apache and mod_ssl

2000-06-02 Thread Dave
I have been trying for the past couple of days to get apache and ssl(http://www.modssl.org and http://www.apache-ssl.org) to work. I have tried them both. Netscape hangs when I try to connect to https://localhost but works without security at http://localhost:443. Apache alone without s

RE: Apache, mod_ssl, certs, and such...

2000-06-02 Thread Kirk Benson
It may be that Apache is trying to prompt you for the passphrase, but can't since it's a service. Try starting it from the command line to see if it works. cheers Kirk > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Tim Willis > Sent: Friday, June

Re: SSL and reverse proxy weirdness : >

2000-06-02 Thread Rossen Raykov
Hi, Try this: LoadModule proxy_module modules/libproxy.so AddModule mod_proxy.c ProxyVia Block ProxyRequests Off ProxyPass /somedir/ http://www.safeplace.com/otherdir/ ProxyPassReverse /somedir/ http://www.safeplace.com/otherdir/ It is pretty simple. If you need more complex solution the

Is logrotate effective?

2000-06-02 Thread Airey, John
I have a query which I realise is a borderline mod_ssl query. I want to rotate logs every month just after midnight at the beginning of each month, using cron. I have two servers I wish to do this on. One has 26 files open for logs and the other has 12 files log files open. This includes the defa

Apache, mod_ssl, certs, and such...

2000-06-02 Thread Tim Willis
(system - WinNT, Apache+mod_ssl+openssl as a service) Ok - I've received a test cert from Thawte, installed it, created a server.key file, saved the Thawte cert as server.crt, and placed server.crt and server.key in the appropriate places in httpd.conf in Apache. The problem is, when I re-start

Re: PHP and SSL authentication

2000-06-02 Thread Mads Toftum
On Fri, Jun 02, 2000 at 02:12:39PM +0300, Victor STANESCU wrote: > If some user authenticates by a key, using a simple script like the > classical printenv in apache, i can see its name in the environment > variable SSL_CLIENT_S_DN_CN. > The problem is that using php, this variable is not set. > H

RE: Insecure information

2000-06-02 Thread Airey, John
Title: I take it you are suggesting using https for the outside frame, and http for the inside frames?   First of all, why would you want to mix http and https? I haven't tested this, but even if a warning doesn't come up, some users will cotton on to your "smoke and mirrors" of security.

PHP and SSL authentication

2000-06-02 Thread Victor STANESCU
If some user authenticates by a key, using a simple script like the classical printenv in apache, i can see its name in the environment variable SSL_CLIENT_S_DN_CN. The problem is that using php, this variable is not set. How can i know the name of the user that authenticated itself by a ssl key,

RE: SSL and reverse proxy weirdness : >

2000-06-02 Thread Airey, John
I think I understand what you are trying to achieve. I've had a similar problem before. Access www.safeplace.com using it's IP address instead on the machine that is doing the proxying and see if that is correct. If so use SSLEngine on SSLCertificateFile /etc/httpd/conf/ssl.crt/

Re: SSL and reverse proxy weirdness : >

2000-06-02 Thread Mads Toftum
On Thu, Jun 01, 2000 at 04:07:32PM -0700, AGT wrote: > > I would like to do something with mod_ssl and Apache 1.3.12 > that seems simple yet is not doing what I require. > > https://www.foobar.com or http://www.foobar.com should > reverse proxy for http://www.safeplace.com. ie: I should > see th

Re: Insecure information

2000-06-02 Thread Mads Toftum
On Thu, Jun 01, 2000 at 04:23:13PM -0700, Jody Fraser wrote: > What about using the mixed-mode approach with HTTP and HTTPS, using > frames? > Nope, that won't work. vh Mads Toftum -- `Darn it, who spiked my coffee with water?!' - lwall _