Re: Errors after upgrading to OpenSSL 0.9.5

2000-02-29 Thread Ralf S. Engelschall
On Tue, Feb 29, 2000, Lutz Jaenicke wrote: > > After upgrading from OpenSSL 0.9.4 to 0.9.5, I get this error when trying to > > start apache: > > [error] mod_ssl: Init: Failed to generate temporary 512 bit RSA private key > > > > I can't find any information about this error. > > > > Here's som

ANNOUNCE: mod_ssl 2.6.1-1.3.12

2000-02-29 Thread Ralf S. Engelschall
mod_ssl 2.6.1 is now available. It provides mainly PRNG changes, but also a few other fixes and cleanups. http://www.modssl.org/source/ ftp://ftp.modssl.org/source/ Yours, Ralf S. Engelschall [EMAIL PROTECTED]

Re: Errors after upgrading to OpenSSL 0.9.5

2000-02-29 Thread Cliff Woolley
>>> [EMAIL PROTECTED] 02/29/00 01:08AM >>> >Here's some info about my webserver: >[notice] Apache/1.3.12 (Unix) PHP/3.0.15 mod_ssl/2.6.0 OpenSSL/0.9.4 Notice that it still says OpenSSL/0.9.4 -- it would appear that the version of the OpenSSL library that got compiled in to your web server doesn'

mod_ssl 2.6.0 with openssl 0.9.5

2000-02-29 Thread Tim Tassonis
Hello As some other people reported, mod_ssl 2.6.0 does not work "out of the box" on e.g. Solaris or probably generally machines without a /dev/randon device. My solution: 1. Go to mod_ssl-2.6.0-1.3.12/pkg.contrib 2. Commpile the truerand program "gcc -o truerand truerand.c" 3. Copy truerand t

keeping POST data for Apache/CGI

2000-02-29 Thread Zakon, Stuart
<> Hi, I see where ssl_engine_io.c sucks in POST request data from Apache, however, I am looking for how the data gets back into the BUFF code, as described below. Anybody know where to look? >From ssl_engine_io.c: * We cannot simply suck in the data via an SSL_read-based loop because of *

No Subject

2000-02-29 Thread Zakon, Stuart
Hi, I see where ssl_engine_io.c sucks in POST request data from Apache, however, I am looking for how the data gets back into the BUFF code, as described below. Anybody know where to look? >From ssl_engine_io.c: * We cannot simply suck in the data via an SSL_read-based loop because of * HTTP

Re: keeping POST data for Apache/CGI

2000-02-29 Thread Ralf S. Engelschall
On Tue, Feb 29, 2000, Zakon, Stuart wrote: > I see where ssl_engine_io.c sucks in POST request data from Apache, > however, I am looking for how the data gets back into the BUFF code, > as described below. Anybody know where to look? > > >From ssl_engine_io.c: > > * We cannot simply suck in t

install

2000-02-29 Thread Erwan Le Rest
Hello, I have got some problems to install the Apache SSL mode for Windows NT. When the "nmake /f Makefile.nt" command runs, it fails because it doesn't find the files to patch, although I have all the needed packages. How could I resolve this problem? Best regards.

Re: Installing as Root into NS and MSIE

2000-02-29 Thread Stefan Kelm
> > does anyone have information about getting ones CA cert installed into > > Microsoft and Netscapes Browsers, ie becoming a fully qualified CA > > I think a few hundred thousand dollars (US) would do it. In the case of Netscape, yes. I received the following mail from them the other day: > >

Re: Errors after upgrading to OpenSSL 0.9.5

2000-02-29 Thread Bodo Moeller
On Tue, Feb 29, 2000 at 11:51:06AM +0100, Lutz Jaenicke wrote: > I just experienced the same problem (but I have been prepared :-) > OpenSSL 0.9.5 is more picky about the correct seeding of the PRNG > (pseudo random number generator). It seems (did not check this out *) that the > internal seed g

ftp daemon

2000-02-29 Thread Dmitry Sivachenko
Hello! At ftp.modssl.org you use ftp daemon, which reports (WU-academ-RSE/2.4.2-B16 BnP/2.0.0) What does RSE/2.4.2 and BnP/2.0.0 mean? Where can I learn something about these extensions? Thank you in advance, Dima. __ Apache I

Re: FP extensions

2000-02-29 Thread Emmanuel PIERRE
Hi, > Wondering if anyone is using the frontpage extensions module for Apache > and could comment on Secuity issues. not anymore, I prefer using mod_dav than the ugly FP... Emmanuel -- Emmanuel PIERRE A P R - J o b l'Emploi Sur Internet 32, rue

We plant the seed, nature grows the seed

2000-02-29 Thread Adam Dennis
Hello, I'm installing OpenSSL 0.9.5beta2 with Mod_ssl 2.6.0 and Apache_1.3.12 on an Apple G3 running Rhapsody 5.5 (Mac OS X) and I'm almost finished but... When I run 'make certificate' just before the Apache 'make install' (after Openssl and Mod_ssl have been configured successfully and afte

Re: Installing as Root into NS and MSIE

2000-02-29 Thread Cliff Rayman
A com control is just a runtime object. IE knows how to run them, so basically they are saying, that they will give you a little program object that you can use to install your own root CA. This means you can install it on all your intranet IE's for internal use. This means that other uses can al

Installing CA in Apache

2000-02-29 Thread Rick Welykochy
Simple question [ Apache/1.3.9 (Unix) mod_ssl/2.4.8 OpenSSL/0.9.4 mod_perl/1.21 ] I wish Apache to authenticate using client certs. >From httpd.conf: SSLVerifyClient require SSLVerifyDepth 1 SSLCACertificateFile conf/ssl.crt/snakeoil-ca-rsa.crt SSLOptions +FakeBasicAuth +Stric

compile problems - 2.6.1 / 1.3.12

2000-02-29 Thread Nate Carlson
Hey, I'm trying to compile 2.6.[01] against 1.3.12, and the compiler is spitting out the following: gcc -c -I../../os/unix -I../../include -O2 -mpentium -fno-strength-reduce -DLINUX=2 -DMOD_SSL=206101 -DEAPI -DUSE_EXPAT -I../../lib/expat-lite `../../apaci` -fpic -DSHARED_MODULE -DSSL_COMPAT -D

Re: Installing CA in Apache

2000-02-29 Thread Rick Welykochy
On Wed, 1 Mar 2000, Rick Welykochy wrote: > Simple question > [ Apache/1.3.9 (Unix) mod_ssl/2.4.8 OpenSSL/0.9.4 mod_perl/1.21 ] > > I wish Apache to authenticate using client certs. > >From httpd.conf: > > SSLVerifyClient require > SSLVerifyDepth 1 > SSLCACertificateFile conf/ssl.c

Re: install

2000-02-29 Thread Ralf S. Engelschall
On Mon, Feb 28, 2000, Erwan Le Rest wrote: > I have got some problems to install the Apache SSL mode for Windows > NT. When the "nmake /f Makefile.nt" command runs, it fails because it > doesn't find the files to patch, although I have all the needed > packages. > How could I resolve this pro

Re: We plant the seed, nature grows the seed

2000-02-29 Thread Ralf S. Engelschall
On Tue, Feb 29, 2000, Adam Dennis wrote: > I'm installing OpenSSL 0.9.5beta2 with Mod_ssl 2.6.0 and > Apache_1.3.12 on an Apple G3 running Rhapsody 5.5 (Mac OS X) and I'm > almost finished but... > When I run 'make certificate' just before the Apache 'make install' > (after Openssl and Mod_ssl

Mod_ssl

2000-02-29 Thread seth
Hi There one and all, Just a quick note to say thanks for creating, maintaining and supporting Apache & Mod_ssl. Err thats it. Many thanks seth clair ([EMAIL PROTECTED]) __ Apache Interface to OpenSSL (mod_ssl)

Re: ftp daemon

2000-02-29 Thread Ralf S. Engelschall
On Tue, Feb 29, 2000, Dmitry Sivachenko wrote: > At ftp.modssl.org you use ftp daemon, which reports > (WU-academ-RSE/2.4.2-B16 BnP/2.0.0) > > What does RSE/2.4.2 and BnP/2.0.0 mean? > Where can I learn something about these extensions? That's an older WU-academ 2.4.2 with some patches from m

Re: compile problems - 2.6.1 / 1.3.12

2000-02-29 Thread Ralf S. Engelschall
On Tue, Feb 29, 2000, Nate Carlson wrote: > I'm trying to compile 2.6.[01] against 1.3.12, and the compiler is > spitting out the following: > > gcc -c -I../../os/unix -I../../include -O2 -mpentium > -fno-strength-reduce -DLINUX=2 -DMOD_SSL=206101 -DEAPI -DUSE_EXPAT > -I../../lib/expat-lite `.

get netscape internal pkcs#11 module

2000-02-29 Thread Osvaldo Brito
Hi, I want to export a certificate to a netscape browser. I converted the user certificate file (*.crt) in a pkcs#12 file (*.p12). But when i go to the security info dialog box in the browser, in crytographic modules i just see the netscape internal pkcs#11 module. And the browser cannot connect

using user certificate problem

2000-02-29 Thread Osvaldo Brito
Hi, I'm configuring a apache mod_ssl web server. I've a user.p12 file imported into the netscape browser. (I've made the user.p12 with openssl pkcs12 -export -in user.crt -name "My user certificate" -out user.p12 -clcerts -info -des3 -inkey user.key). When i try to connect to the server i get er

Re: Errors after upgrading to OpenSSL 0.9.5

2000-02-29 Thread Lutz Jaenicke
On Tue, Feb 29, 2000 at 01:08:39AM -0500, Peter Avalos wrote: > After upgrading from OpenSSL 0.9.4 to 0.9.5, I get this error when trying to > start apache: > [error] mod_ssl: Init: Failed to generate temporary 512 bit RSA private key > > I can't find any information about this error. > > Here's