Re: Configuring Apache with SSL

2000-07-28 Thread Craig Shaver

Hi,

I think you need to read the documentation and see where you configure
the gcache. It needs a connection and that is usually specified in the
httpd.conf. You are obviously using Ben's apache-ssl patch kit and not
mod_ssl. I ran into the same problem in the past.

BTW I just brought up a new apache with mod_ssl over at a client site
and it is working like a charm. The cache mechanism was set up properly
by default. For the past several years I have been using Ben's patch kit
(thank you very mucho Ben!:), but I think I will switch over to mod_ssl
for all future installations. In the past mod_ssl looked like a
bug-a-minute project. It seems to have settled down for now.

good luck :)

sergio wrote:
> 
> Hi,
> 
> I'm installing Apache with openssl-9.0.5a and after many hours trying to
> make it work, I can't see the certificate. Netscape says there is an
> error in the TCP connection, and in the error_log appear these lines:
> 
> Failed to connect to socket: /usr/local/apache/logs/gcache_port
> connect: Conexion rehusada
> httpsd: gcacheclient.c:118: OpenServer: La declaracion `I "couldn't
> connect to socket "' no se cumple.
> [ Fri Jul 28 12:22:22 2000 ] [notice] child pid 2228 exit signal Aborted
> (6)
> 
> I've been trying many things, but I'm not keen on this and need some
> help...
> 
> Thank you...
> 
> Sergio.
> 
> __
> OpenSSL Project http://www.openssl.org
> User Support Mailing List    [EMAIL PROTECTED]
> Automated List Manager   [EMAIL PROTECTED]

-- 
Craig Shaver, Productivity Group
POB 60458 Sunnyvale, CA  94088 (650)390-0654
http://www.progroup.com/ mailto:[EMAIL PROTECTED]
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Wie kann man aus einem Publik Key ein Certifikat machen.

2000-08-03 Thread Craig Shaver

Or run it through a translator like the one at http://translator.go.com/
-- :)

Merton Campbell Crockett wrote:
> 
> On Thu, 3 Aug 2000, Angelo Nardone wrote:
> 
> > WHAT 
> 
> Not everyone speaks or writes English.  Instead of rudely screaming, you
> might have tried reading the message and providing an answer.  There are
> enough cognates in the text that you should have been able to read it
> without difficulty and without using a dictionary.
> 
> All he was asking was how to generate a certificate.
> 
> My apologies to the list.
> 
> Merton Campbell Crockett
> 
> __
> OpenSSL Project http://www.openssl.org
> User Support Mailing List[EMAIL PROTECTED]
> Automated List Manager   [EMAIL PROTECTED]

-- 
Craig Shaver, Productivity Group
POB 60458 Sunnyvale, CA  94088 (650)390-0654
http://www.progroup.com/ mailto:[EMAIL PROTECTED]
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: linking problem

2000-08-05 Thread Craig Shaver

Looks like you are adding mod_perl also. Did you try to build without
mod_perl? Take out the added modules until you find out what is causing
the problem.

Robert Kubarych wrote:
> 
> While running make on apache_1.3.12 it exits with the following error:
> 
> ld:
> Unresolved:
> RAND_egd_bytes
> *** Exit 1
> Stop.
> *** Exit 1
> Stop.
> *** Exit 1
> Stop.
> 
> Our platform is Tru64 4.0f.  Previous to running make I ran:
> 
> root#./configure --activate-module=src/modules/perl/libperl.a \
> > --activate-module=src/modules/ssl/libssl.a \
> > --enable-shared=remain \
> > --add-module=/usr/src/apache_1.3.12/src/modules/extra/mod_roaming.c \
> > --prefix=/usr/local/apache_1.3.12 --enable-module=so \
> > --enable-module=apache_ssl
> 
> Any help would be greatly appreciated.
> 
> Rob
>\\|//
>(o -)
> ~~~oOOo~(_)~oOOo
> 
>  Robert K. Kubarych,
>  Asst. Director of Systems Admin. & Programming
>  Rockland Community College
>  Suffern, NY  10901
>  Phone: (914) 574-4799
> 
>  Machine:  DEC Alpha 4100   Phone: (914) 574-4799
>  OS:   Digital UNIX 4.0FFax: (914) 574-4354
>  Unidata Version:  UDT 5.1
>  Colleague Versions:   16.461
> ~~~
> 
> __
> OpenSSL Project http://www.openssl.org
> User Support Mailing List[EMAIL PROTECTED]
> Automated List Manager   [EMAIL PROTECTED]

-- 
Craig Shaver, Productivity Group
POB 60458 Sunnyvale, CA  94088 (650)390-0654
http://www.progroup.com/ mailto:[EMAIL PROTECTED]
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Why can not I link some subroutines in x509.h; x509v3.h etc?

2000-08-20 Thread Craig Shaver

try -L/usr/local/ssl/lib and/or -L/usr/local/lib -lcrypto -lssl

depends on where you installed the openssl libs ...

> ÀîÑï wrote:
> 
>  I am a student of china.I am doing a project of PKI.When I am
> compiling /usr/local/ssl/apps/x509.c ,a lot of errors occur:
> % make
> gcc -o x509 x509.o -L usr/local/ssl -lcrypto
> ld: 0711-317 error:undefined symbol£º .OpenSSL_add_all_algorithms
> ld: 0711-317 error:undefined symbol£º .str2fmt
> ld: 0711-317 error:undefined symbol£º .app_RAND_load_file
> ld: 0711-317 error:undefined symbol£º .app_passwd
> ld: 0711-317 error:undefined symbol£º .X509_alias_set1
> ld: 0711-317 error:undefined symbol£º .X509_trust_clear
> ld: 0711-317 error:undefined symbol£º .X509_reject_clear
> ld: 0711-317 error:undefined symbol£º .X509_add1_trust_object
> ld: 0711-317 error:undefined symbol£º .X509_add1_reject_object
> ld: 0711-317 error:undefined symbol£º .X509_alias_get0
> ld: 0711-317 error:undefined symbol£º .X509_PURPOSE_get_count
> ld: 0711-317 error:undefined symbol£º .X509_PURPOSE_get0
> ld: 0711-317 error:undefined symbol£º .PEM_write_bio_PUBKEY
> ld: 0711-317 error:undefined symbol£º .PEM_write_bio_X509_AUX
> ld: 0711-317 error:undefined symbol£º .app_RAND_write_file
> ld: 0711-317 error:undefined symbol£º .ASN1_INTEGER_new
> ld: 0711-317 error:undefined symbol£º .ASN1_INTEGER_free
> ld: 0711-317 error:undefined symbol£º .d2i_PrivateKey_bio
> ld: 0711-317 error:undefined symbol£º .PEM_read_bio_X509_AUX
> ld: 0711-317 error:undefined symbol£º .X509_PURPOSE_get_id
> ld: 0711-317 error:undefined symbol£º .X509_PURPOSE_get0_name
> ld: 0711-317 error:undefined symbol£º .X509_check_purpose
> ld: 0711-345 use -bloadmap or -bnoquiet to get more informations
> collect2: ld returned 8 exit status
> make: 1254-004 last command error is 1¡£
> 
> 
> stop.
> %
> The file x509.c is just in open ssl .Some subroutines ,for example
> X509_PURPOSE_get0,are in x509v3.h. why  can not link it?
> Give me some advice.Thanks.
>  my email:[EMAIL PROTECTED]

-- 
Craig Shaver, Productivity Group
POB 60458 Sunnyvale, CA  94088 (650)390-0654
http://www.progroup.com/ mailto:[EMAIL PROTECTED]
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Hi, I'm beginner in Korea. Installation problem.....

2000-08-21 Thread Craig Shaver

You are not finding your crypto or ssl libs. Use a -L/usr/local/ssl/lib
or whatever that points directly to the location of the crytpo/ssl libs.
You may have to add a -lgcc depending on your platform.



> ±èº´°ü wrote:
> 
> In my way
> tar -xvzf openssl-0.9.5a.tar.gz
> tar -xvzf patch-2.5.tar.gz
> tar -xvzf apache_1.3.12.tar.Z
> tar -xvzf apache_1.3.12+ssl_1.41.tar.gz
> and
> In openssl-0.9.5a directory
> ./config
> make
> make test
> make install
> and
> In patch-2.5 directory
> ./configure
> make
> make install
> and
> cd /usr/local/src/apache_1.3.12
> vi SSLpatch
> (I modify SSL_BASE and SSL_APP_DIR)
> patch -p1 < SSLpatch
> cd src
> ./Configure
> cd ..
> ./configure --prefix=/usr/local/apache --enable-rule=SHARED_CORE
> --enable-module=so
> make
> and then
> error comes
> This is the last part of "make processing"
> 
> gcc -I./os/unix -I./include -I/usr/local/src/openssl-0.9.5a/include
> -DLINUX=2 -DTARGET=\"httpsd\" -I/usr/local/src/php-4.0.1pl2
> -I/usr/local/src/php-4.0.1pl2/main -I/usr/local/src/php-4.0.1pl2/main
> -I/usr/local/src/php-4.0.1pl2/Zend -I/usr/local/src/php-4.0.1pl2/Zend
> -I/usr/local/src/php-4.0.1pl2 -DUSE_EXPAT -I./lib/expat-lite -fpic
> -DSHARED_CORE -DAPACHE_SSL `./apaci` -rdynamic \
> -o libhttpsd.ep -DSHARED_CORE_TIESTATIC main/http_main.c \
> -L. -lhttpsd -Wl,-rpath,/usr/local/gd-1.8.3 -Wl,-rpath,/usr/local/lib
> -Wl,-rpath,/usr/local/imap/c-client
> -Wl,-rpath,/usr/local/mysql/lib/mysql -rdynamic -L/usr/local/gd-1.8.3
> -L/usr/local/lib -L/usr/local/imap/c-client
> -L/usr/local/mysql/lib/mysql -Lmodules/php4 -L../modules/php4
> -L../../modules/php4 -lmodphp4 -lgdbm -lpam -lc-client -ldl
> -lmysqlclient -lttf -lpng -lz -lgd -lresolv -lm -ldl -lcrypt -lnsl
> -lresolv -lm -lcrypt -ldl -L/usr/local/src/openssl-0.9.5a -lssl
> -lcrypto
> ./libhttpsd.so: undefined reference to `RAND_egd_bytes'
> collect2: ld returned 1 exit status
> make[2]: *** [libhttpsd.ep] Error 1
> make[2]: Leaving directory `/usr/local/src/apache_1.3.12/src'
> make[1]: *** [build-std] Error 2
> make[1]: Leaving directory `/usr/local/src/apache_1.3.12'
> make: *** [build] Error 2
> 
> how can I manage?

-- 
Craig Shaver, Productivity Group
POB 60458 Sunnyvale, CA  94088 (650)390-0654
http://www.progroup.com/ mailto:[EMAIL PROTECTED]
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: How to install OpenSSL in SunOS 2.6

2000-08-28 Thread Craig Shaver

Hi,

You need some random numbers! Solaris does not come with /dev/urandom,
get it here.

http://www.cosy.sbg.ac.at/~andi/

works for me 


siva kumaran wrote:
> 
> hi,
> 
>I faced a problem when i was loading OpenSSL in
> SunOS 2.6.I have installed the OpenSSL in the system ,but the commands were not 
>working.It is giving the error,
> "not seeded enough".I saw the FAQ and found that,if a patch file was installed, 
>these can be solved,but even after installing that i get the same problem.Can any one 
>help me in these problem.It is urgent please.
> 
> thank u
> 
> siva
> 
> _
> Get Your Free Email At, http://www.rediffmail.com
> 
> Partcipate in crazy Re.1 auctions at http://www.rediff.com/auctions
> 
> __
> OpenSSL Project http://www.openssl.org
> User Support Mailing List[EMAIL PROTECTED]
> Automated List Manager   [EMAIL PROTECTED]

-- 
Craig Shaver, Productivity Group
POB 60458 Sunnyvale, CA  94088 (650)390-0654
http://www.progroup.com/ mailto:[EMAIL PROTECTED]
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]