Re: IE 6 and 128bit certificate problem

2001-10-25 Thread Martin B. Nielsen

Actually what really seemed to solve it was removing +eNull from
SSLCipherSuite.
However, if I remember correctly that has something to do with
compability against ie running on mac. I tried two different macs to
test it and one of them worked and the other didn't and they were as far
as I could see the same version (5). Go figure...

~Martin

David Rees wrote:
 
 On Tue, Oct 23, 2001 at 09:49:22AM +0200, Martin B. Nielsen wrote:
  ALL:!ADH:!EXP56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
 
  I'm wondering whether something like
  #BrowserMatch MSIE [1-4] nokeepalive ssl-unclean-shutdown \
  #downgrade-1.0 force-response-1.0
  #BrowserMatch MSIE [5-9] ssl-unclean-shutdown
 
 This might make a difference...
 
  in combination with
  #SSLSessionCache shm:/var/cache/httpd/ssl_gcache_data(1024000)
 
 But this won't since you already have a session cache.  The browser can't
 tell the difference between different types as long as you have one.
 
 -Dave
__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



SSLCARevocationFile

2001-10-25 Thread Mary Peterson

Does anyone have a certificate revocation list (crl) file that is functioning properly 
with apache and mod_ssl???  Or does anyone know how to generate a crl with the openssl 
tool?  If so, I would appreciate some assistance.

Thanks!

__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



RE: MSIE POST problem

2001-10-25 Thread Peter Morelli

Yes, using the dmb version...

--pete

-Original Message-
From: David Rees [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, October 24, 2001 6:55 PM
To: '[EMAIL PROTECTED]'
Subject: Re: MSIE POST problem


On Wed, Oct 24, 2001 at 05:38:40PM -0700, Peter Morelli wrote:
 Sorry, I have the same situation after using those config lines. I had
seen
 them on the mailing list before, but just to be sure I've just retested
 them. No change. Same symptoms and solutions...

And you do have a ssl session cache defined?

-Dave
__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]
__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



RE: MSIE POST problem

2001-10-25 Thread John . Airey

try the shm version, eg:

SSLSessionCacheshm:/var/run/ssl_scache(512000)

Seems to work better for everyone.

- 
John Airey
Internet systems support officer, ITCSD, Royal National Institute for the
Blind,
Bakewell Road, Peterborough PE2 6XU,
Tel.: +44 (0) 1733 375299 Fax: +44 (0) 1733 370848 [EMAIL PROTECTED] 


-Original Message-
From: Peter Morelli [mailto:[EMAIL PROTECTED]]
Sent: 25 October 2001 16:37
To: '[EMAIL PROTECTED]'
Subject: RE: MSIE POST problem


Yes, using the dmb version...

--pete

-Original Message-
From: David Rees [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, October 24, 2001 6:55 PM
To: '[EMAIL PROTECTED]'
Subject: Re: MSIE POST problem


On Wed, Oct 24, 2001 at 05:38:40PM -0700, Peter Morelli wrote:
 Sorry, I have the same situation after using those config 
lines. I had
seen
 them on the mailing list before, but just to be sure I've 
just retested
 them. No change. Same symptoms and solutions...

And you do have a ssl session cache defined?

-Dave
__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]
__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]


- 

NOTICE: The information contained in this email and any attachments is 
confidential and may be legally privileged. If you are not the 
intended recipient you are hereby notified that you must not use, 
disclose, distribute, copy, print or rely on this email's content. If 
you are not the intended recipient, please notify the sender 
immediately and then delete the email and any attachments from your 
system.

RNIB has made strenuous efforts to ensure that emails and any 
attachments generated by its staff are free from viruses. However, it 
cannot accept any responsibility for any viruses which are 
transmitted. We therefore recommend you scan all attachments.

Please note that the statements and views expressed in this email 
and any attachments are those of the author and do not necessarily 
represent those of RNIB.

RNIB Registered Charity Number: 226227

Website: http://www.rnib.org.uk 

__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



RE: MSIE POST problem

2001-10-25 Thread Peter Morelli

I changed to shm from dbm, but it doesn't seem to solve my problem.

The thing I don't understand is why unselecting show friendly http error
pages somehow lets the form post be downgraded. Does apache use some sort
of redirect header to downgrade the request, and MSIE interprets that header
as an error?

--peter

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Thursday, October 25, 2001 9:08 AM
To: [EMAIL PROTECTED]
Subject: RE: MSIE POST problem


try the shm version, eg:

SSLSessionCacheshm:/var/run/ssl_scache(512000)

Seems to work better for everyone.

- 
John Airey
Internet systems support officer, ITCSD, Royal National Institute for the
Blind,
Bakewell Road, Peterborough PE2 6XU,
Tel.: +44 (0) 1733 375299 Fax: +44 (0) 1733 370848 [EMAIL PROTECTED] 


-Original Message-
From: Peter Morelli [mailto:[EMAIL PROTECTED]]
Sent: 25 October 2001 16:37
To: '[EMAIL PROTECTED]'
Subject: RE: MSIE POST problem


Yes, using the dbm version...

--pete

-Original Message-
From: David Rees [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, October 24, 2001 6:55 PM
To: '[EMAIL PROTECTED]'
Subject: Re: MSIE POST problem


On Wed, Oct 24, 2001 at 05:38:40PM -0700, Peter Morelli wrote:
 Sorry, I have the same situation after using those config 
lines. I had
seen
 them on the mailing list before, but just to be sure I've 
just retested
 them. No change. Same symptoms and solutions...

And you do have a ssl session cache defined?

-Dave
__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



build/installation prb

2001-10-25 Thread Anand Nagarhalli

Hello,
I want to test a small program through SSL on Apache(1.3.14) on linux. I am
trying to build/install mod_ssl with Apache but in vain. Is there site from
where I can just get the installable of mod_ssl/openssl/mm/apache(for
1.3.14) without bothering to build the source.

Thanks in advance,
An

__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]