Re: Problem with "Failed to generate temporary 512 bit RSAprivate key"

Simon, If you created the file $HOME/.rnd you don't need the entropy daemon, you can disable it. Change SSLRandomSeed back to the default settings SSLRandomSeed startup builtin AND SSLRandomSeed connect builtin. I assume that when you created the .rnd file that you were successful in ge

Re: Problem with "Failed to generate temporary 512 bit RSAprivate key"

On Mon, Jul 31, 2000 at 01:01:08PM +0900, Simon Dubey wrote: > - change SSLRandomSeed in httpd.conf to SSLRandomSeed startup > file:/etc/entropy 512 and SSLRandomSeed connect file:/etc/entropy 512 > - cursed alot /etc/entropy is not a plain file but a socket accross which mod_ssl and EGD will com

Re: Problem with "Failed to generate temporary 512 bit RSAprivate key"

> /etc/entropy is not a plain file but a socket accross which mod_ssl and > EGD will communicate, so you have to instruct mod_ssl to use the egd interface. > SSLRandomSeed startup egd:/etc/entropy > ... > > Best regards, > Lutz Using mod_ssl-2.4.10-1.3.9 and openssl-0.9.5a gives the foll

Re: Problem with "Failed to generate temporary 512 bit RSAprivate key"

On Mon, Jul 31, 2000 at 04:46:55PM +0900, Simon Dubey wrote: > > /etc/entropy is not a plain file but a socket accross which mod_ssl and > > EGD will communicate, so you have to instruct mod_ssl to use the egd interface. > > SSLRandomSeed startup egd:/etc/entropy > > ... > > > > Best regards, >

Re: Problem with "Failed to generate temporary 512 bit RSAprivatekey"

[EMAIL PROTECTED] wrote: > Simon, > If you created the file $HOME/.rnd Check > you don't need the entropy daemon, > you can disable it. Check > Change SSLRandomSeed back to the default settings > SSLRandomSeed startup builtin AND SSLRandomSeed connect builtin. Check > > I assume

Re: : : apache+modssl+... got SEGVs

Hi! Thanks a lot everybody! I did not think my question would raise such an issue :) Indeed, i resolved my problem finding something strange : I made a backtrace and i found that : | Current directory is /usr/sbin/ | GNU gdb 19991004 | [snip] | This GDB was configured as "i386-redhat-linux"...

Still MSIE

Hi! I've seen in the mailing list archive that turning SSLProtocols to SSLv2 resolved the problem with IE. But, SSLv2 is known to be weak, isn't it? So does it exist a finer tunning to use SSLv3 with IE? Best Regards. -- ( )- Hugues Pisapia -( ) /~\

Re: Frames & Javascript -> insecure?

--- Lee Feigenbaum <[EMAIL PROTECTED]> wrote: > the page gives the warning > "this page contains both secure and insecure elements" This will happen if ANYTHING is accessed by a nonsecure protocol, even so much as a single banner from another site. You did say all links were relative, though..

RE: Still MSIE

Please refer to the FAQ: http://www.modssl.org/docs/2.6/ssl_faq.html#ToC48 In short, adding the lines: SetEnvIf User-Agent ".*MSIE.*" \ nokeepalive ssl-unclean-shutdown \ downgrade-1.0 force-response-1.0 SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP

prebuilt for Solaris 8

Can anyone point me to a prebuilt binary distribution of Apache and modssl for Solaris 8/sparc? Kirk Benson __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List

Re: prebuilt for Solaris 8

On Mon, Jul 31, 2000 at 05:01:48PM -0400, Kirk Benson wrote: > Can anyone point me to a prebuilt binary distribution of Apache and modssl > for Solaris 8/sparc? > There's been a couple of reports on the openssl lists that openssl doesn't build on Solaris 8. I'm just doing some final testing on m

RE: prebuilt for Solaris 8

Thanks for the info on openssl (I'm not subscribed on that list). I'm working on a "clean" machine, and we can reinstall Solaris 7 on it w/o any problem. So now the question is: Can anyone point me to a prebuilt binary distribution of Apache and modssl for Solaris 7/sparc? OTOH, I've downloade

Re: prebuilt for Solaris 8

On Mon, Jul 31, 2000 at 05:31:40PM -0400, Kirk Benson wrote: > Can anyone point me to a prebuilt binary distribution of Apache > and modssl for Solaris 7/sparc? I'll have one next week - if that isn't too late for you (I've actually already got a 2.6.4 package, but it has some nonstandard file lo

Re: Problem with "Failed to generate temporary 512 bit RSAprivate key"

Lutz Jaenicke wrote: > On Mon, Jul 31, 2000 at 04:46:55PM +0900, Simon Dubey wrote: > > > /etc/entropy is not a plain file but a socket accross which mod_ssl and > > > EGD will communicate, so you have to instruct mod_ssl to use the egd interface. > > > SSLRandomSeed startup egd:/etc/entropy > >

SSL protection on different directory

 Hi,       How to configure the mod_ssl so that it can allow some of the directories to be SSL protected? I have tried configuring SSLRequireSSL and SSLRequire but failed. I ran the HTTP as well as HTTPS on one apache server.       The situation is that there is a admin module in our system

Re: Strange mod_ssl core dump

On Mon, Jul 24, 2000 at 09:12:20PM +0200, Martin Kraemer wrote: > Is there a known bug in Apache-1.3.12 + mod_ssl-2.6.4 which can cause a > core dump when accessing a typical page like https://servername/ Thanks for the tip. No, it's not Solaris, it's a mainframe OS (BS2000). The actual cause for

Re: prebuilt for Solaris 8

> There's been a couple of reports on the openssl lists that openssl doesn't > build on Solaris 8. I'm just doing some final testing on my Solaris 7 > packages which will be finished Real Soon Now(tm) (next week) - and unless > the package system has changed too much, then it would be fairly e

Re: prebuilt for Solaris 8

I successfully built on Solaris 8. Sorry, I do not know of a prebuilt binary. It was really quit easy to build myself though. Downloaded gcc from the sunfreeware.com site. Then: install rsaref cd openssl-0_9_5a (or to your openssl home dir) cp /rsaref home dir/source/rsaref.a librsaref.a