Full_Name: Vadim Shulkin
Version: 2.1.6
OS: Solaris 2.5.1
Submission from: bas01.csfb.com (198.240.130.164)


Ralf, thank's for the explanation on mod_coldfusion and mod_ssl problem.
I would like to add something that I personaly found very interesting.

First of all.  
Apache dupms core during the execution of ap_add_loaded_module(). 
I agree that it is very difficult to debug and fix without 
mod_coldfusion source code. But Allaire Corp, provides mod_coldfusion
not only as a shared object mod_coldfusion.so, but also as a static
mod_coldfusion.a, which I tried to use also.  It is true that coldfusion
module has couple of referencies to des_encrypt1,2,3 within the object
which confuses the linker.  I did coule of tests.  I compiled httpd
with "-z muldefs" option for linker and it did compiled well, but
des_encrypt functions in mod_coldfusion could not decrypt Certification
file, which was encrypted by ssleay which uses standard libcrypt.so.
I belive that des_encrypt() functions should contain the standard SSL
algorithm, which means does not matter who implement 
the code for des_encrypt this code should be complient with SSL standard.

I think that people who use coldfusion wouldn't mind staticly compile
mod_coldfusion module inside the httpd and not to use the shared one, but
without des_encrypt working properly, the whole SSL package becomes
totally useless.

Is there any way to check if dec_encrypt() inside mod_coldfusion is working
correctly.  I'll send you both *.so and *.a modules, maybe you'll help us out.

Thank you in advance!!  Vadim ---


______________________________________________________________________
Apache Interface to SSLeay (mod_ssl)   www.engelschall.com/sw/mod_ssl/
Official Support Mailing List               [EMAIL PROTECTED]
Automated List Manager                       [EMAIL PROTECTED]

Reply via email to