Re: Child pid exit signal Segmentation fault (11)

1999-05-21 Thread Zivago 'Jaeman' Lee
Rei, I believe the Slackware 3.6 dist has a buggy DBM library. I tried compiling the same thing on another box and I get the same thing. Try using this setting: SSLSessionCache None This seems to help. Or you can try recompiling Apache_SSL using the internal DBM library by setting this option d

SSL3_ACCEPT:bad ... weirdness

1999-05-21 Thread Brian D. Kohl
Hello All, I am running: Server Version: Apache/1.3.6 (Unix) mod_perl/1.19 mod_ssl/2.2.8 OpenSSL/0.9.2b Server Running On: Sun Ultra Enterprise 2 running SunOS 5.6, 512MB, latest patches Basic Problem: Cannot connect via HTTPS. First of All: I created a temp certificate with my private key a

Re: Child pid exit signal Segmentation fault (11)

1999-05-21 Thread Rei Yoshioka
entation fault (11) > >At this point I shutdown the server, when I restart it http works but >https returns a "server returned bad data error." FYI- Just tried building with the latest SNAPs of openssl and modssl along with apache1.3.6: mod_ssl-SNAP-19990521 openssl-SNAP-1999

Re: Child pid exit signal Segmentation fault (11)

1999-05-21 Thread Rei Yoshioka
>To make a long story short, had a crash on one of my webservers and had >to rebuild the machine. It was using apache_1.3.4+mod_ssl-2.2(?, sorry >don't remeber)+openssl-0.9.2b+php-3.0.7 on Linux 2.0.33. This was the >machine that my key and crt request were created on and mod_ssl with the >serve

Re: Files missing in 990520 snapshot?

1999-05-21 Thread Lin Geng
ROTECTED] <[EMAIL PROTECTED]> Date: Friday, May 21, 1999 4:18 PM Subject: Re: Files missing in 990520 snapshot? >On Fri, May 21, 1999, Lin wrote: > >> I am having trouble to locate the modssl-SNAP-19990521.tar.gz file in >> modssl.org. Do I have to use CVS in order to get

Re: ModSSL Breaks Apache

1999-05-21 Thread nreese
What a lovely thread this is, and it brings up many unanswered questions. I am running a commercial server. I want to use SSL. I have the RPM that was generously made available on the Contrib site. I am in the US. So what I want to know is this: Do I need an RSA License or not? I plan to get my

Re: mod_ssl conflicts with mod_define?

1999-05-21 Thread Lars Kellogg-Stedman
> > I recently installed mod_ssl (2.2.0), and I've set up my configuration file > > to use mod_define (as distributed with mod_ssl). It works, and it really > > makes my life more convenient... > > > > ...until I try starting up in ssl mode (apachectl startssl). All of a > > sudden, apache pars

Re: ModSSL Breaks Apache

1999-05-21 Thread Dave Neuer
-Original Message- From: Adam D. McKenna <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] <[EMAIL PROTECTED]> Date: Friday, May 21, 1999 6:00 PM Subject: Re: ModSSL Breaks Apache > >It just annoys me that there is *no* open source option inside the US, and >that I am basically being held hostage

Re: ModSSL Breaks Apache

1999-05-21 Thread Dave Neuer
-Original Message- From: Adam D. McKenna <[EMAIL PROTECTED]> >: There are commercial web-servers based on SSLeay/OpenSSL that are >: legal to use in the US. Plus, if you desperately want to use a free >: one, you can obtain an RSA license yourself -- but it'll likely be >: much more cost

RE: Verisign Cert

1999-05-21 Thread Stockwell, Travis
Just guessing, but it's probably the private key file that you need. -Original Message- From: John Kennedy [mailto:[EMAIL PROTECTED]] Sent: Friday, May 21, 1999 9:36 AM To: MOD_SSL Subject: Verisign Cert We have purchased a site certificate from Verisign. They e-mailed me the cert. as

Re: Verisign Cert

1999-05-21 Thread Paul Rubin
the cert. as one file. All the questions I have seen answered about this mention 2 files needed to set up the certificate. What is the other file I need. We are using mod_ssl 2.1, Apache 1.3.3, and SSLeay 0.9.0b. I know that I am being stupid about this (I shoul

Re: ModSSL Breaks Apache

1999-05-21 Thread Bodo Moeller
On Fri, May 21, 1999 at 11:05:38AM -0400, Adam D. McKenna wrote: > From: Bodo Moeller <[EMAIL PROTECTED]> >>> From what I've heard even RSAREF is not legal to use inside the US >>> for commercial purposes. However, verisign (a division of RSA) >>> does not have a problem issuing certificates for

Re: Verisign Cert

1999-05-21 Thread Ralf S. Engelschall
On Fri, May 21, 1999, John Kennedy wrote: > We have purchased a site certificate from Verisign. They e-mailed me > the cert. as one file. All the questions I have seen answered about > this mention 2 files needed to set up the certificate. What is the > other file I need. We are using mod_ssl

Re: Child pid exit signal Segmentation fault (11)

1999-05-21 Thread Dave Paris
"Ralf S. Engelschall" wrote: > [...] > > Is this SuSE Linux where such problems occured because of > the vendor NDBM library? This is also a problem on RedHat 6.0. Here's the longterm fix I used... ## notice this is a cp and *not* a mv!! cp /usr/include/db1/ndbm.h /usr/include/ndbm.h and app

Re: Files missing in 990520 snapshot?

1999-05-21 Thread Ralf S. Engelschall
On Fri, May 21, 1999, Lin wrote: > I am having trouble to locate the modssl-SNAP-19990521.tar.gz file in > modssl.org. Do I have to use CVS in order to get it? ftp://ftp.modssl.org/snapshot/ And sorry, the filename is mod_ssl-SNAP-19990521.tar.gz. But a "ls -l&

Verisign Cert

1999-05-21 Thread John Kennedy
We have purchased a site certificate from Verisign.  They e-mailed me the cert. as one file.  All the questions I have seen answered about this mention 2 files needed to set up the certificate.  What is the other file I need.  We are using mod_ssl 2.1, Apache 1.3.3, and SSLeay 0.9.0b.  I know tha

Re: ModSSL Breaks Apache

1999-05-21 Thread Adam D. McKenna
From: Dave Neuer <[EMAIL PROTECTED]> : Don't bet on it. Verisign and Thawte are in the business of issuing : certificates, NOT policing US patent violations (especially since Thawte is : base in S. Africa). I think it would be particularly unwise to assume that : just because one company is will

Re: ModSSL Breaks Apache

1999-05-21 Thread Adam D. McKenna
From: Bodo Moeller <[EMAIL PROTECTED]> : > From what I've heard even RSAREF is not legal to use inside the US for : > commercial purposes. However, verisign (a division of RSA) does not have a : > problem issuing certificates for servers running OpenSSL (SSLeay is actually : > what is mentioned).

Re: Child pid exit signal Segmentation fault (11)

1999-05-21 Thread Ralf S. Engelschall
On Fri, May 21, 1999, Shane Wilson wrote: > To make a long story short, had a crash on one of my webservers and had > to rebuild the machine. It was using apache_1.3.4+mod_ssl-2.2(?, sorry > don't remeber)+openssl-0.9.2b+php-3.0.7 on Linux 2.0.33. This was the > machine that my key and crt requ

Child pid exit signal Segmentation fault (11)

1999-05-21 Thread Shane Wilson
To make a long story short, had a crash on one of my webservers and had to rebuild the machine. It was using apache_1.3.4+mod_ssl-2.2(?, sorry don't remeber)+openssl-0.9.2b+php-3.0.7 on Linux 2.0.33. This was the machine that my key and crt request were created on and mod_ssl with the server.crt

Re: Files missing in 990520 snapshot?

1999-05-21 Thread Lin
I am having trouble to locate the modssl-SNAP-19990521.tar.gz file in modssl.org. Do I have to use CVS in order to get it? lin geng __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing

Re: Apache ssl question

1999-05-21 Thread Holger Reif
Remember, that the SSl server is just a particular virtual Host. Thus you should ask yourself the question: How can I make sure, that a second VHost is serving only certain pages and not all or the first Host? There are several possibilities. The easiest (not the most elegant one) to do for you (

Re: ModSSL Breaks Apache

1999-05-21 Thread Dave Neuer
-Original Message- > >>From what I've heard even RSAREF is not legal to use inside the US for >commercial purposes. However, verisign (a division of RSA) does not have a >problem issuing certificates for servers running OpenSSL (SSLeay is actually >what is mentioned). They say this on t

Re: [PATCH] ssl session id as environment var

1999-05-21 Thread Ben Laurie
[EMAIL PROTECTED] wrote: > > Ben Laurie <[EMAIL PROTECTED]> writes: > > > [EMAIL PROTECTED] wrote: > > > > > > No user session that > > > is. My idea is to have the user authenticate, and then bind the user id to > > > the ssl session id. Next time around, I'll see that I have an user id > > > a

Re: Files missing in 990520 snapshot?

1999-05-21 Thread Ralf S. Engelschall
iguration to include the ssl_engine_dh.c source. It's now fixed. Please fetch the latest tarball (= modssl-SNAP-19990521.tar.gz) any try again. Thanks for testing. Ralf S. Engelschall

Re: Misleading installation information

1999-05-21 Thread Ralf S. Engelschall
On Fri, May 21, 1999, [EMAIL PROTECTED] wrote: > In the INSTALL file for the 990520 snapshot > the configuration directives for openssl gives > the -DNO_IDEA switch. > > The 990520 snapshot only works with openssl 0.9.3.0 > and higher. When configuring the openssl 0.9.3.0 the > -DNO_IDEA option

Re: Links instead of file copies?

1999-05-21 Thread Ralf S. Engelschall
On Fri, May 21, 1999, [EMAIL PROTECTED] wrote: > When mod-ssl configures itself into the > Apache environment it creates local copies > of all ssl_ files into the directory > ../apache_x.x.x/src/modules/ssl. > > Couldn't it be neat to create softlinks to > the modssl file tree instead? Softlink

Files missing in 990520 snapshot?

1999-05-21 Thread lena . lindstrom
I downloaded the 990520 snapshot along with the open-ssl-0.9.3.0 package. I think there are something that is missing in the snapshot tar though... At compiletime of the apache server I got the following error: ../../apaci` -DSSL_COMPAT -I/export2/home/leli/apache-server/openssl-0.9.3.0/includ

Misleading installation information

1999-05-21 Thread lena . lindstrom
In the INSTALL file for the 990520 snapshot the configuration directives for openssl gives the -DNO_IDEA switch. The 990520 snapshot only works with openssl 0.9.3.0 and higher. When configuring the openssl 0.9.3.0 the -DNO_IDEA option is removed. Please update the INSTALL file to the release o

Links instead of file copies?

1999-05-21 Thread lena . lindstrom
When mod-ssl configures itself into the Apache environment it creates local copies of all ssl_ files into the directory ../apache_x.x.x/src/modules/ssl. Couldn't it be neat to create softlinks to the modssl file tree instead? ___

Re: ModSSL Breaks Apache

1999-05-21 Thread Bodo Moeller
On Thu, May 20, 1999 at 03:57:21PM -0400, Adam D. McKenna wrote: > From what I've heard even RSAREF is not legal to use inside the US for > commercial purposes. However, verisign (a division of RSA) does not have a > problem issuing certificates for servers running OpenSSL (SSLeay is actually >

Re: Message when starting ssl

1999-05-21 Thread Ralf S. Engelschall
On Fri, May 21, 1999, Gilles L. Chong Hok Yuen wrote: > this is more on the DNS or Apache rather than ModSSL- but what the heck, just to > continue on the existing thread! > > So im trying to change my name based vhosts to IP based. Commented off those > things: 1) Listen, 2) BindAddress, 3) Nam

Re: Message when starting ssl

1999-05-21 Thread Gilles L. Chong Hok Yuen
Ok, this is more on the DNS or Apache rather than ModSSL- but what the heck, just to continue on the existing thread! So im trying to change my name based vhosts to IP based. Commented off those things: 1) Listen, 2) BindAddress, 3) NameVirtualHost in the httpd.conf. Used for vhost1 and for vh