Re: Apache not passing environment variables.

2000-06-06 Thread Mads Toftum
On Mon, Jun 05, 2000 at 10:49:24PM -0400, Steve Sobol wrote: [SNIP] > > But it's not doing that - there are a whole bunch of environment > variables that should be passed from mod_ssl to my php script that > aren't. For example, my script is trying to read SSL_CIPHER_USEKEYSIZE > to find the val

RE: Mod_SSL+Tomcat

2000-06-06 Thread Kirk Benson
Define the for the servlets/jsps within the virtual host which requires SSL. > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Tim Willis > Sent: Monday, June 05, 2000 4:48 PM > To: Mod_SSL List > Subject: Mod_SSL+Tomcat > > > I am working with Apach

RE: Mod_SSL+Tomcat

2000-06-06 Thread GOMEZ Henri
>I am working with Apache, mod_ssl, and Tomcat on Debian Linux. > I am trying >to make sure all references to Tomcat are secure. Is there a >way to tell >Apache or Mod_SSL to keep Tomcat behind https? Sure, Include the mod_jserv/tomcat stuff in httpd.conf in the SSL block ... (ie between a

Re: [midgard] Apache not passing environment variables.

2000-06-06 Thread Emiliano
> Crossposted to both midgard and and modssl-users. > > The line at the top should say "You are using x-bit encryption" > where x is the SSL key size. > > But it's not doing that - there are a whole bunch of environment > variables that should be passed from mod_ssl to my php script that > ar

IE 5.00.2xx incorrect cipher negotiation

2000-06-06 Thread Piotr Sloniowski
Hi, Could anyone help me with crazy MSIE. There are some versions of IE (5.00.2xx to 5.00.28xx) with 56-bit key which has problems with cipher negotiation. When I connect to FQDN URL, negotiated cipher (?) is RC4-MD5 (128/128) and connection fails (browser do not support that !?). When I conne

Re: IE 5.00.2xx incorrect cipher negotiation

2000-06-06 Thread Mads Toftum
Please read http://www.modssl.org/source/exp/mod_ssl/pkg.mod_ssl/README.GlobalID it may explain why you see this. vh Mads Toftum -- `Darn it, who spiked my coffee with water?!' - lwall __ Apache Interface to OpenSSL (mod_ssl)

Re: IE 5.00.2xx incorrect cipher negotiation

2000-06-06 Thread Piotr Sloniowski
Sorry, I didn't mentioned that my server has SGC enabled. README.GlobalID do not explain why cipher negotiation depends on URL type. On Tue, 6 Jun 2000, Mads Toftum wrote: > Please read http://www.modssl.org/source/exp/mod_ssl/pkg.mod_ssl/README.GlobalID > it may explain why you see this. > >

[BugDB] IP address is not logged (PR#393)

2000-06-06 Thread modssl-bugdb
Full_Name: James Russell Version: 2.6.4-1.3.12 OS: IRIX 6.5 Submission from: (NULL) (194.217.18.40) I've recently compiled and installed Apache 1.3.12 + mod_ssl 2.6.4. (I must say, it blows Apache-SSL out of the water!) However, although all my servers work just fine, I can't use mod_access or

Domain name of certificate

2000-06-06 Thread Mark Lo
Hi, I would like to know what Domain Name should I use for a certificate. My server name is dns1.domain.com, and people is using www.domain.com to look for my site. In this case, which domain name should I use for my certificate. Thanks Mark _

Re: [BugDB] IP address is not logged (PR#393)

2000-06-06 Thread modssl-bugdb
Hi, On Tue, Jun 06, 2000 at 06:42 +0200, [EMAIL PROTECTED] wrote: > OS: IRIX 6.5 > Submission from: (NULL) (194.217.18.40) > I've changed mod_setenvif to log the client IP when setenvif is called, and it > only sees IP addresses as 0.0.0.0. Obviously in 'normal' Apache, the real IP > address of

Re: Domain name of certificate

2000-06-06 Thread James Lyon
> I would like to know what Domain Name should I use for a > certificate. > My server name is dns1.domain.com, and people is using www.domain.com to > look for my site. In this case, which domain name should I use for my > certificate. Use the full host/domain name of the web server it

RE: Mod_SSL+Tomcat

2000-06-06 Thread Cliff Woolley
    Cliff WoolleyCentral Systems Software AdministratorWashington and Lee Universityhttp://www.wlu.edu/~jwoolley/   Work: (540) 463-8089Pager: (540) 462-2303>>> [EMAIL PROTECTED] 06/06/00 03:54AM Include the mod_jserv/tomcat stuff in httpd.conf >in the SSL block ...>(ie between and ) Err