Error while requesting client cert authentication

2003-01-31 Thread Omar TANTAOUI
Hi everybody, I am using Apache-1.3.27 with mod_ssl-2.8.12 and OpenSSL-0.9.7. I have created a secure area that requires client SSL authentication: VirtualHost _default_:443 DocumentRoot /var/www/html ServerName 192.168.2.237 ServerAdmin [EMAIL PROTECTED] ErrorLog logs/ssl_error_log TransferLog

modssl versus other ssl servers

2003-01-31 Thread Chris Davis
Hi, Does anyone know how many modssl installations there are versus other SSL servers? I'd like to know what percentage of SSL sites use modssl. Thanks, Chris __ Apache Interface to OpenSSL (mod_ssl)

RE: modssl versus other ssl servers

2003-01-31 Thread John . Airey
For just under $2000, Security space will give you a report on it. http://www.securityspace.com/s_survey/payrepdetail.html?ym=200212cat=Apache Techrepid=10903 (Which explains why the links on the modssl site to statistics are out of date). - John Airey, BSc (Jt Hons), CNA, RHCE Internet

RE: modssl versus other ssl servers

2003-01-31 Thread John . Airey
Oops, my mistake. The page http://www.securityspace.com/s_survey/payrepdetail.html?ym=200212cat=Apache Techrepid=10903 says 1.4 million mod_ssl sites out of 5.3 million Apache sites. I'd reckon that mod_ssl is the number one secure server on the 'net. - John Airey, BSc (Jt Hons), CNA, RHCE

Re: modssl versus other ssl servers

2003-01-31 Thread R. DuFresne
Any answer you get will probably be a best guess. The closest stat on modssl use might relate somewhat to the number of list memebers here, though, even that number will not be fully definative as some folks use more then one product, some onlyread the list and not really have modssl up and

Re: autosigning certificate

2003-01-31 Thread Aihong Yin
Hello Zampognaro, Hi all, I tried to use my own CA in order to sign the CSR previously produced. Following what I got: [naunx04:aspprod] /home/aspprod/aspapp/mySSL/openSSL/bin ./sign.sh server.csr CA signing: server.csr - server.crt: Using configuration from ca.config Enter pass phrase for

RE: autosigning certificate

2003-01-31 Thread Zampognaro Sergio
Hi, I'm using openssl-0.9.7! any other suggestions? thanks Sergio. -Original Message- From: Aihong Yin [mailto:[EMAIL PROTECTED]] Sent: venerdì 31 gennaio 2003 18.01 To: [EMAIL PROTECTED] Subject: Re: autosigning certificate Hello Zampognaro, Hi all, I tried to use my own CA in order

Re: autosigning certificate

2003-01-31 Thread Aihong Yin
Hello Zampognaro, I'm using openssl-0.9.7! any other suggestions? I'm not sure whether I can help you. Are the Common Name in your self-signed CA certificate and server certificate the same? Please try to give the difference names for them! Cheers, Aihong Yin. -Original Message-

Re: autosigning certificate

2003-01-31 Thread Aihong Yin
Aihong Yin wrote: Hello Zampognaro, I'm using openssl-0.9.7! any other suggestions? I'm not sure whether I can help you. Are the Common Name in your self-signed CA certificate and server certificate the same? Please try to give the difference names for them! Not the Common Name. The

Select non-SSL'ing

2003-01-31 Thread Cory 'G' Watson
I need to disallow HTTP to an entire site, with the exception of a few directories. Can someone give me a clue how to do this? I have the disallowing of HTTP fixed, but I can't find a way to ALLOW http for the directories I need. I've searched the archives and googled pretty hard, but not

Re: Select non-SSL'ing

2003-01-31 Thread Cliff Woolley
On Fri, 31 Jan 2003, Cory 'G' Watson wrote: I have the disallowing of HTTP fixed, but I can't find a way to ALLOW http for the directories I need. I've searched the archives and googled pretty hard, but not found what I am looking for. I'd think some creative uses of RewriteRules could get

Re: modssl versus other ssl servers

2003-01-31 Thread Chris Davis
I was looking for some of the automated test mechanisms like Netcraft. I found a recently updated survey at http://www.securityspace.com/s_survey/data/. The survey provides Web and SSL site stats independently but the SSL server break down does not include modssl. Instead there is an apache

Re: Select non-SSL'ing

2003-01-31 Thread Cory 'G' Watson
On Friday, January 31, 2003, at 04:41 PM, Cliff Woolley wrote: I have the disallowing of HTTP fixed, but I can't find a way to ALLOW http for the directories I need. I've searched the archives and googled pretty hard, but not found what I am looking for. I'd think some creative uses of