Re: svn commit: r122551 - /httpd/httpd/trunk/CHANGES /httpd/httpd/trunk/modules/proxy/mod_proxy.c

2004-12-17 Thread Mladen Turk
Jim Jagielski wrote: Mladen Turk wrote: I plan on adding additional info to it, to better define how to use it. The docs are kinda skimpy right now. Cool! I also work on the howto or example section for using mod_proxy from simple setup to the work in the clustered environment. I will also have a

Re: SSL + name based virtual hosting

2004-12-17 Thread Enrico Weigelt
* William A. Rowe, Jr. [EMAIL PROTECTED] wrote: Hi, Using another spec, connection upgrade TLS, it works perfectly, but that spec is only supported by some printer drivers. No http client supports TLS upgrade that I'm aware of. where're the differences between SSL and TLS handshake ? cu --

Re: SSL + name based virtual hosting

2004-12-17 Thread Enrico Weigelt
* Dale Ghent [EMAIL PROTECTED] wrote: Hi, snip With SSL, this HTTP request is already encrypted. The server will need to have a way to figure out what SSL key to use to decrypt that HTTP request, but can't do it unless it knows what host/site address the request is for so it can use the

Re: SSL + name based virtual hosting

2004-12-17 Thread William A. Rowe, Jr.
At 11:23 AM 12/17/2004, Enrico Weigelt wrote: hmm, is it somehow possible to work with multiple cert on the same socket ? does the SSL handshake leave any chance that probably more then one cert can be tried, until someone matches ? No. That isn't in the spec, and would be horribly

mod_ssl: ./configure throwing warnings

2004-12-17 Thread Graham Leggett
Hi all, While building the trunk of httpd (as an RPM), I am getting the following warning while configure runs: checking whether to enable mod_ssl... checking dependencies checking for SSL/TLS toolkit base... none checking for OpenSSL version... checking openssl/opensslv.h usability... yes

SSL/VHost logging to Syslog

2004-12-17 Thread Wayne S. Frazee
Is there a way to have certain log data (particularly a new session) piped to syslog natively in apache? Are there third party modules which implement this functionality? I would like to avoid re-inventing the wheel if I dont have to. -- Wayne S. Frazee Any sufficiently

SSL re-inits and re-negotiations

2004-12-17 Thread TAYLOR, TIM \(CONTRACTOR\)
I notice in my SSL Error log (with Debug on) that upon startup, initialization seems to happen twice. [Fri Dec 17 13:57:53 2004] [info] Loading certificate private key of SSL-aware server [Fri Dec 17 13:57:53 2004] [info] Init: Requesting pass phrase via builtin terminal dialog [Fri Dec 17

RELEASE directory change

2004-12-17 Thread NormW
Greetings All, Doing a build of httpd-2.1-dev for NetWare on Win and find the Release directories are now /release.o ... is this intended behaviour? Norm

Re: RELEASE directory change

2004-12-17 Thread Brad Nicholes
Yes, a new module directory called debug was added as a subdirectory of modules. This conflicted with the debug output directory that was being created during the build process. The result was that everytime you did a gmake -f NWGNUMakefile clean it wiped out the source code found in the new

Re: RELEASE directory change

2004-12-17 Thread NormW
Brad Nicholes wrote: Yes, a new module directory called debug was added as a subdirectory of modules. This conflicted with the debug output directory that was being created during the build process. The result was that everytime you did a gmake -f NWGNUMakefile clean it wiped out the source

Re: SSL + name based virtual hosting

2004-12-17 Thread Joseph Dane
William A. Rowe, Jr. [EMAIL PROTECTED] writes: Using a wildcard cert, this simply works, as long as the common name pattern matches all server names. are wildcard certs generally accepted by the current cohort of browsers? -- joe

Re: RELEASE directory change

2004-12-17 Thread William A. Rowe, Jr.
At 04:15 PM 12/17/2004, you wrote: Yes, a new module directory called debug was added as a subdirectory of modules. This conflicted with the debug output directory that was being created during the build process. That's a pretty big stick, and Win32 suffers similar issues. Can't we simply

Re: SSL + name based virtual hosting

2004-12-17 Thread Enrico Weigelt
* William A. Rowe, Jr. [EMAIL PROTECTED] wrote: snip http://www.ietf.org/rfc/rfc2817.txt spells out methods that the server can -insist- that an upgraded connection is used, and the client can instigate an upgraded connection as well even if the server doesn't require it. But under no