Apache-SSL Configuration

2000-08-30 Thread Wan Kai Yin
Hi, we are using Apache + openssl + mod_ssl and i have installed all of stuff but i dont know how to activated it if i have webpages wanted to run under ssl. i know that i should place pages in htdocs if such pages don't run ssl. pls help me. Regards, kaiyin

Re: Problem : Step Up under WIN32 with SGC Certificates doesn't work

2000-08-30 Thread Richard . Scholz
Howdy I found a solution to my problem. There is a bug in the recvwithtimeout function that came with Apache (buff.c), and which was used for SSL_recvwithtimeout. In short: the select() in WIN32 has a bug. There is a workaround which is already contained in sendwithtimeout. Applying this also

Continuing issues with MultiCert Requests

2000-08-30 Thread Dr. David J. Knowles
Hi, A little while ago I ran into a problem where an apache/modssl system was configured to verify incoming client certificates. The verification worked fine, however the web server appeared to require the certificate to be represented for every HTTP GET, this included not only the html page but

./configure --with-apxs=/usr/sbin/apxs

2000-08-30 Thread Paul Ingendorf
When running the configure with apxs command on mandrake 7.1 helium with apache 1.3.12 already installed from rpm I recieved the following message. Configuring mod_ssl/2.6.6 for Apache/1.3.12 ./configure:Error: The mod_ssl/2.6.6 can be used for Apache/1.3.12 only. ./configure:Error: Your Apache

Re: ques re pass phrase

2000-08-30 Thread Remi Cohen-Scali
tk dev a écrit : hi all according the mod_ssl user guide, if i use "sslpass phrasedialog exec:/xx/xx/xx ", i need to have an external program. unfortunately i can't find pp-filter (in chap 3-sslpassphrasedialog) in my system. can anyone please tell me where i can get a sample program

Re: Continuing issues with MultiCert Requests

2000-08-30 Thread Mads Toftum
On Tue, Aug 29, 2000 at 09:34:58AM +1200, Dr. David J. Knowles wrote: Hi, A little while ago I ran into a problem where an apache/modssl system was configured to verify incoming client certificates. The verification worked fine, however the web server appeared to require the certificate to

Re: Apache-SSL Configuration

2000-08-30 Thread tk dev
hi kai yin, we are using Apache + openssl + mod_ssl and i have installed all of stuff but i dont know how to activated it if i have webpages wanted to run under ssl. i know that i should place pages in htdocs if such pages don't run ssl. don't know what u meant by activating, do u

french crypto

2000-08-30 Thread Florin Andrei
This is kinda off-topic, but maybe not... I'll have a https website in Paris very soon. I know there are some problems with the law in France, regarding crypto software. So, what i wanna know is what key length should i choose, 40 bit or 128 bit? French people usually

Re: french crypto

2000-08-30 Thread Florin Andrei
Daniel Montalibet wrote: However note that most of the browsers used by french people are still 40 bits browsers due to earlier restrictions. I see. So, i'll have to use 40 bit key in order to allow everyone in France to access my site, right? I guess the big https-enabled

RE: french crypto

2000-08-30 Thread Airey, John
I think you misunderstand the answer. You can use a 128bit key on your server, but the end users will probably be connecting using a 40bit browser. So they won't be getting the maximum level of encryption available. - John Airey Internet Systems Support Officer, ITCSD, Royal National Institute

RE: french crypto

2000-08-30 Thread Daniel Montalibet
We have tested it out here at Lucent (I haven't myself so I can only say what happend, not why). Installing a 128bits certificate on the web server, and using 40bits french Netscape (v 4.5 or 4.6) on NT4 to access it : computer crash ! As I've said, I only share my experience, so maybe

Re: french crypto

2000-08-30 Thread Marc van Leeuwen
We have tested it out here at Lucent (I haven't myself so I can only say what happend, not why). Installing a 128bits certificate on the web server, and using 40bits french Netscape (v 4.5 or 4.6) on NT4 to access it : computer crash ! As I've said, I only share my experience, so

How can I secure private keys?

2000-08-30 Thread [EMAIL PROTECTED]
Does anyone have any information about how to secure the private keys for my websites? If someone manages to hack my webserver, I don't want them to be able to access my private keys. I would like to store the private keys on a separate high-security system and have mod_ssl read them via a

Re: french crypto

2000-08-30 Thread Mads Toftum
On Wed, Aug 30, 2000 at 05:48:00PM +0300, Florin Andrei wrote: I see. So, i'll have to use 40 bit key in order to allow everyone in France to access my site, right? Wrong - the webserver will figure out how to downgrade. There is no one using 40 certificates anywhere. Basically when

Re: Port number to choose

2000-08-30 Thread Owen Boyle
Mark Lo wrote: I have read the mailing list achive about name base virtual host with SSL enabled. As from my understanding, we can use the same IP address with different Port Number for different domain name (for secure web server). Now, I have come up a question. Can anyone tell

RE: installation of mod_ssl on windows2000

2000-08-30 Thread Susmitha Vuyyuru
Hi David, I had similar problems with Win2000. I tried many configurations but nothing works. I guess there must be a special problem with Win2000 and Apache. If you find a solution in the future, please let me know. Susmitha. -Original Message- From: [EMAIL PROTECTED]

Re: Port number to choose

2000-08-30 Thread Iain Brown
MT Almost any port will do - you just have to make sure that nothing else MT is on that port already - and that the port number is not above ~64000 MT Just remember that your url's will have to look something like: MT https://www.example.com:12345/ MT where 12345 is the port number. But (of

Re: How can I secure private keys?

2000-08-30 Thread [EMAIL PROTECTED]
I agree, NFS would be a bad idea. I could probably burn the keys on to a CD and use that when I reboot. The rest of the time, I could store the CD in a secure location. I have also been reading about how it is relatively easy to scan through memory (assuming you have root permission) and

Re: [SLE] apache SSL

2000-08-30 Thread zentara
tk dev wrote: Hi all, previously i installed suse6.4(kernel2.2.14) with apache etc. since the bundled openssl modssl didn't really work..i reinstalled it again myself..in the prefix directory /usr/local/apache. my ques: 1.everytime i restart my server, it'll default to the

Resend(No Replay)

2000-08-30 Thread Mark Lo
Hi, I would like to know the difference between DSA or RSA certificate. and which one should I use? Thank You Mark Lo