RE: MSIE *Again*

2000-07-28 Thread Burns, Robert
William, That *DID* workdo you happen to have any explaination as to why? It doesn't make sense that having to turn on revocation checking would allow it to work? Is this true for all Verisign certs? If so, why do I not get that error when going to other sites with a Verisign cert using IE

Running Mod_ssl when starting apache automatically.

2000-07-28 Thread Gene Lamoreaux
I found a couple of sections in the archives stating that the way to do this was to remove the passphrase section of the key. Is there a way to automatically start the ./apachectl startssl and have it pickup the passphrase from a file or script or something. I have so far had no luck trying eithe

RE: MSIE *Again*

2000-07-28 Thread Burns, Robert
Folks, Some more info about the problem: 1) William's suggestion (see below) worked -- not sure why, but it did. But, as you could imagine, it's not feasible to tell all your customers to perform this step prior to accessing your site -- especially when other websites work just fine! ;->. 2) Th

Problem with "Failed to generate temporary 512 bit RSA private key"

2000-07-28 Thread Simon Dubey
Hello I have just installed mod-ssl on a solaris /sparc machine and get the above error. I have read the FAQ and tried to following what it is suggesting with $HOME/.rnd but do not quite follow it - well what I did, did not work. I have also tried truerand as well but that did not work either.

Re: apache+modssl+... got SEGVs

2000-07-28 Thread David Rees
On Wed, Jul 26, 2000 at 11:17:14AM +0200, Hugues Pisapia wrote: > And sometimes (well, more often with MSIE than with Mozilla :), apache gets > Segmentation faults. It seems that it comes from openssl or modssl as i tried > many configurations. Apache gets SEGVs only when the virtual host with mo

Re: starting ssl

2000-07-28 Thread David Rees
On Fri, Jul 28, 2000 at 01:27:32PM +0800, Raymond wrote: > thanks for the reply david but that did not work also. any other suggestions. Can you make your config file available somewhere so we can take a look at it? I've most often found that config file problems are the most frequent cause of y

FW: Re: verisign certificate installation

2000-07-28 Thread Myint Myint Moe
Hi, I've clicked "Reply via email to Victor" but unfortunately mail bounced back . Thanks and Regards, Myint Myint Moe > -Original Message- > From: Myint Myint Moe > Sent: Friday, July 28, 2000 6:42 PM > To: '[EMAIL PROTECTED]' > Subject: Re: verisign certificate ins

FW: Re: verisign certificate installation

2000-07-28 Thread Myint Myint Moe
Hi, I've clicked "Reply via email to Victor" but unfortunately mail bounced back . Thanks and Regards, Myint Myint Moe > -Original Message- > From: Myint Myint Moe > Sent: Friday, July 28, 2000 6:42 PM > To: '[EMAIL PROTECTED]' > Subject: Re: verisign certificate ins

overview msie problems

2000-07-28 Thread Simon Weijgers
Hello, I was wondering if someone has an oveview of all msie problems and workarounds? Regards, Simon Weijgers __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List

[BugDB] compiling mod_ssl without EAPI (PR#435)

2000-07-28 Thread modssl-bugdb
Full_Name: Dimulka Version: 0.9.5a OS: Solaris Submission from: (NULL) (193.232.88.16) Hi all! I need to compile apache with mod_ssl with plain API but after configurin' mod_ssl EAPI is enabled even if I use '--disable-rule=EAPI' option. And after runnin' apache I have got an error message like

RE: MSIE *Again*

2000-07-28 Thread Wallace, William
Sorry Robert, I don't have any explaination. I discovered the same problem mid-June and have only just got around to investigating it. I've done the same SSL log analysis as you and a packet trace as well. At the packet level what happens is as soon as the handshake completes IE closes the conne

Re: : apache+modssl+... got SEGVs

2000-07-28 Thread Magnus Stenman
On Fri, Jul 28, 2000 at 02:07:51AM -0700, David Rees wrote: > On Wed, Jul 26, 2000 at 11:17:14AM +0200, Hugues Pisapia wrote: > > > And sometimes (well, more often with MSIE than with Mozilla :), apache gets > > Segmentation faults. It seems that it comes from openssl or modssl as i tried > > ma

Re: : apache+modssl+... got SEGVs

2000-07-28 Thread David Rees
> > No one has had good luck when using RPMs to install mod_ssl. I'm afraid that > > recompiling Apache from scratch is the way to go. > > What's the problem with the RPMs? > > I roll them, and if you got a RPM specific porblem, > I'll be happy to look at it. Maybe if everyone used the RPMs yo

Frames & Javascript -> insecure?

2000-07-28 Thread Lee Feigenbaum
Hi Everyone, I've searched the archives and FAQ for the answer to this, to no avail. I have a page on my site that has one frameset with two frames, one of which is a frameset with two more frames (yah, i know, frames are evil yadda yadda). The outermost frameset is called with a secure URL, a

Re: Frames & Javascript -> insecure?

2000-07-28 Thread Cliff Woolley
>>> [EMAIL PROTECTED] 07/28/00 12:12PM The outermost frameset is called with a secure URL, and all of the >src="..."> tags use only relative URIs. Nevertheless, when viewed on IE>the page gives the warning "this page contains both secure and insecure>elements" - it's not an IE specific b

Re: Frames & Javascript -> insecure?

2000-07-28 Thread Lee Feigenbaum
I did check everything, and everything is being served via HTTPS (everything is specified relative to the main frameset pages, which are all https). In fact, Netscape lists the individual images as being secure, but all of the .html components of the page are listed as 'Status unknown'. Thanks fo

Re: Frames & Javascript -> insecure?

2000-07-28 Thread Doug Poulin
There are 2 things you can do. 1. Go into the Internet Browser properties (advanced) Remove the check box on "Warn if changing between secure and not secure mode. 2. We also had to change all of our URI's to use full pathnames including the https... This was especially the case with forms and

Re: : : apache+modssl+... got SEGVs

2000-07-28 Thread Magnus Stenman
On Fri, Jul 28, 2000 at 09:03:57AM -0700, David Rees wrote: > > > No one has had good luck when using RPMs to install mod_ssl. I'm afraid that > > > recompiling Apache from scratch is the way to go. > > > > What's the problem with the RPMs? > > > > I roll them, and if you got a RPM specific por

URG: I've replaced the cert, and I broke it!

2000-07-28 Thread Mark Drummond
Ack! Cert has expired so we got a new one from Verisign. I figured I was just replacing the old one (just did the same, successfully, on another server elsewhere) but I must have screwed something up because when I try to start the server up with the new cert i get: 24381:error:0906406D:PEM routi

Re: URG: I've replaced the cert, and I broke it!

2000-07-28 Thread Mark Drummond
Mark Drummond wrote: > > Ack! Cert has expired so we got a new one from Verisign. I figured I was > just replacing the old one (just did the same, successfully, on another > server elsewhere) but I must have screwed something up because when I > try to start the server up with the new cert i get:

Re: URG: I've replaced the cert, and I broke it!

2000-07-28 Thread Mark Drummond
Mark Drummond wrote: > Hello? __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PR

Re: URG: I've replaced the cert, and I broke it!

2000-07-28 Thread Mark Drummond
Mark Drummond wrote: > > Ack! Cert has expired so we got a new one from Verisign. I figured I was Forget it. I managed to figure it out myself. I needed to "ssleay rsa < pem > key" my key file. Um, what exactly does that do? __