Re: Apache and mod_ssl

2001-08-22 Thread ___cliff rayman___

Janakiraman Mohanaraman wrote:

> At 04:48 PM 8/22/2001 -0700, you wrote:
> >if u have compiled in mod_rewrite, i believe the
> >code below will do what you want.  i have not tested
> >it here however.  check out the following documentation.
> >
> >http://httpd.apache.org/docs/mod/mod_rewrite.html
> >http://httpd.apache.org/docs/misc/rewriteguide.html
> >
> >- snip 
> >RewriteEngineon
> >RewriteCond  %{HTTPS} !=on
> >RewriteRule ^(.+)  https://%(HTTP_HOST)$1 [R,L]

in particular for the directories /tst/ssl and /tst/ssl2
RewriteEngineon
RewriteCond  %{HTTPS} !=on
RewriteRule ^/test/ssl/(.+)  https://%(HTTP_HOST)/tst/ssl/$1 [R,L]
RewriteCond  %{HTTPS} !=on
RewriteRule ^/test/ssl2/(.+)  https://%(HTTP_HOST)/tst/ssl2/$1 [R,L]

i wanted to make sure this was clear.

>
> >- snip 
> >
> >Janakiraman Mohanaraman wrote:
> >
>  >
> > > I was trying to setup a directory on my server in such a way that all URL
> > > calls to that directory use SSL. Even if the URL entered in the browser is
> > > http://..., I would like to change that to https://...:443 automatically.

--
___cliff [EMAIL PROTECTED]http://www.genwax.com/


__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



Re: Apache and mod_ssl

2001-08-22 Thread ___cliff rayman___

if u have compiled in mod_rewrite, i believe the
code below will do what you want.  i have not tested
it here however.  check out the following documentation.

http://httpd.apache.org/docs/mod/mod_rewrite.html
http://httpd.apache.org/docs/misc/rewriteguide.html

- snip 
RewriteEngineon
RewriteCond  %{HTTPS} !=on
RewriteRule ^(.+)  https://%(HTTP_HOST)$1 [R,L]
- snip 

Janakiraman Mohanaraman wrote:

> Hi:
>
> I am using mod_ssl and openssl in Linux platform for the first time. I was
> unable to locate documentation regarding the following and am not sure if
> this is do-able or not.
>
> I was trying to setup a directory on my server in such a way that all URL
> calls to that directory use SSL. Even if the URL entered in the browser is
> http://..., I would like to change that to https://...:443 automatically.
> The documentation in mod-ssl indicated that I use the SSLRequireSSL flag
> for the directory to require SSL to access this directory. However, I was
> able to access this directory in http. I am using Apache 1.3.20, mod_ssl
> 2.8.4, openssl-0.9.6b in Linux 7.1 platform.
>
> I am looking for resolving 2 issues:
> a) Apache / mod_ssl Configuration to ensure that calls to a specific
> directory (say, /usr/apache/test/ssl) always use SSL;
> b) If user tries to access this directory in using http, automatically
> change that to https.
>
> Can someone shed light on whether this is do-able and if so how?
>

--
___cliff [EMAIL PROTECTED]http://www.genwax.com/


__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



Re: [Fwd: conflict mod_ssl mod_perl perl-5.6.1 and SDBM] 2nd REQUEST

2001-08-21 Thread ___cliff rayman___

[EMAIL PROTECTED] wrote:

> Like I said the last time, openssl is integrated into RedHat 7.0 and above.

i didn't get any other message from you and none show up in the archives.
believe me - i was checking.

>
> Even if you were able to get the above to work, you'd probably break 20 odd
> other packages, including sendmail.

i am used to building my apache/mod_perl/mod_ssl/embperl environment
from scratch.  i am getting the most i can out of very cheap hardware.  i did get
it to work.  sendmail seems fine.  anything else i should check?

>
>
> I know that some people hate RPMS, however they really are your best way
> forward from where you are. Check out www.redhat.com/errata again and get
> the latest openssl for RedHat 7.0. It says version 0.9.6, but has the
> patches up to 0.9.6b. (It doesn't have all the ciphers though, which is
> annoying to say the least. You could amend the source RPM. I can give you
> instructions on how this is done off the list. This is similar to building
> from source, except that it will keep your RPM database consistent).

i would appreciate that.  i'm fine with the rpms for most things, but some
things i like to handcraft.  i'd like to have my cake and eat it too.

>
>
> It was easier with RedHat6.x, you could use either RPMS or build from
> source, and the OS didn't care what you did. With RedHat 7.0 onwards, it's
> become a lot more difficult.
>

--
___cliff [EMAIL PROTECTED]http://www.genwax.com/


__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



[Fwd: conflict mod_ssl mod_perl perl-5.6.1 and SDBM] 2nd REQUEST

2001-08-20 Thread ___cliff rayman___

just trying again.  does anyone have an idea regarding the best way to proceed
from here?  i will probably modify my config to use shared memory instead of a dbm
in any case, so i'd rather remove the sdbm references from the ssl module than
the perl module.  i can probably change all references from sdbm to xdbm in the
mod_ssl source directory and recompile.  i was just hoping for a more elegant
solution.

tia!

___cliff rayman___ wrote:

> I am trying to build and install apache 1.3.20, mod_ssl 2.4.8, openssl-0.9.6b, with 
>perl 5.6.1 on Linux RedHat 7.0.
>
> I get the following error messages when running the make command:
> 
>/usr/local/lib/perl5/5.6.1/i686-linux/auto/SDBM_File/SDBM_File.a(sdbm.o)(.rodata+0x0):
> multiple definition of `nullitem'
> modules/ssl/libssl.a(ssl_util_sdbm.o)(.data+0x80): first defined 
>here/usr/local/lib/perl5/5.6.1/i686-linux/auto/SDBM_File/SDBM_File.a(sdbm.o): In 
>function `sdbm_open':sdbm.o(.text+0x0): multiple definition of `sdbm_open'
> modules/ssl/libssl.a(ssl_util_sdbm.o)(.text+0x0): first defined here
> /usr/bin/ld: Warning: size of symbol `sdbm_open' changed from 328 to 194 in sdbm.o
> /usr/local/lib/perl5/5.6.1/i686-linux/auto/SDBM_File/SDBM_File.a(sdbm.o): In 
>function `sdbm_prep':
> sdbm.o(.text+0xc4): multiple definition of `sdbm_prep'
> etc. etc..
>
> I have tried both  with  --enable-rule=SSL_SDBM and --disable-rule=SSL_SDBM.  I 
>looked in the mail archives and groups.google.com and could not find a reference to 
>the above problem.  I guess I can go back and remake perl without SDBM support, but 
>I’d rather not build it that way if there is some other way to make this all work 
>together.
>
> TIA!!
>
> --
> ___cliff [EMAIL PROTECTED]http://www.genwax.com/
>
> __
> Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
> User Support Mailing List  [EMAIL PROTECTED]
> Automated List Manager[EMAIL PROTECTED]

--
___cliff [EMAIL PROTECTED]http://www.genwax.com/


__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



conflict mod_ssl mod_perl perl-5.6.1 and SDBM

2001-08-17 Thread ___cliff rayman___

I am trying to build and install apache 1.3.20, mod_ssl 2.4.8, openssl-0.9.6b, with 
perl 5.6.1 on Linux RedHat 7.0.

I get the following error messages when running the make command:
/usr/local/lib/perl5/5.6.1/i686-linux/auto/SDBM_File/SDBM_File.a(sdbm.o)(.rodata+0x0): 
multiple definition of `nullitem'
modules/ssl/libssl.a(ssl_util_sdbm.o)(.data+0x80): first defined 
here/usr/local/lib/perl5/5.6.1/i686-linux/auto/SDBM_File/SDBM_File.a(sdbm.o): In 
function `sdbm_open':sdbm.o(.text+0x0): multiple definition of `sdbm_open'
modules/ssl/libssl.a(ssl_util_sdbm.o)(.text+0x0): first defined here
/usr/bin/ld: Warning: size of symbol `sdbm_open' changed from 328 to 194 in sdbm.o
/usr/local/lib/perl5/5.6.1/i686-linux/auto/SDBM_File/SDBM_File.a(sdbm.o): In function 
`sdbm_prep':
sdbm.o(.text+0xc4): multiple definition of `sdbm_prep'
etc. etc..

I have tried both  with  --enable-rule=SSL_SDBM and --disable-rule=SSL_SDBM.  I looked 
in the mail archives and groups.google.com and could not find a reference to the above 
problem.  I guess I can go back and remake perl without SDBM support, but I’d rather 
not build it that way if there is some other way to make this all work together.

TIA!!


--
___cliff [EMAIL PROTECTED]http://www.genwax.com/


__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]