On Sun, Jan 17, 1999, [EMAIL PROTECTED] wrote:
> Full_Name: Joe
> Version:
> OS: linux
> Submission from: dial72.ppp.datatone.com (208.220.195.72)
>
> I have compiled 1.3.3, 1.90b, etc...
You mean SSLeay 0.9.0b, there is no 1.90b version.
And I recommend you to upgrade to Apache 1.3.4, of course.
> But don't have s_client to test. How do you compiile s_client?
> I have s_client.o.
s_client is part of SSLeay and located in apps/ in the source tree.
Alternatively you can run "ssleay s_client".
> Tried with Netscape but no avail.
>
> httpd.conf
>
> Port 80
> ...
> Listen 80
> Listen 443
>
> <VirtualHost _default_>
> ...
> </VirtualHost>
>
> <VirtualHost _default_:443>
> ...
> SSLEngine on
> SSLCertificateFile /usr/local/apache/etc/ssl.crt/server.crt
> SSLCertificateKeyFile /usr/local/apache/etc/ssl.key/server.key
> SSLCACertificatePath /usr/local/apache/etc/ssl.crt/
> SSLCACertificateFile /usr/local/apache/etc/ssl.crt/ca-bundle.crt
> SSLLogLevel debug
> SSLVerifyClient optional_no_ca
> </VirtualHost>
>
> No NameVirtual but IP based.
>
> Is there an example of setup I can use as a control?
Sure, look at the httpd.conf.default which is installed by Apache+mod_ssl. It
contains a default configuration which has all SSL parameters set correctly.
What do you mean by "Tried with Netscape but no avail"? At least with your
"SSLLogLevel debug" you should see KB's of log messages which should direct
you in the right direction in case of a problem.
Ralf S. Engelschall
[EMAIL PROTECTED]
www.engelschall.com
______________________________________________________________________
Apache Interface to SSLeay (mod_ssl) www.engelschall.com/sw/mod_ssl/
Official Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
