Re: Problem with SSLPassPhraseDialog on Win32

2000-07-27 Thread Steve Hay
Jan Dries wrote: Steve Hay wrote: I'm having trouble with the infamous Win32 startup hang problem. [...] I've created a simple program to emit the pass phrase [...] This works fine if I start Apache with "-X" (single process), but doesn't help if I don't use the "-X" option: I get

SSL_CLIENT JAVA SERVLETS

2000-07-27 Thread Alvaro Matos (EST)
Hi, I already visited the site http://www.apache-ssl.org/docs.html#SSLExportClientCertificates, and i tryed the given example for accessing to the Client certificate information. The script works correctly, and i could access and view the information. The question is: HOW CAN I

Re: [BugDB] Segfault on graceful restart (PR#434)

2000-07-27 Thread Ed Kubaitis
But with the httpd.conf MaxRequestsPerChild parameter available to force any and all memory leaks back to ground zero periodically, how bad *is* this memory leak, compared to the number of people who find they can no longer rotate their production server logs at modssl 2.6.5? In this

Re: [BugDB] Segfault on graceful restart (PR#434)

2000-07-27 Thread Ed Kubaitis
Ed Kubaitis wrote: ... Ok, but here's an Apache modssl 2.5.3 parent that was started yesterday morning at 9:33: ... Oops - typo. Meant modssl 2.6.3 -- Ed Kubaitis ([EMAIL PROTECTED]) CCSO - University of Illinois - Urbana-Champaign

SESSION_ID

2000-07-27 Thread tmwg-ssl
Can I rely on this being consistent across the session timeout, even if MSIE has been set to be without keep-alive? Or, in other words, is the SSL session ID independing of keep-alive? __ Apache Interface to OpenSSL (mod_ssl)

Re: SESSION_ID

2000-07-27 Thread Mads Toftum
On Thu, Jul 27, 2000 at 06:37:15AM -0700, [EMAIL PROTECTED] wrote: Can I rely on this being consistent across the session timeout, even if MSIE has been set to be without keep-alive? Or, in other words, is the SSL session ID independing of keep-alive? Yes, the two things have no connection.

apache+modssl+... got SEGVs

2000-07-27 Thread Hugues Pisapia
Hi all! I'm running that : Apache/1.3.12 (Unix) (Red Hat/Linux) mod_ssl/2.6.5 OpenSSL/0.9.5a mod_perl/1.21 ApacheJServ/1.1.2 And sometimes (well, more often with MSIE than with Mozilla :), apache gets Segmentation faults. It seems that it comes

MSIE *Again*

2000-07-27 Thread Burns, Robert
Folks, I believe I'm experiencing the same MSIE problems that have been discussed on this list over the past few weeks, but with a little more information. Perhaps it will help. I'm running Apache 1.3.12 + modssl 2.6.4 + openssl 0.9.5a on an UltraSparc 10 + Solaris7. First, I created a dummy

RE: ssl and IE5.0/Mac

2000-07-27 Thread Seb Bacon
There is only one workaround that I found: turning off mod_ssl but it *does* work when your certificate is legit, I promise. ;) seb. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Harry Zink Sent: 24 July 2000 07:24 To: [EMAIL PROTECTED]

UNSUBSCRIBE

2000-07-27 Thread Kathy
-Original Message- From: Dana Powers [EMAIL PROTECTED] To: [EMAIL PROTECTED] [EMAIL PROTECTED] Date: Wednesday, July 26, 2000 16:14 Subject: Re: [BugDB] Segfault on graceful restart (PR#434) DSO's are handy, and MM is definetely going to help performance a lot, but it shouldn't be

Re: Problematic HUP behaviour

2000-07-27 Thread rwidmer
Addressed to: [EMAIL PROTECTED] Martin Lichtin [EMAIL PROTECTED] ** Reply to note from Martin Lichtin [EMAIL PROTECTED] Wed, 26 Jul 2000 21:17:46 -0600 It seems mod_ssl ignores new values for SSLCertificateFile and SSLCertificateKeyFile when it handles reconfiguration via a

Re: Problematic HUP behaviour

2000-07-27 Thread rwidmer
Addressed to: [EMAIL PROTECTED] Martin Lichtin [EMAIL PROTECTED] ** Reply to note from Martin Lichtin [EMAIL PROTECTED] Wed, 26 Jul 2000 23:36:03 -0600 [EMAIL PROTECTED] wrote: It seems mod_ssl ignores new values for SSLCertificateFile and SSLCertificateKeyFile when it

RE: MSIE *Again*

2000-07-27 Thread Wallace, William
Does changing the "Check for server certificate revocation (requires restart)" advanced security setting in IE change the behavior? -Original Message- From: Burns, Robert [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 26, 2000 10:38 AM To: '[EMAIL PROTECTED]' Subject: MSIE *Again*

certificate installation on apache-modssl server

2000-07-27 Thread Myint Myint Moe
Hi, We've installed the Verisign Global ID on our web server (Apache mod-ssl) . But from the browser, the padlog icon shows This certificate cannot be verified due to lack of information. I've put on the following two directive lines on httpd.conf file.

Re: [BugDB] Segfault on graceful restart (PR#434)

2000-07-27 Thread Cliff Woolley
[EMAIL PROTECTED] 07/27/00 08:10AM Ok, but here's an Apache modssl 2.5.3 parent that was startedyesterday morning at 9:33: ... And here's one that has been running for over three months, restarted nightly for log rotation: The leaks are apparently only happening in the DSO case. I'm

RE: [BugDB] Segfault on graceful restart (PR#434)

2000-07-27 Thread Cliff Woolley
[EMAIL PROTECTED] 07/26/00 07:08PM From what I can tell, but it may be a completely unrelated memory leak, I'mnot sure. Either way, it's pretty damn small, and not something to worryabout too much. It's much better now that it was in mod_ssl-2.6.4. Great. I'd recommend that you repost your

Re: [BugDB] Segfault on graceful restart (PR#434)

2000-07-27 Thread Ed Kubaitis
The leaks are apparently only happening in the DSO case. I'm guessing that you have mod_ssl statically linked into Apache, right? Ahh. Right, both those servers were statically linked. Ed -- Ed Kubaitis ([EMAIL PROTECTED]) CCSO - University of Illinois -

[PATCH] [BugDB] Segfault on graceful restart (PR#434)

2000-07-27 Thread David Rees
Ralf, We've found a pretty significant bug in the mod_ssl 2.6.5, and I've created a patch for it. This is affecting quite a large number of users (anyone who builds mod_ssl statically and trys to do a restart or graceful). Please consider the patch below for immediate inclusion into the next

MSIE problems / SetEnvIf

2000-07-27 Thread Simon Weijgers
Hello, I'm experiencing problems with some versions of MSIE (both 4 and 5). When MSIE is loading a page that it is fetching over a SSL connection some of the pictures sometimes show up as a red X (ie what you get when a picture doesn't exist, they do in this case though). I had hoped the

RE: MSIE problems / SetEnvIf

2000-07-27 Thread David Rees
Even though it does still say HTTP/1.1, I've found that it behaves like a HTTP/1.0 response. -Dave -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Simon Weijgers Sent: Thursday, July 27, 2000 1:46 PM To: [EMAIL PROTECTED] Subject: MSIE problems /

Re: [BugDB] Segfault on graceful restart (PR#434)

2000-07-27 Thread Ralf S. Engelschall
On Thu, Jul 27, 2000, Cliff Woolley wrote: From what I can tell, but it may be a completely unrelated memory leak, I'm not sure. Either way, it's pretty damn small, and not something to worry about too much. It's much better now that it was in mod_ssl-2.6.4. Great. I'd recommend that

RE: [BugDB] Segfault on graceful restart (PR#434)

2000-07-27 Thread David Rees
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Ralf S. Engelschall On Thu, Jul 27, 2000, Cliff Woolley wrote: From what I can tell, but it may be a completely unrelated memory leak, I'm not sure. Either way, it's pretty damn small, and not

starting ssl

2000-07-27 Thread Raymond
hello all again, since this is the first time that i have been trying out ssl, im still learning how to incorporate it in my web server and i havent have much success in showing my webpage with sslengine on. i activate my apache by doing a: /var/lib/apache/bin/httpd DSSL then, if i do a

RE: starting ssl

2000-07-27 Thread David Rees
That should be a: /var/lib/apache/bin/httpd/ -DSSL Notice the missing '-'. That should fix things up. -Dave -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Raymond Sent: Thursday, July 27, 2000 8:21 PM To: [EMAIL PROTECTED] Subject: starting

RE: starting ssl

2000-07-27 Thread Raymond
thanks for the reply david but that did not work also. any other suggestions. regards, raymond At 08:50 PM 7/27/00 -0700, you wrote: That should be a: /var/lib/apache/bin/httpd/ -DSSL Notice the missing '-'. That should fix things up. -Dave