RE: mod_webapp/SSL and TC 4.0

2001-09-17 Thread GOMEZ Henri
>I'm tempted to say neither HTTPS_KEYSIZE nor >HTTPS_SECRETKEYSIZE are the >correct answer..:) I feel it's HTTPS_KEYSIZE since it's only 56bits. Serious SSL implemtation like mod_ssl support 128bits :)

RE: mod_webapp/SSL and TC 4.0

2001-09-17 Thread Ignacio J. Ortega
nviado el: lunes 17 de septiembre de 2001 18:40 > Para: [EMAIL PROTECTED] > Asunto: Re: mod_webapp/SSL and TC 4.0 > > > "Ignacio J. Ortega" wrote: > > > > > SPEC 2.3 : SRV.4.7 SSL Attributes > > > > > > Nota: the key size and cipher

Re: mod_webapp/SSL and TC 4.0

2001-09-17 Thread jean-frederic clere
"Ignacio J. Ortega" wrote: > > > SPEC 2.3 : SRV.4.7 SSL Attributes > > > > Nota: the key size and cipher suite used are not allways > > available in web-server (IIS for example) > > > > > > Regard keysize in IIS, Please check this page below and point me to what > is key_size for 2.3 spec?

RE: mod_webapp/SSL and TC 4.0

2001-09-15 Thread Ignacio J. Ortega
> SPEC 2.3 : SRV.4.7 SSL Attributes > > Nota: the key size and cipher suite used are not allways > available in web-server (IIS for example) > > Regard keysize in IIS, Please check this page below and point me to what is key_size for 2.3 spec?, HTTPS_KEYSIZE or HTTPS_SECRETKEYSIZE ? neit

RE: mod_webapp/SSL and TC 4.0

2001-09-14 Thread Craig R. McClanahan
On Fri, 14 Sep 2001, GOMEZ Henri wrote: > Date: Fri, 14 Sep 2001 10:37:47 +0200 > From: GOMEZ Henri <[EMAIL PROTECTED]> > Reply-To: [EMAIL PROTECTED] > To: [EMAIL PROTECTED] > Subject: RE: mod_webapp/SSL and TC 4.0 > > >> It should works at least for Apache 1.

Re: mod_webapp/SSL and TC 4.0

2001-09-14 Thread jean-frederic clere
GOMEZ Henri wrote: > > >> I think there a little more missing: > >> - SSL_CLIENT_CERT_CHAIN_n (n is a number). > > >> - The user certificate object stored by mod_jk is a String not a > >> X509Certificate > > >> - I have prepared a patch for it - > > > >Patch for WebApp or JK, BTW? I'm starting

RE: mod_webapp/SSL and TC 4.0

2001-09-14 Thread GOMEZ Henri
>> I think there a little more missing: >> - SSL_CLIENT_CERT_CHAIN_n (n is a number). >> - The user certificate object stored by mod_jk is a String not a >> X509Certificate >> - I have prepared a patch for it - > >Patch for WebApp or JK, BTW? I'm starting to get confused :) JF talk about mod_jk

Re: mod_webapp/SSL and TC 4.0

2001-09-14 Thread Pier Fumagalli
"jean-frederic clere" <[EMAIL PROTECTED]> wrote: > Pier Fumagalli wrote: >> >> "GOMEZ Henri" <[EMAIL PROTECTED]> wrote: >> >>> Hi to all, >>> >>> I take a look at mod_webapp and warp java, >>> and didn't find reference to SSL informations >>> forwarded from WebServer. >>> >>> Should it be fix

Re: mod_webapp/SSL and TC 4.0

2001-09-14 Thread Pier Fumagalli
"jean-frederic clere" <[EMAIL PROTECTED]> wrote: > GOMEZ Henri wrote: >> It should works at least for Apache 1.3/2.0. To follow the Servlet 2.3, take a look at jk in J-T-C since it also handle the SSL_KEY_SIZE. >>> >>> Yes, will do... Check out # 3510... >> >> You'll have also t

Re: mod_webapp/SSL and TC 4.0

2001-09-14 Thread Pier Fumagalli
"GOMEZ Henri" <[EMAIL PROTECTED]> wrote: >>> It should works at least for Apache 1.3/2.0. >>> To follow the Servlet 2.3, take a look at >>> jk in J-T-C since it also handle the SSL_KEY_SIZE. >> >> Yes, will do... Check out # 3510... > > You'll have also to grab other information > like cipher s

RE: mod_webapp/SSL and TC 4.0

2001-09-14 Thread GOMEZ Henri
>> +ForwardSSLKeySize > >You mean adding a configuration parameter like >JkForwardSSLKeySize with default >value Off? Yes

Re: mod_webapp/SSL and TC 4.0

2001-09-14 Thread Pier Fumagalli
"jean-frederic clere" <[EMAIL PROTECTED]> wrote: > Pier Fumagalli wrote: >> >> "GOMEZ Henri" <[EMAIL PROTECTED]> wrote: >> >>> Hi to all, >>> >>> I take a look at mod_webapp and warp java, >>> and didn't find reference to SSL informations >>> forwarded from WebServer. >>> >>> Should it be fix

Re: mod_webapp/SSL and TC 4.0

2001-09-14 Thread jean-frederic clere
GOMEZ Henri wrote: > > >> Should we had this attribute to JT also to avoid broke > >> TC 3.2/3.3 when using mod_jk from JTC ? > > > >Would it be possible to ignore this attribute in TC 3.2/3.3? > > The problem is that the current ajp13 java implementation > TC 3.2/3.3 ignore this attribute and w

RE: mod_webapp/SSL and TC 4.0

2001-09-14 Thread GOMEZ Henri
>> Should we had this attribute to JT also to avoid broke >> TC 3.2/3.3 when using mod_jk from JTC ? > >Would it be possible to ignore this attribute in TC 3.2/3.3? The problem is that the current ajp13 java implementation TC 3.2/3.3 ignore this attribute and will fail to decode the stream and wi

Re: mod_webapp/SSL and TC 4.0

2001-09-14 Thread jean-frederic clere
GOMEZ Henri wrote: > > >> About SSL_KEY_SIZE I have just noted I have committed a > >wrong code... I will > >> redo the things in some minutes ;-( > > > >I had to add SL_A_SSL_KEYSIZE from the apj14 protocol to apj13 > >otherwise we > >cannot fill "javax.servlet.request.key_size". > > Warning, o

RE: mod_webapp/SSL and TC 4.0

2001-09-14 Thread GOMEZ Henri
>> About SSL_KEY_SIZE I have just noted I have committed a >wrong code... I will >> redo the things in some minutes ;-( > >I had to add SL_A_SSL_KEYSIZE from the apj14 protocol to apj13 >otherwise we >cannot fill "javax.servlet.request.key_size". Warning, original ajp13 didn't support SSL_A_SSL

Re: mod_webapp/SSL and TC 4.0

2001-09-14 Thread jean-frederic clere
"Clere, Jean-Frederic" wrote: > > GOMEZ Henri wrote: > > > > >> It should works at least for Apache 1.3/2.0. > > >> To follow the Servlet 2.3, take a look at > > >> jk in J-T-C since it also handle the SSL_KEY_SIZE. > > > > > >Yes, will do... Check out # 3510... > > > > You'll have also to grab o

Re: mod_webapp/SSL and TC 4.0

2001-09-14 Thread jean-frederic clere
GOMEZ Henri wrote: > > >> It should works at least for Apache 1.3/2.0. > >> To follow the Servlet 2.3, take a look at > >> jk in J-T-C since it also handle the SSL_KEY_SIZE. > > > >Yes, will do... Check out # 3510... > > You'll have also to grab other information > like cipher suite used and bit

RE: mod_webapp/SSL and TC 4.0

2001-09-14 Thread GOMEZ Henri
>> It should works at least for Apache 1.3/2.0. >> To follow the Servlet 2.3, take a look at >> jk in J-T-C since it also handle the SSL_KEY_SIZE. > >Yes, will do... Check out # 3510... You'll have also to grab other information like cipher suite used and bit size of the algorithm SPEC 2.3 : SR

Re: mod_webapp/SSL and TC 4.0

2001-09-14 Thread jean-frederic clere
Pier Fumagalli wrote: > > "GOMEZ Henri" <[EMAIL PROTECTED]> wrote: > > > Hi to all, > > > > I take a look at mod_webapp and warp java, > > and didn't find reference to SSL informations > > forwarded from WebServer. > > > > Should it be fixed before release since it > > may break the spec ? > > >

Re: mod_webapp/SSL and TC 4.0

2001-09-13 Thread Pier Fumagalli
"GOMEZ Henri" <[EMAIL PROTECTED]> wrote: > Hi to all, > > I take a look at mod_webapp and warp java, > and didn't find reference to SSL informations > forwarded from WebServer. > > Should it be fixed before release since it > may break the spec ? > > I could grab code from mod_jk to support >

mod_webapp/SSL and TC 4.0

2001-09-13 Thread GOMEZ Henri
Hi to all, I take a look at mod_webapp and warp java, and didn't find reference to SSL informations forwarded from WebServer. Should it be fixed before release since it may break the spec ? I could grab code from mod_jk to support that, but I'm pretty busy with my day work and mod_jk fixes f