Re: Secure Reverse Proxy

2000-04-19 Thread Sylvain Maret
Hello, Why is better to use "RewriteRule" than traditionnal "ProxyPass" directive ? Do you have an example. Sylvain Michael J Schout wrote: On Tue, 18 Apr 2000, Joe Ammann wrote: Now mod_proxy can obviously not forward https connections. It doesn't know anything about SSL. And I could

ODP: Secure Reverse Proxy

2000-04-19 Thread Marcin Badtke
[...] Now mod_proxy can obviously not forward https connections. It doesn't know anything about SSL. And I could not find any information that such a thing has already been done. [...] I am running Apache 1.3.6 with mod_proxy on RH6.0 and can forward https connections from LAN to internet.

Re: problem starting ./apachectl startssl

2000-04-19 Thread alles kapot
Yes, I did it .. I changed /etc/rc.d/init.d/httpd symlinked to /usr/local/apache/bin/apachectl .. also I forced -DSSL , so httpd will run startssl. my server.key is NOT encrypted. But, the problem is ... the httpd could NOT up if using -DSSL any idea? or do I need to recompile? regards, kapot

Re: Trapping weak ciphers and redirecting

2000-04-19 Thread Ralf S. Engelschall
On Wed, Apr 19, 2000, Jeffrey Burgoyne wrote: "Could we allow users with 128 bit capable browsers accessing our site to connected directly, but those using 40 bit browsers would be redirected to a standard page telling them to upgrade." You can do it by using a SSLCipherSuite in httpd.conf

No Subject

2000-04-19 Thread John David Atkinson
I have set up a CA and a webserver that I am trying to use for client authentication with MSIE. I have used xenroll.cab to generate keys and requests from the browser. I then sign the certs with my CA.sh script, but they do not seem to work. They are about 17 lines in length, whereas the

mod_ssl-2.6.3-1 RPMS

2000-04-19 Thread Horms
Hi, I have uploaded mod_ssl-2.6.3-1 i386 RPMS (RH 6.2) and SRPMS to ftp.modssl.org/contrib. The i386 RPMs are mod_ssl-2.6.3-1.i386.rpm and mod_ssl-manual-2.6.3-1.i386.rpm. Unfortunately my upload broke at one stage so I had to repeat it so the SRPM is mod_ssl-2.6.3-1.src.rpm.retry as

help with the following error messages

2000-04-19 Thread Mukesh Sooka
Hi These were taken from my error_log file, what do they mean and if it's a problem how do I correct them? [Mon Apr 17 11:36:17 2000] [error] System: Connection reset by peer (errno: 104) [Mon Apr 17 11:36:17 2000] [error] mod_ssl: SSL handshake interrupted by system [Hint: Stop button pressed

help with the following error messages

2000-04-19 Thread Mukesh Sooka
Hi These were taken from my error_log file, what do they mean and if it's a problem how do I correct them? [Mon Apr 17 11:36:17 2000] [error] System: Connection reset by peer (errno: 104) [Mon Apr 17 11:36:17 2000] [error] mod_ssl: SSL handshake interrupted by system [Hint: Stop button pressed

RE: SSL Certs from IIS to Apache

2000-04-19 Thread Airey, John
I don't believe you can do this. You can convert an Apache certificate to IIS using the command openssl rsa -in apache.key -out iis.key -outform NET I think you'll have to buy another cert, and then convert this one to run on IIS as above when your IIS cert expires. then copy the above key onto

Upgraded, but...

2000-04-19 Thread wwebb
I upgraded to 1.3.12 with modssl per the instructions at http://www.modssl.org/example/ The installation went well. I copied the new /usr/local/apache/apache_1.3.12/src/httpd to /usr/local/apache/bin/httpd and restarted Apache and everthing seems to work fine, except, I can't figure out

Re: problem starting ./apachectl startssl

2000-04-19 Thread Jon Earle
I do it even easier on my RedHat box: - Edit /etc/rc.d/rc.local and add '/usr/local/apache/bin/apachectl startssl' near the end. - ln -s /usr/local/apache/bin/apachectl /etc/rc.d/rc0.d/K20apache - ln -s /usr/local/apache/bin/apachectl /etc/rc.d/rc1.d/K20apache - ln -s

Re: Secure Reverse Proxy

2000-04-19 Thread Winged Wolf
RewriteRule returns a 301 message to the client, which then does the actual requesting from the second server. ProxyPass tells the webserver to do its own request, passing the information to the client when it retrievesit from the second server. --- Mat Butler, Winged Wolf

Re: problem starting ./apachectl startssl

2000-04-19 Thread Winged Wolf
The most simple test is: httpd -t -DSSL. This will tell httpd to scan the httpd.conf file -with the SSL parts enabled-. If you have a problem with the SSL syntax, this will tell you. --- Mat Butler, Winged Wolf [EMAIL PROTECTED] SPASTIC Web Engineer

Need help with Apache 1.3.12+modssl WIN32

2000-04-19 Thread Reid M. Pinchback
Hi all, I've been through an installation before using Apache 1.3.6 and Modssl, so I thought 1.3.12 should go relatively smoothly. Hah! I installed the Win32 build of Apache 1.3.12 (from the Apache site), and grabbed the modssl/openssl materials from the modssl site. The particular file was:

Re: Secure Reverse Proxy

2000-04-19 Thread Mads Toftum
On Wed, Apr 19, 2000 at 11:15:27AM -0700, Winged Wolf wrote: RewriteRule returns a 301 message to the client, which then does the actual requesting from the second server. ProxyPass tells the webserver to do its own request, passing the information to the client when it retrievesit from the

Re: your mail

2000-04-19 Thread Mads Toftum
On Tue, Apr 18, 2000 at 10:46:42AM -0500, John David Atkinson wrote: I have set up a CA and a webserver that I am trying to use for client authentication with MSIE. I have used xenroll.cab to generate keys and requests from the browser. I then sign the certs with my CA.sh script, but they do

Re: Secure Reverse Proxy

2000-04-19 Thread Michael Schout
On Wed, Apr 19, 2000 at 08:27:47AM +0200, Sylvain Maret wrote: Hello, Why is better to use "RewriteRule" than traditionnal "ProxyPass" directive ? Do you have an example. Well, heres one: ProxyPass wont let you do something like: RewriteRule /foo/(.*)$