Re: Can Apache proxy authentication be done via SSL?

2002-02-15 Thread rwidmer
** Reply to note from NickM [EMAIL PROTECTED] Fri, 15 Feb 2002 08:04:09 +0100 (CET) Quoting Kyle Tucker [EMAIL PROTECTED]: But like I said, for simply checking the IP youd be better scripting it I think. Not sure its helping you here but some simple ideas that might give you

RE: apache+mod_ssl kill -USR1

2002-01-20 Thread rwidmer
** Reply to note from Julian C. Dunn [EMAIL PROTECTED] Thu, 17 Jan 2002 11:20:53 -0500 (EST) On 17-Jan-2002 Roman V Moroz wrote: Is there possiblity to restart Apache with mod_ssl graceful (with kill -USR1 httpd)? Yes, it's possible, but if you are adding or deleting new SSL

RE: DSO problems

2001-12-22 Thread rwidmer
** Reply to note from J. Johnson [EMAIL PROTECTED] Fri, 21 Dec 2001 01:22:34 -0800 (PST) On Thu, 20 Dec 2001, Simon Ritchie wrote: I don't think you have to go that far. No, but the computer does the work, and scrubbing and replacing the entire distribution takes much less

Re: RSA?

2001-04-07 Thread rwidmer
Addressed to: [EMAIL PROTECTED] Jay" [EMAIL PROTECTED] ** Reply to note from "Burgess, Jay" [EMAIL PROTECTED] Fri, 6 Apr 2001 11:04:59 -0500 This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be

RE: Apache mod_ssl and openssl - I messed up

2001-04-07 Thread rwidmer
** Reply to note from [EMAIL PROTECTED] Fri, 6 Apr 2001 11:40:28 +0100 One caveat(sp?) You can not move the log files across file system/partition/mount point boundaries, they must stay on the file system they are created on. Other than that, log file rotation can be painless. Rick

RE: Apache mod_ssl and openssl - I messed up

2001-04-07 Thread rwidmer
3. I'm moving log files. I usually stop the server, move the log files out and start the server. It takes about 20 seconds each time. I believe there is another way to do this, but moving files whilst they are being written to kind of scares me... I've been doing it _another way_ for

Re: search list?

2001-03-12 Thread rwidmer
Addressed to: [EMAIL PROTECTED] Randy Bush [EMAIL PROTECTED] ** Reply to note from Randy Bush [EMAIL PROTECTED] Sun, 04 Mar 2001 20:53:53 -0800 i am new to mod_ssl and am hitting new-idiot problems, of course. is there a serchable archive of the list for when i don't find it

Re: Apache 2.0

2001-03-12 Thread rwidmer
** Reply to note from "ModSSL user" [EMAIL PROTECTED] Mon, 5 Mar 2001 10:20:24 +0100 Hi, What about mod_ssl port to Apache 2.0. You proposed some time ago to put all mod_ssl 2.8.x in Apache 2.0 tree but there is still nothing. If I remember right, the decision was that NOTHING

Re:

2001-02-25 Thread rwidmer
** Reply to note from Owen Boyle [EMAIL PROTECTED] Fri, 23 Feb 2001 14:34:44 +0100 Be aware that mod_ssl patches Apache. Unless the existing Apache was compiled with SSL support it will have to be recompiled. Follow the instructions on the mod_ssl INSTALL file. It needs a recompile even if

No Subject

2001-02-23 Thread rwidmer
Addressed to: [EMAIL PROTECTED] [EMAIL PROTECTED] ** Reply to note from [EMAIL PROTECTED] Fri, 09 Feb 2001 11:24:04 +0100 (MET) Hi everybody ! Is there anybody to tell me : How can i force in the apache configuration file the use of a ssl connection for a particular

Re: Two VirtualHosts?

2001-02-23 Thread rwidmer
** Reply to note from Brian Clark [EMAIL PROTECTED] Sat, 10 Feb 2001 01:24:53 -0500 After searching the archives and reading the docs front-to-back, I have come to the conclusion that I must create two separate VirtualHosts for the same domain in order to use https on 443 and http on 80.

Re: Apache startup problem

2001-01-27 Thread rwidmer
Addressed to: [EMAIL PROTECTED] [EMAIL PROTECTED] ** Reply to note from [EMAIL PROTECTED] Fri, 19 Jan 2001 09:52:35 +0100 Thanks to Lutz for the advice on this. Let me try and clarify the situation. My problem only occurs when I try to start apache at boot time. Once the

Re: RSA_PKCS1_RSAref : That old question

2000-12-31 Thread rwidmer
Addressed to: [EMAIL PROTECTED] [EMAIL PROTECTED] ** Reply to note from [EMAIL PROTECTED] Sat, 02 Dec 2000 22:14:51 EST Debian-2.2.17 Perl-5.6.0 --prefix=/opt apache_1.3.14 mod_perl-1.24_01 mod_ssl-2.7.1-1.3.14 openssl-0.9.6 rsaref-2.0 from

Re: generate a new key

2000-12-31 Thread rwidmer
Addressed to: [EMAIL PROTECTED] "Niklas Fondberg" [EMAIL PROTECTED] ** Reply to note from "Niklas Fondberg" [EMAIL PROTECTED] Wed, 6 Dec 2000 10:19:49 +0100 How do one proceed to generate a new key? I have only the (bogus?) key generated at compile time. See:

RE: server.key

2000-09-08 Thread rwidmer
** Reply to note from Adrian Stovall [EMAIL PROTECTED] Thu, 7 Sep 2000 12:36:46 -0500 The key is unique to the server (i.e. the machine you have set up to serve pages). You can generate multiple csr's to get multiple certificates from a single server key (btw, you don't have to name the

Re: Virtual Host SSL Confirmation Question

2000-09-03 Thread rwidmer
Addressed to: [EMAIL PROTECTED] "Grant Walters" [EMAIL PROTECTED] ** Reply to note from "Grant Walters" [EMAIL PROTECTED] Sat, 2 Sep 2000 12:06:01 +1200 Hi, Like Mark Lo earlier I am trying the Virtual SSL issue. This post is just to ask for confirmation of my

Re: Problematic HUP behaviour

2000-07-27 Thread rwidmer
Addressed to: [EMAIL PROTECTED] Martin Lichtin [EMAIL PROTECTED] ** Reply to note from Martin Lichtin [EMAIL PROTECTED] Wed, 26 Jul 2000 21:17:46 -0600 It seems mod_ssl ignores new values for SSLCertificateFile and SSLCertificateKeyFile when it handles reconfiguration via a

Re: Problematic HUP behaviour

2000-07-27 Thread rwidmer
Addressed to: [EMAIL PROTECTED] Martin Lichtin [EMAIL PROTECTED] ** Reply to note from Martin Lichtin [EMAIL PROTECTED] Wed, 26 Jul 2000 23:36:03 -0600 [EMAIL PROTECTED] wrote: It seems mod_ssl ignores new values for SSLCertificateFile and SSLCertificateKeyFile when it

Re: entropy gathering and PRNG

2000-07-06 Thread rwidmer
Addressed to: [EMAIL PROTECTED] Diana Moreland [EMAIL PROTECTED] ** Reply to note from Diana Moreland [EMAIL PROTECTED] Wed, 05 Jul 2000 16:47:43 -0400 My version of the Linux kernel (2.0.33) is a couple of years old and I do not have /dev/random or /dev/urandom on my

Re: Where are step-by-step instructions for creating and INSTALLING certificate?

2000-06-29 Thread rwidmer
** Reply to note from Mads Toftum [EMAIL PROTECTED] Tue, 27 Jun 2000 13:44:45 +0200 On Tue, Jun 27, 2000 at 07:34:48AM -0400, Keith Kwiatek wrote: Hello, My apache modssl server certificate expired. I read the FAQ for creating the certificate, but how do I install it into apache?

Re: Creating CA

2000-06-23 Thread rwidmer
Addressed to: [EMAIL PROTECTED] "Adv. Systems Design" [EMAIL PROTECTED] ** Reply to note from "Adv. Systems Design" [EMAIL PROTECTED] Thu, 22 Jun 2000 06:10:08 -0700 (PDT) Hello * New to encryption and SSL...successfully got apache, mod_ssl, php, MySQL working (a tip 'o

Re: Compiling a module during the build of apache

2000-06-21 Thread rwidmer
Addressed to: [EMAIL PROTECTED] "Michael J. McGillick" [EMAIL PROTECTED] ** Reply to note from "Michael J. McGillick" [EMAIL PROTECTED] Tue, 20 Jun 2000 22:34:26 -0400 (EDT) I'm sorry if I wasn't clear in my first message. Please let me explain what I'm trying to do.

RE: httpd owner?

2000-06-15 Thread rwidmer
Addressed to: [EMAIL PROTECTED] John" [EMAIL PROTECTED] ** Reply to note from "Airey, John" [EMAIL PROTECTED] Wed, 14 Jun 2000 14:23:15 +0100 Slightly longer answer. The process is owned by root. The httpd binary switches to another user on start-up, after reading SSL

Re: Installing ModSSL

2000-06-15 Thread rwidmer
** Reply to note from "Danilo Nascimento" [EMAIL PROTECTED] Wed, 14 Jun 2000 17:27:34 EST Hi Marcus. There is no way to applay mod_ssl without downtime because mod_ssl have to apply "patches" to Apache Server Core Code. Therefore, you will have to stop your server. But to minimize the

Re: secure to nonsecure

2000-06-13 Thread rwidmer
** Reply to note from Darian Ong [EMAIL PROTECTED] 11 Jun 00 22:26:25 MDT Hello all, I am writing a cgi script to process a HTML FORM in the secure mode. After the FORM is processed, I need to redirect the user to a non- secured page. I have my virtual host setup like this:

Re: Successful installed Apache+modssl/openssl+php/mysql

2000-05-31 Thread rwidmer
Addressed to: [EMAIL PROTECTED] Mark Lo [EMAIL PROTECTED] ** Reply to note from Mark Lo [EMAIL PROTECTED] Wed, 31 May 2000 00:41:57 +0800 Hi, I have been successfully installed Apache+modssl/openssl+mysql/php4, but php only works when "https" is used. I also want to

Re: Need Help with Virtual Hosts

2000-05-23 Thread rwidmer
Addressed to: [EMAIL PROTECTED] "Pete Navarra" [EMAIL PROTECTED] ** Reply to note from "Pete Navarra" [EMAIL PROTECTED] Mon, 22 May 2000 14:50:53 -0500 Hi! I need some help with using Virtual Hosts on Apache. I realize that this isn't really something about SSL, but I use

Re: Need Help with Virtual Hosts

2000-05-23 Thread rwidmer
Addressed to: [EMAIL PROTECTED] "Pete Navarra" [EMAIL PROTECTED] ** Reply to note from "Pete Navarra" [EMAIL PROTECTED] Mon, 22 May 2000 14:50:53 -0500 Hi! I need some help with using Virtual Hosts on Apache. I realize that this isn't really something about SSL, but I use

Re: Question about behavior

2000-05-23 Thread rwidmer
Addressed to: [EMAIL PROTECTED] Tim Niemueller [EMAIL PROTECTED] ** Reply to note from Tim Niemueller [EMAIL PROTECTED] Mon, 22 May 2000 23:36:42 +0200 Hi mod_ssl users, I have a question about the behavior of mod_ssl: Someone connects to a secured website. Let's

RE: Apache Service SSL Aware

2000-05-22 Thread rwidmer
** Reply to note from "Steve Fairhead" [EMAIL PROTECTED] Sat, 20 May 2000 04:19:15 +0100 James Smallacombe said: on an unrelated (to SSL) issue, is there a way to use a separate file (from httpd.conf) for virtual hosts? I STFW and didn't find anything, and tried doing $INCLUDE ala

RE: VeriSign keys.

2000-05-22 Thread rwidmer
** Reply to note from "Steve Fairhead" [EMAIL PROTECTED] Thu, 18 May 2000 19:20:47 +0100 Rick Widmer said: Just to make sure we are talking about the same thing, when I hear 'Name Based vhosts' I think of: Possibly a slightly cross-purpose conversation going on here. Yes, I think

Re: VeriSign keys.

2000-05-19 Thread rwidmer
Addressed to: [EMAIL PROTECTED] Mike King [EMAIL PROTECTED] ** Reply to note from Mike King [EMAIL PROTECTED] Fri, 19 May 2000 05:58:59 -0700 Wildcard certificates allow you to authenticate many web servers within your domain, and pay for only one certificate. You pay

Re: verisign certs (the battle continues)

2000-05-18 Thread rwidmer
Addressed to: [EMAIL PROTECTED] Rob Genovesi [EMAIL PROTECTED] ** Reply to note from Rob Genovesi [EMAIL PROTECTED] Wed, 17 May 2000 17:48:54 -0700 I have still have the emailed responses from Verisign from the CSR's, but I don't have a record of the CSR's themselves

Re: VeriSign keys.

2000-05-18 Thread rwidmer
Addressed to: [EMAIL PROTECTED] Mads Toftum [EMAIL PROTECTED] ** Reply to note from Mads Toftum [EMAIL PROTECTED] Wed, 17 May 2000 09:59:45 +0200 On Tue, May 16, 2000 at 02:19:40PM +, [EMAIL PROTECTED] wrote: ** Reply to note from "Steve Fairhead" [EMAIL PROTECTED] Tue,

RE: VeriSign keys.

2000-05-17 Thread rwidmer
Addressed to: [EMAIL PROTECTED] "Steve Fairhead" [EMAIL PROTECTED] ** Reply to note from "Steve Fairhead" [EMAIL PROTECTED] Tue, 16 May 2000 00:43:19 +0100 LENGLART Benjamin [[EMAIL PROTECTED]] said: place a SSLCertificateKeyfile and a SSLCertificatePrivateKey (must

Re: VeriSign keys.

2000-05-16 Thread rwidmer
Addressed to: [EMAIL PROTECTED] Zohar Friling [EMAIL PROTECTED] ** Reply to note from Zohar Friling [EMAIL PROTECTED] Mon, 15 May 2000 18:22:32 +0300 (GMT+0300) Hi, I have several domains name and for each I have a separate key from VeriSign. How could I use them In the

Re: Almost Newbie

2000-05-07 Thread rwidmer
Addressed to: [EMAIL PROTECTED] Mel Sojka [EMAIL PROTECTED] ** Reply to note from Mel Sojka [EMAIL PROTECTED] Sat, 06 May 2000 11:31:32 -0500 Folks I have just evolved from 5 years of Slackware to Red Hat and I am having a heck of a time getting modssl up and running. I can't

Re: because of --with-mysql? (was RE: failed installing mod_ssl)

2000-04-30 Thread rwidmer
Addressed to: [EMAIL PROTECTED] alles kapot [EMAIL PROTECTED] ** Reply to note from alles kapot [EMAIL PROTECTED] Fri, 28 Apr 2000 21:22:59 -0700 (PDT) I did several compiling testing to see which php3 module caused the Segmentation fault. first I compiled whithout any

Re: The Infamous SSL install

2000-04-25 Thread rwidmer
Addressed to: [EMAIL PROTECTED] Damion Steen [EMAIL PROTECTED] ** Reply to note from Damion Steen [EMAIL PROTECTED] Sat, 22 Apr 2000 20:10:12 -0400 (EDT) Hi, I would like to install apache-ssl with php3+ and mySQL. It appears that the NETBSD package tree (pkgsrc) has all

Re: HOW TO?: mod_ssl w/RASref + mod_perl

2000-04-23 Thread rwidmer
Addressed to: [EMAIL PROTECTED] [EMAIL PROTECTED] ** Reply to note from "Matt Kelly Berkau" [EMAIL PROTECTED] Sat, 22 Apr 2000 21:18:20 -0500 I'm trying to build a web server with mod_ssl w/RSAref + mod_perl and can't find any directions on how to do it. My attempts at

Re: How it Works - SSL Cert

2000-04-11 Thread rwidmer
Addressed to: [EMAIL PROTECTED] Ashwin Kutty [EMAIL PROTECTED] ** Reply to note from Ashwin Kutty [EMAIL PROTECTED] Sun, 09 Apr 2000 13:11:41 -0300 Hi, I guess I have the same question, which is, if you create your own certificate, why do you have to first accept it on

Re: Apache start ssl problem

2000-04-09 Thread rwidmer
Addressed to: [EMAIL PROTECTED] "Vagel Argyrakis" [EMAIL PROTECTED] ** Reply to note from "Vagel Argyrakis" [EMAIL PROTECTED] Fri, 7 Apr 2000 14:54:02 +0200 Hi all, does anyone knows how to get rid of this error : Should be SSL-aware but = has no certificate configured

Re: encrypted client certificate

2000-04-09 Thread rwidmer
Addressed to: [EMAIL PROTECTED] [EMAIL PROTECTED] ** Reply to note from Dominik Seitz [EMAIL PROTECTED] Tue, 4 Apr 2000 11:59:42 +0200 It seems that during the normal SSL handshake the client certificate will be sent to the server unencrypted. My question: is there