Re: mod_ssl and name-based virtual hosts

2001-07-16 Thread Cliff Woolley
On Tue, 17 Jul 2001, Jan Vejvalka wrote: > NameVirtualHost 1.2.3.4:443 > > > ServerName host1.mydomain.dom > DocumentRoot "/data/host1" > ServerAdmin [EMAIL PROTECTED] > > > > ServerName host2.mydomain.dom > DocumentRoot "/data/host2" > ServerAdmin [EMAIL PROTECTED] > > (...) > > The rest of

mod_ssl and name-based virtual hosts

2001-07-16 Thread Jan Vejvalka
Hi *, I read the FAQ ( http://www.modssl.org/docs/2.8/ssl_faq.html#vhosts ) and I read Owen's reply to this list from March 28 ( http://marc.theaimsgroup.com/?l=apache-modssl&m=98576871506980&w=2 ) I still have a question to ask. Before I found that FAQ and that reply, I was trying (for some

Apache error duing SSL client connection

2001-07-16 Thread Patrick Li
Hi, Can someone give me some help? I got the following error from the Apache/logs/error_log directory I got this error when my SSL client program tries to connect to the apache server. It is urgent, anyone with any idea is greatly appreciated! [Mon Jul 16 18:56:58 2001] [error] mod_ssl: SSL ha

RE: Floating Point Errors

2001-07-16 Thread David Rees
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Michael Grant > > I'm still getting floating point errors when someone accesses my site > via https://... Here's what I get in the log: > in /var/log/messages: > /kernel: pid 47234 (httpd), uid 65530:

Floating Point Errors

2001-07-16 Thread Michael Grant
I'm still getting floating point errors when someone accesses my site via https://... Here's what I get in the log: in /var/log/messages: /kernel: pid 47234 (httpd), uid 65530: exited on signal 8 and in the apache error log: child pid 47234 exit signal Floating point exception (8) I can reproduc

Re: mod_ssl: Illegal attempt to re-initialise SSL for server (theoretically shouldn't happen!)

2001-07-16 Thread Lukas Feiler
Thanks for your quick response but "SSLEngine on" does not appears two times in my httpd.conf (I wished that would have been the problem) Can you (or anybody else!) think of an other reason (->solution) for my problem? Help needed! Lukas Feiler /** EndlosProduktion Kusc

RE: mod_ssl: Illegal attempt to re-initialise SSL for server (theoretically shouldn't happen!)

2001-07-16 Thread John . Airey
This is a wild guess, but you wouldn't happen to have "SSLEngine on" more than once in your httpd.conf? You can do this if they are in different virtual hosts, but I think this error would be caused otherwise. - John Airey Internet Systems Support Officer, ITCSD, Royal National Institute for the

RE: Creating a UK CSR

2001-07-16 Thread matt
Hey all, I checked out the Thawte IRC support, and was told there that I should just put London twice, once for state and once for location. I now have my certificate and its all OK, and works fine (cleared up some Macintosh IE5 problems too.) So thanks all for the help you've given, I'm now r

mod_ssl: Illegal attempt to re-initialise SSL for server (theoretically shouldn't happen!)

2001-07-16 Thread Lukas Feiler
When I enable SSL ("SSLEngine on" in httpd.conf) the following error is logged: [Sat Jul 14 19:34:55 2001] [error] mod_ssl: Init: (someserver:80) Illegal attempt to re-initialise SSL for server (theoretically shouldn't happen!) After disable SSL everything's just fine. But I definitely need SSL

BindAddress directive

2001-07-16 Thread William WK Lee
Dear all, I am having a difficult on using apache + mod_ssl. My apache is 1.3.20 and my mod_ssl is 2.8.4-1.3.20. All the stuff compiles perfectly without any problems. However, I face difficulty when I edit httpd.conf to limit the server to listen to a specific address. It works fine if I iss

RE: Creating a UK CSR

2001-07-16 Thread John . Airey
I've just double-checked what I've said in my last posting, and I'm wrong on at least two counts (probably more). According to Thawte (and it probably isn't much different for anyone else). 1. The "State" within an SSL certificate must be an actual place, it cannot be a postcode. This is annoying

RE: Reverse Proxy SSL

2001-07-16 Thread Sylvain . Maret
Roy, You are right, in your case it's not a good idea to authenticate at the reverse proxy level. We should find a secure solution to access your internal application and keep your internal authentication with X509 certs. With my best knowledge, I don't know a transparent "reverse proxy"solution