Invalid Command SSLEngine problem on NT

2002-01-26 Thread Ho, Alexander


Hi,

I followed the directions at
http://www.galatea.com/flashguides/apache-ssl-win32.xml to install SSL
apache on my Windows NT box.  The installation procedure went fine.  But,
when I ran apache with apache -D SSL, as suggested on that page, I get the
error Invalid command 'SSLEngine', perhaps mis-spelled...

I searched the web and found that there are few others also have the same
problem.  No one seems to have a direct answer for the problem.  So, if
anyone has seen and fixed this problem, please share it with me.

Best Regards,
__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



Re: Invalid Command SSLEngine problem on NT

2002-01-26 Thread NickM

Can't answer your question, but just wanted to ask if you know that you can 
download an already compiled version fot windows in the modssl contribution 
area:
http://www.modssl.org/contrib/

Nick


Quoting Ho, Alexander [EMAIL PROTECTED]:

 
 Hi,
 
 I followed the directions at
 http://www.galatea.com/flashguides/apache-ssl-win32.xml to install SSL
 apache on my Windows NT box.  The installation procedure went fine. 
 But,
 when I ran apache with apache -D SSL, as suggested on that page, I get
 the
 error Invalid command 'SSLEngine', perhaps mis-spelled...
 
 I searched the web and found that there are few others also have the
 same
 problem.  No one seems to have a direct answer for the problem.  So, if
 anyone has seen and fixed this problem, please share it with me.
 
 Best Regards,



__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



Apache MOD_SSL over NAT not working

2002-01-26 Thread Jim Lee

We have an apache server with mod_ssl.

The SSL connection works fine within out network(intranet).

But from outside(internet), users reach the apache server through NAT. They 
are able to see the http page but are not able to see https page.

The apache server's ip address is not visible to outside users since the NAT 
does the network address translation. The external users use an external ip 
address which is redirected to apache ip address by NAT.

The following Virtual Host directive is used in the apache httpd.conf

SSLMutex sem
SSLRandomSeed startup builtin
SSLSessionCache none

VirtualHost apache.server.ip.address:443
SSLEngine On
SSLCertificateFile conf/ssl/apache-server.cert
SSLCertificateKeyFile conf/ssl/apache-server.key
/VirtualHost

Any help would be highly appreciated

_
Join the world’s largest e-mail service with MSN Hotmail. 
http://www.hotmail.com

__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



MOD SSL over NAT

2002-01-26 Thread Jim Lee


We have an apache server with mod_ssl.

The SSL works fine within our network(intranet).

But for internet users, who access the apache server over NAT, the SSL does 
not work.

Is there any modification that needs to the made in the apache httpd. conf 
file?

Comments, Suggestions would be helpful.

Thanks,
-Jim

_
Join the world’s largest e-mail service with MSN Hotmail. 
http://www.hotmail.com
__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



Re: MOD SSL over NAT

2002-01-26 Thread jon

On Sat, 2002-01-26 at 07:26, Jim Lee wrote:
 We have an apache server with mod_ssl.
 The SSL works fine within our network(intranet).
 But for internet users, who access the apache server over NAT, the SSL does 
 not work.

are you sure your nat setup is allowing traffic on port 443 (or whatever
port your ssl is running on)? try telneting to port 443 on the external
interface from someplace outside the firewall; if you can't you need to
reconfigure your firewall..

-jon

-- 
[EMAIL PROTECTED] || www.divisionbyzero.com
gpg key: www.divisionbyzero.com/pubkey.asc
think i have a virus? www.divisionbyzero.com/pgp.html
You are in a twisty little maze of Sendmail rules, all confusing. 



signature.asc
Description: This is a digitally signed message part