Re: [BugDB] init: Failed to generate temporary 512 bit RSA private key (PR#407)

2000-07-03 Thread Mads Toftum
On Mon, Jul 03, 2000 at 07:50:47AM +0200, [EMAIL PROTECTED] wrote: > Full_Name: Robert Aden > Version: 2.6.0-1.3.12 > OS: bsdi 3.1 > Submission from: (NULL) (195.67.147.20) > > > I think the subject pretty much says it all. > Don't really know if this is a bug or a bad configuration on my system

RE: problems in building the openssl package

2000-07-03 Thread Kirk Benson
To build openssl/modssl/apache on Win32, you need to have MSVC (Microsoft Visual C++) installed on your machine.  This is not free - you have to buy a copy.  However, you can download a prebuilt version from www.opensa.org, which includes apache, modssl, and modphp. -Original Messa

Re: Problem with MSIE (Ralf: docbug)

2000-07-03 Thread Florin Andrei
"Ralf S. Engelschall" wrote: > > On Wed, Jun 21, 2000, Cliff Woolley wrote: > > > SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown > > downgrade-1.0 force-response-1.0 > > Yes, I've now even updated the distributed httpd.conf-dist file for mod_ssl > 2.6.5 to use this. This way w

Re: Own CA

2000-07-03 Thread Lars Weber
On Tue, Jun 06, 2000 at 10:20:48PM +0200, Robin Aly wrote: > Hello, > > my problem is in understanding the technique used to build up a own CA, as discribed >in your faq (ssl_faq.html#ToC29). i somehow get along with the signing stuff, but >can't imagine how the CA would run. I mean I don't sta

mod_ssl | Netscape 4.7 works, but not IE 5.xx!?

2000-07-03 Thread Evan Cooch
I created a secure site using mod_ssl, and while I can connect no problem using Netscape 4.7x using 128-bit encryption, IE 5.xx absolutely refuses to show the secure page - at first I thought it was becuase I was using the orignal IE with 40-bit encruption, but even after upgrading to the 128-bit

Re: international IE5: info for FAQ?

2000-07-03 Thread Florin Andrei
Seb Bacon wrote: > > N.B. I can see some GID sites using my copy of 5.01 / 56 bit. Whether this > is a server-side workaround or something else I don't know. Any clues? 56-bit IE5 works with apache_ssl but doesn't work with mod_ssl -- Florin Andrei mailto:[EMAIL PROTECTED]http://

RE: Problem with MSIE (Ralf: docbug)

2000-07-03 Thread Richard Hadley
If your site is working with MISE 5 40bit and 128bit but not 56bit then try adding SSLProtocol All -SSLv3 to your configuration as MISE 5 56bit definitely doesn't work with SSLv3. I would also add the SetEnvIf ... statement as well! Richard. -Original Message- From: Florin Andrei [ma

Re: Problem with MSIE (Ralf: docbug)

2000-07-03 Thread Florin Andrei
Florin Andrei wrote: > > "Ralf S. Engelschall" wrote: > > > > On Wed, Jun 21, 2000, Cliff Woolley wrote: > > > > > SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown > > > downgrade-1.0 force-response-1.0 > > > > Yes, I've now even updated the distributed httpd.conf-dist file for mod

Re: Problem with MSIE (Ralf: docbug)

2000-07-03 Thread Florin Andrei
Richard Hadley wrote: > > If your site is working with MISE 5 40bit and 128bit but not 56bit then try adding > > SSLProtocol All -SSLv3 > > to your configuration as MISE 5 56bit definitely doesn't work with SSLv3. > > I would also add the SetEnvIf ... statement as well! Tried, but it

Re: international IE5: info for FAQ?

2000-07-03 Thread Oleg Makarenko
S3) Why can't I view my site using IE5.x? > There are two irritating bugs in IE5's implementation of SSL not mentioned > on the mod_ssl website. One is that you can't use IP addresses - you must > use the FQDN to access the site. The other bug affects non-128-bit versions > of IE 5.01, which ba

Confirmed: MSIE 5 56-bit does not work with latest Apache/mod_ssl/openssl

2000-07-03 Thread David Rees
Hi, Just to confirm, we are also seeing the same issues with 56-bit MSIE 5 and Apache 1.3.12, mod_ssl 2.6.4 and openssl 0.9.5a. As far as I can tell, it only affects 56-bit MSIE 5. No SSL pages log at all. There are no messages in the logs. Does anyone know of a workaround which won't affect

sslv3 alert bad certificate?

2000-07-03 Thread David Rees
Hi, I'm seeing messages like this in our ssl_error_log: [Fri Jun 30 22:20:42 2000] [error] mod_ssl: SSL handshake failed (server www.ourserver.com:443, client xxx.xxx.xxx.xxx) (OpenSSL library error follows) [Fri Jun 30 22:20:42 2000] [error] OpenSSL: error:14094412:SSL routines:SSL3_READ_BYTES:

[BugDB] cert info in headers instead of environment? (PR#408)

2000-07-03 Thread modssl-bugdb
Full_Name: Kurt Sussman Version: 2.6.4 OS: Linux (RH62) Submission from: (NULL) (216.101.20.226) I'm using Enhydra (www.enhydra.com) with the 'director' Apache module, which handles load balancing and failover. I want Apache (with mod_ssl) to decrypt the requests and pass them to the Enhydra

WORKAROUND: MSIE 5 56-bit does not work with latest Apache/mod_ssl/openssl

2000-07-03 Thread David Rees
Hi, I found a good workaround to this problem. Instead of changing SSLProtocol to "all -SSLv2", you can make your SSLCipherSuite line read: SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP Which is the default with the addition of !EXPORT56. I tested on all the various

Re: international IE5: info for FAQ?

2000-07-03 Thread Oleg Makarenko
Florin Andrei wrote: > Seb Bacon wrote: > > > > N.B. I can see some GID sites using my copy of 5.01 / 56 bit. Whether this > > is a server-side workaround or something else I don't know. Any clues? > > 56-bit IE5 works with apache_ssl but doesn't work with mod_ssl Was apache_ssl compil

Re: international IE5: info for FAQ?

2000-07-03 Thread Florin Andrei
Oleg Makarenko wrote: > > Florin Andrei wrote: > > > 56-bit IE5 works with apache_ssl but doesn't work with mod_ssl > > Was apache_ssl compiled with the same openssl library? What openssl library do > you use? Yes, it was compiled with the same library: 0.9.5a installed from RP

Re: WORKAROUND: MSIE 5 56-bit does not work with latest Apache/mod_ssl/openssl

2000-07-03 Thread Oleg Makarenko
Hi, David Rees wrote: > Hi, > > I found a good workaround to this problem. Instead of changing SSLProtocol > to "all -SSLv2", you can make your SSLCipherSuite line read: > > SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP > The other way is to recompile openssl 0.9.5 w

Re: Confirmed: MSIE 5 56-bit does not work with latest Apache/mod_ssl/openssl

2000-07-03 Thread Florin Andrei
David Rees wrote: > > Hi, > > Just to confirm, we are also seeing the same issues with 56-bit MSIE 5 and > Apache 1.3.12, mod_ssl 2.6.4 and openssl 0.9.5a. As far as I can tell, it > only affects 56-bit MSIE 5. No SSL pages log at all. There are no messages > in the logs. Does anyone know of