In <[EMAIL PROTECTED]> Alan Spicer ([EMAIL PROTECTED])
wrote:
AS> * Hello,
AS> Thank you, I will try that to see if that fixes it, while
AS> waiting also to see what Ralph Engelschall says. I thought
AS> it was ok that the name on certificate was different, just
AS> that person with browswer had to "accept" that.
No. Netscape will be VERY confused in this case and will show "Document
contains no data". Stupid message! Why not show some informative error ?
Lynx-SSL and s_client (as described below) should work...
AS> Hmm so that means that I filled out one of those lines wrong
AS> when make'ing the test certificate. If that is so then probably I
AS> will not have that problem when I get REAL certificate ;-)
AS> At 07:58 PM 10/5/98 +0400, you wrote:
>>5-Oct-98 15:49 you wrote:
>>> On Mon, Oct 05, 1998, Alan Spicer wrote:
>>
>>>> Red Hat Linux 2.0.34
>>>> Apache 1.3.1
>>>> SSLeay-0.9.0.b
>>>> mod_ssl-2.0.10-1.3.1
>>>>[...]
>>>> I changed the "<VirtualHost _default_:443>" to:
>>>> <VirtualHost xxx.xxx.xx.xxx:443>
>>>> and added my virtual host settings in there, and left
>>>> everything else alone. The certificate is the default
>>>> test certificate and it does ask me to:
>>>> Enter PEM pass phrase:
>>>> and tells me that httpd started.
>>>>
>>>> ps ax |grep httpd |less
>>>> shows httpd's up and running:
>>>> as httpd -DSSL (which looks encouraging).
>>>>
>>>> If Netscape is restarted fresh, I get the certificate
>>>> pop-up boxes just fine (encouraging also), but never
>>>> get any pages ... it just times out a few mins later.
>>
>>> Hmmmm... because you get the certificate dialog in Netscape this means that
>>> SSL is actually spoken on port 443. Can you connect with "s_client
AS> -connect
>>> host:port -debug" and then enter "GET / HTTP/1.0\n\n" and see the HTML
AS> welcome
>>> page of Apache?
>>
>>To me this looks like good old problem with certificate :-)) Netscape will be
>>VERY confused (and will show "Document contains no data" message box) if name
>>of server will not match name of user in certificate...
>>
>>
>>
AS> ---
AS> Alan Spicer ([EMAIL PROTECTED])
______________________________________________________________________
Apache Interface to SSLeay (mod_ssl) www.engelschall.com/sw/mod_ssl/
Official Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
