Re: Implementing CRL check

1999-02-28 Thread Ralf S. Engelschall
On Sun, Feb 28, 1999, [EMAIL PROTECTED] wrote: > Has anyone worked on CRL checking in mod_ssl. > I don't have any standard CRL available (using XCert Sentry), but I > can generate a list of revoked serial numbers quite easily. > >From looking at the source my guess is that I should modify > ssl_c

Implementing CRL check

1999-02-28 Thread mads
Hello, Has anyone worked on CRL checking in mod_ssl. I don't have any standard CRL available (using XCert Sentry), but I can generate a list of revoked serial numbers quite easily. >From looking at the source my guess is that I should modify ssl_callback_SSLVerify, using X509_get_serialNumber (an

Re: mca...

1999-02-28 Thread glin
Later than SSL v1, whether a cert is a ca cert or not is specified in the attribute. If your cert is not a ca cert, it is not recommended to use it for signing. The cert is signs may have trouble with browsers. -Original Message- From: Ralf S. Engelschall <[EMAIL PROTECTED]> To: [EMAI

Re: APACHE + PAM + MOD_SSL

1999-02-28 Thread Stein Vrale
[EMAIL PROTECTED] wrote: > > Nuno Miguel Neves <[EMAIL PROTECTED]> writes: > > I'm trying to use mod_auth_pam and mod_ssl, but it seems that they are > > exclusive! > > What version of mod_auth_pam? What version of PAM? > > > When I compile Apache without SSL, the .htacces file works fine, and

Re: APACHE + PAM + MOD_SSL

1999-02-28 Thread tvaughan
Stein Vrale <[EMAIL PROTECTED]> writes: > Im using apache-1.3.3, mod_auth_pam-0.8, mod_ssl-2.0.13-1.3.3, and > mod_pam auth seems to work ok for me with mod_ssl. So your problem has gone away? > > Im using virtual hosts and a location setup like this, have not tried > with .htaccess. Also note

Re: APACHE + PAM + MOD_SSL

1999-02-28 Thread tvaughan
Nuno Miguel Neves <[EMAIL PROTECTED]> writes: > Hi. > > I'm trying to use mod_auth_pam and mod_ssl, but it seems that they are > exclusive! What version of mod_auth_pam? What version of PAM? > When I compile Apache without SSL, the .htacces file works fine, and shows > me a login/password wind

Re: mca.sh

1999-02-28 Thread Ralf S. Engelschall
On Thu, Feb 25, 1999, GOMEZ Henri wrote: > Since I run a dual homed machine, the FQDN is not clear. Who determine > the correct name, apache/mod_ssl or the browser ??? The browser. Apache+mod_ssl accepts any FQDN in the certificate, of course. > It's not clear for me if I must consider the web

Re: mca...

1999-02-28 Thread Ralf S. Engelschall
On Fri, Feb 26, 1999, GOMEZ Henri wrote: > I grab many part of ssl_mod to develop a ssl proxy using certificates to > restrict access to internal resource > (http://www.multimania.com/jonama/)... > > Questions : > > 1) It's not clear is if SSLCACertificatePath must point to a directory > with c

mca...

1999-02-28 Thread GOMEZ Henri
Hi !!! I grab many part of ssl_mod to develop a ssl proxy using certificates to restrict access to internal resource (http://www.multimania.com/jonama/)... Questions : 1) It's not clear is if SSLCACertificatePath must point to a directory with client certs or a directory with well-known CA cert

mca.sh

1999-02-28 Thread GOMEZ Henri
Hi !!! I play with mca.sh to generate a CA cert/key and user cert/key. Said I've got a domain called toto.org, with a web server www.toto.org Some questions : Since I run a dual homed machine, the FQDN is not clear. Who determine the correct name, apache/mod_ssl or the browser ??? It's not cl