On Mon, Oct 04, 1999, Cliff Woolley wrote:
> >>> "Ralf S. Engelschall" <[EMAIL PROTECTED]> 10/04/99 03:40AM >>>
> >Yes, someone else also reported that the pass phrase dialog doesn't
> work
> >correctly under Win32. But I cannot fix it myself, because I've both
> no real
> >Win32 development environment available nor the knowledge to find out
> what
> >Win32 dislikes in the mod_ssl/OpenSSL dialog. And I have also to admit
> that
> >fixing Win32-*only* bugs is maximum low-priority on my TODO list, of
> course.
>
> I'm not a Win32 hacker by any means (yay unix!)... but just a
> suggestion: why don't you (as an intermediate step just until somebody
> figures out how to make this work) add in a check for Win32+encrypted
> key and force Apache to exit with a fatal error and an explanatory error
> message? At least that way Apache wouldn't hang...
Yeah, a good suggestion. Although it doesn't solve the problem of the Win32
guys, we at least this way can reduce the problem reports from the Win32 guys.
I've now comitted the appended patch for mod_ssl 2.4.6. Thanks for the hint.
Ralf S. Engelschall
[EMAIL PROTECTED]
www.engelschall.com
Index: ssl_engine_pphrase.c
===================================================================
RCS file: /e/modssl/cvs/mod_ssl/pkg.apache/src/modules/ssl/ssl_engine_pphrase.c,v
retrieving revision 1.37
diff -u -r1.37 ssl_engine_pphrase.c
--- ssl_engine_pphrase.c 1999/10/01 11:30:42 1.37
+++ ssl_engine_pphrase.c 1999/10/05 10:27:56
@@ -440,6 +440,21 @@
ssl_log(s, SSL_LOG_INFO,
"Init: Requesting pass phrase via builtin terminal dialog");
+#ifdef WIN32
+ /* Pass Phrase Dialog doesn't work under Win32. We're guessing it's
+ related to the Unix style file descriptor fiddling which doesn't
+ work as expected under the Win32 environment. */
+ ssl_log(s, SSL_LOG_ERROR,
+ "Init: Sorry, the interactive pass phrase dialog for encrypted "
+ "private keys is not supported under Win32!");
+ fprintf(stderr,
+ "Sorry, the interactive pass phrase dialog for encrypted\n"
+ "private keys is not supported under the Win32 environment!\n"
+ "You have to use un-encrypted private keys or a filter program\n"
+ "(`SSLPassPhraseDialog exec:/path/to/filter') on this platform.\n");
+ return (-1);
+#endif
+
/*
* Reconnect STDERR to terminal (here STDOUT) because
* at our init stage Apache already connected STDERR
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]