Segmentation fault

1999-07-08 Thread Brian Schau
Hello, I had my first apache crash today (1.3.6 + mod_ssl): [Thu Jul 8 10:47:24 1999] [error] mod_ssl: SSL handshake failed (client 192.168.33.41, server dps-1.fleggaard.dk:443) (OpenSSL library error follows) [Thu Jul 8 10:47:24 1999] [error] OpenSSL: error:140760FC:SSL routines:SSL23_GET_CL

[BugDB] bad data error with NS4.51 (PR#204)

1999-07-08 Thread modssl-bugdb
Full_Name: Version: mod_ssl-2.3.5-1.3.6 OS: linux redhat 5.2 (kernel 2.0.36) Submission from: dhost63.bln.de (62.144.104.63) Hello, I'm using mod_ssl-2.3.5-1.3.6, openssl-0.9.3a, apache-1.3.6 under redhat 5.2. The installation went fine without problems. I made make certificate TYPE=test and on

Off the Road: Time Stamping

1999-07-08 Thread Daniel Reichenbach
I`m affraid that this is a bit off the road, but i don`t know where to ask for it. I`m building up our internal server on Caldera OpenLinux 2.2 with Apache 1.3.6, mod_ssl 2.3.5, mm 1.0.8 and OpenSSL 0.9.3a for secure data transmission. It will be used internal and external by dial-in for our colle

RE: [PATCH] Fix for graceful restart problem (PR#183)

1999-07-08 Thread David Harris
I've not heard back from anyone about my patch to fix PR 183. I'd appreciate some comments on this patch - I think it's a good idea, but I've not heard anything. Thanks, - David Harris Principal Engineer, DRH Internet Services _

Re: SSL not initializing.

1999-07-08 Thread Jason Terry
I finally tracked down why my system was failing to initialize SSL properly. I had not setup SSLSessionCache. As soon as I recompiled (installing mm_1.0.9) and setup the SSLSessionCache my system stopped having troubles during restart. Just though some of you may like to know. In case someone

Re: Permission.

1999-07-08 Thread Jason Terry
My system does this same thing. But, I believe it is due to the following... ps -aux reveals the following httpd processes (edited for readability) rootS< Jun28 0:03 /usr/local/apache_1.3.6/bin/httpd nobody S< Jun28 0:20 /usr/local/apache_1.3.6/bin/httpd nobody S< Jun28 0

Re: Permission.

1999-07-08 Thread Dave Neuer
I alread posted a bug report about this. It's PR # 200 @ http://www.modssl.org/support/bugdb, if anyone wants to look at it. Ralf is apparently rather busy now finishing his degree. If anyone has more info about this, I guess I'd be interested in finding out more. It's probably a pretty simple

RE: OpenSSL and MSIE5

1999-07-08 Thread Holdich, Kristian
> Has anyone come across the problem of getting IE5 to > authenticate with mod-ssl? > > I'm seeing the following errors in the logs: > > [Wed Jul 7 15:32:57 1999] [error] mod_ssl: SSL handshake failed > [Wed Jul 7 15:32:57 1999] [error] OpenSSL: > error:0407006A:rsa > routines:RSA_padding_

Re: Permission.

1999-07-08 Thread Dave Neuer
That's the way apache works. The first process starts up as root so it can read the config files, write to logs, etc. It hands the requests that come in to the child processes, which run as nobody so that they have very limited access rights to files, and can't serve up things like executables,

SSL Handshake interrupted

1999-07-08 Thread Yusef Badri
Hello, I have recently installed modssl-2.3.5 (built with Apache 1.3.6 and OpenSSL 9.9.3a), so first let me say thanks to Ralph for a very well integrated module, plus excellent documentation, not only on modssl, but also on OpenSSL. I have one SSL site currently running (on Solaris 2.6), using a

Re: Permission.

1999-07-08 Thread Brian Schau
It is. The parent httpd process will _always_ be owned as root (if root starts the daemon). The children will be owned by the user given to the 'user' config-directive. This is normal ... > My system does this same thing. But, I believe it is due to the > following... > > ps -aux reveals t

Re: Permission.

1999-07-08 Thread Brian Schau
> I alread posted a bug report about this. It's PR # 200 @ > http://www.modssl.org/support/bugdb, if anyone wants to look at it. I'll try to apply the patch tomorrow when I get to work. > Brian, are you using Linux? Yes. > Which version? Kernel 2.2.7 > What libc? Libc6 > What distro?

RE: OpenSSL and MSIE5

1999-07-08 Thread Gordon Smith
On Fri, 09 Jul 1999, you wrote: > > IE5 works fine with our modssl implementation, but i dont pretend to be an > expert on these things :( > > Which registry hack? > On export browsers (40-bit) there is a registry entry under HKLM/Software/Microsoft/Cryptographic/Provider/01 (or some such simi

Perl script to proccess Netscape Clients Certificate Request

1999-07-08 Thread Gerhard Mourani
Hi All, Am looking for some Perl CGI script that can proccess Netscape and Microsoft Clients Certificate Request Automatiquely for mod_ssl-2.3.5 with openssl_0_9_3a. The scrript must completely automate the process, causing a client certificate to be installed once the request Html form is submit

Re: Certificate identity...

1999-07-08 Thread Mark Jaffe
I sent this out Sunday with no response. I cannot understand the error response. Can some one comment? OK, so now I've gotten Apache 1.3.6 installed with SSL, and I can connect to an https page. But Netscape puts up an alert stating "Unable to establish a secure connection to www.wizdev.net. The

Re: PEM vs. DER

1999-07-08 Thread tvaughan
[EMAIL PROTECTED] writes: > "Ralf S. Engelschall" <[EMAIL PROTECTED]> writes: > > [snip] > > > Ok, ok, when I understand you correctly, you want that mod_ssl can read any > > combination Let's see what I can do. > > Much appreciated! Though I don't think every combination is required. At >

Re: Off the Road: Time Stamping

1999-07-08 Thread Lin Geng
I will suggest anyone to read Bruce Schnier's book first before doing timestamping services. That's a good first step to take. Cheers -Original Message- From: Daniel Reichenbach <[EMAIL PROTECTED]> To: modssl User List <[EMAIL PROTECTED]> Date: Thursday, July 08, 1999 9:25 AM Subject:

Re: Permission.

1999-07-08 Thread Ralf S. Engelschall
On Thu, Jul 08, 1999, Dave Neuer wrote: > I alread posted a bug report about this. It's PR # 200 @ > http://www.modssl.org/support/bugdb, if anyone wants to look at it. > > Ralf is apparently rather busy now finishing his degree. If anyone has more > info about this, I guess I'd be interested

Re: Permission.

1999-07-08 Thread Brian Schau
> The problem is that the main process, when it starts up, is supposed to > chown the files so that they're owned by user nobody. However, in some > circumstances, it seems that the filename it's trying to chown is wrong (see > my previous post about this; it's a build-time configuration issue, >

Re: Permission.

1999-07-08 Thread Holger Reif
I just checked a Suse 6.1 system (Brian, original poster had such a thing). /usr/include/ndbm.h defines both DB_LOCK and DBM_SUFFIX: the former because ndbm.h includes db.h and the latter with the following comment: /* * The db(3) support for ndbm(3) always appends this suffix to the * file nam