ANNOUNCE: mod_ssl 2.2.4

1999-03-04 Thread Ralf S. Engelschall
This week I was very busy with hacking on mod_ssl. The result is now available: mod_ssl 2.2.4. Beside a lot of small changes at all edges for preparing the final transition from SSLeay to OpenSSL this version fixes at least two nasty problems: The close notify situation and the restart situation

Re: Client Certificate bits and mod_perl

1999-03-04 Thread Alfredo Raul Pena
"Ralf S. Engelschall" wrote: > Since mod_ssl 2.1 you can get _all_ ingredients of a certificate via > environment variables SSL_. What ingredients are you missing? I think the problem is that I'm not using mod_perl for CGI scripts (where you have the info via the environment) but from a Auth

RE: Verisign rejects CSR

1999-03-04 Thread Simon Kenyon
On 22-Feb-99 Tore Green wrote: > I have just installed Apache 1.3.4 + mod_ssl 2.2.2 (with openssl 0.9.1c). > When trying to submit a CSR to Verisign for a test certificate, I get > Error - Certificate Signing Request > The certificate signing request (CSR) you submitted is not signed > correctly.

Re: Client Certificate bits and mod_perl

1999-03-04 Thread Ralf S. Engelschall
On Thu, Mar 04, 1999, Alfredo Raul Pena wrote: > I'am working on mod_perl AuthHandler to map between users client > certificates and user ids in behalf of CGI programs written with basic > authentication in mind. > I managed to get something working thanks to Clayton Donley's > AuthLDAP m

Client Certificate bits and mod_perl

1999-03-04 Thread Alfredo Raul Pena
Hi, I'am working on mod_perl AuthHandler to map between users client certificates and user ids in behalf of CGI programs written with basic authentication in mind. I managed to get something working thanks to Clayton Donley's AuthLDAP module and FakeBasicAuthentication, but need more info

Re: Self-signed sertificates

1999-03-04 Thread Anton Voronin
"Ralf S. Engelschall" wrote: > > > SSLRequire %{SSL_CLIENT_I_DN} != %{SSL_CLIENT_S_DN} > > > > Ok, but this seemes to help only if a client's certificate itself is self-signed. > > But what if it is signed by a custom-made CA whoes cert is self-signed? Or even > > if there are more levels in chai

Re: Self-signed sertificates

1999-03-04 Thread Ralf S. Engelschall
On Thu, Mar 04, 1999, Anton Voronin wrote: > > > is it possible to configure mod-ssl *not* to trust to self-signed > > > certificates? > > > > You mean client certificates, right? Hmmm.. yes, you can use SSLRequire in > > addition to the standard client verification to require that the issuer of

Re: Self-signed sertificates

1999-03-04 Thread Anton Voronin
"Ralf S. Engelschall" wrote: > On Thu, Mar 04, 1999, Anton Voronin wrote: > > > is it possible to configure mod-ssl *not* to trust to self-signed > > certificates? > > You mean client certificates, right? Hmmm.. yes, you can use SSLRequire in > addition to the standard client verification to req

Re: Self-signed sertificates

1999-03-04 Thread Ralf S. Engelschall
On Thu, Mar 04, 1999, Anton Voronin wrote: > is it possible to configure mod-ssl *not* to trust to self-signed > certificates? You mean client certificates, right? Hmmm.. yes, you can use SSLRequire in addition to the standard client verification to require that the issuer of the client certifi

RE: Effects of SSLRequireSSL in Netscape and IE

1999-03-04 Thread John Imrie
> Dear all: > > I have set up the following in my access.conf file to deny access to my > web server from any non-secure connection: > > > SSLRequireSSL > > > When using Netscape Navigator I get a permissions denied error when I try > to go to http://webserver.com (as I hoped). > > Howev

Self-signed sertificates

1999-03-04 Thread Anton Voronin
Hello, is it possible to configure mod-ssl *not* to trust to self-signed certificates? Thanks, Anton -- Anton Voronin| Ural Regional Center of FREEnet, [EMAIL PROTECTED] | Southern Ural University, Chelyabinsk, Russia http://www.urc.ac.ru/~anton | Programmer & Sy

Re: Installation problem

1999-03-04 Thread Ralf S. Engelschall
On Thu, Mar 04, 1999, Gilles L. Chong Hok Yuen wrote: > here are my facts: UNIX solaris 2.6, Apache 1.3.4, SSLeay 0.9.0b, > mod_ssl-2.2.3-1.3.4 > > Ive installed SSLeay, Apache and going thru the installation process of > mod_ssl. Configuring with Apache (./configure > --with-apache=../apache_1.

Installation problem

1999-03-04 Thread Gilles L. Chong Hok Yuen
Hi, here are my facts: UNIX solaris 2.6, Apache 1.3.4, SSLeay 0.9.0b, mod_ssl-2.2.3-1.3.4 Ive installed SSLeay, Apache and going thru the installation process of mod_ssl. Configuring with Apache (./configure --with-apache=../apache_1.3.4) no prob. But when i try to configure with SSLeay (./config

Re: [BugDB] mod_ssl fails on httpd SIGHUP (PR#114)

1999-03-04 Thread bugdb-mod-ssl
On Thu, Mar 04, 1999, [EMAIL PROTECTED] wrote: > Full_Name: Benjamin R. Ginter > Version: 2.2.3-1.3.4 > OS: Linux 2.1.131 > Submission from: cx876120-a.chnd1.az.home.com (24.1.214.15) > > Apache 1.3.4 is compiled with PHP3.07 and mod_ssl 2.2.3 (and > --enable-modules=most). > > Everything works

Re: Restarts fixed (was: Re: mod_ssl 2.2.3 restart bug?)

1999-03-04 Thread Ralf S. Engelschall
On Wed, Mar 03, 1999, [EMAIL PROTECTED] wrote: > > On Wed, Mar 03, 1999, [EMAIL PROTECTED] wrote: > > >[...] > > > Is this the same re-start bug that's been around for a while? > > > > Oh wait, I forgot to ask in the last mail: What bug are _YOU_ speaking about? > > I reads like you know a resta

[BugDB] mod_ssl fails on httpd SIGHUP (PR#114)

1999-03-04 Thread bugdb-mod-ssl
Full_Name: Benjamin R. Ginter Version: 2.2.3-1.3.4 OS: Linux 2.1.131 Submission from: cx876120-a.chnd1.az.home.com (24.1.214.15) Apache 1.3.4 is compiled with PHP3.07 and mod_ssl 2.2.3 (and --enable-modules=most). Everything works great until I SIGHUP httpd. Normal port 80 sites are accessible

Re: Restarts fixed (was: Re: mod_ssl 2.2.3 restart bug?)

1999-03-04 Thread tvaughan
"Ralf S. Engelschall" <[EMAIL PROTECTED]> writes: > On Wed, Mar 03, 1999, [EMAIL PROTECTED] wrote: > > >[...] > > Is this the same re-start bug that's been around for a while? > > Oh wait, I forgot to ask in the last mail: What bug are _YOU_ speaking about? > I reads like you know a restart bug