Re: Anyone have any comments on SSL Accelerators?

2000-09-20 Thread steve.latif
I'd be interested in hearing your comments and anyone elses for that matter. I'm currently evaluating nCipher and Rainbows Cryptoswift steve > "Austin" == Austin Gonyou <[EMAIL PROTECTED]> writes: Austin> Dan, This is a specific project I'm currently working Austin> on. Talk to me

Re: Anyone have any comments on SSL Accelerators?

2000-09-20 Thread Austin Gonyou
Dan, This is a specific project I'm currently working on. Talk to me and I'll try and answer what I can. I'm currently evaluating, F5 Big IP, Ncipher, and the Intel 7110. Austin >> Original Message << On 9/20/00, 12:31:38 PM, Dan Browning <[EMAIL PROTECTED]>

Re: Anyone have any comments on SSL Accelerators?

2000-09-20 Thread [EMAIL PROTECTED]
Take look at this paper by Mark Cox (one of the primary Apache developers): High Scalability for SSL and Apache http://www.awe.com/mark/ora2000/ He looked at several accelerators and wasn't too impressed with what you actually get for your money. Jeff At 10:31 AM 9/20/00 -0700, you wrote: I'm

Anyone have any comments on SSL Accelerators?

2000-09-20 Thread Dan Browning
I'm thinking about getting an SSL Accelerator. Intel has one that intercepts packets in-between your web server(s) and net connection. Then it does the encryption/decryption required and passes the traffic along to the web server(s). It's called the NetStructure(TM) 7110 e-Commerce Accelerator a

Re: Failed to create CSR, unable to load config info

2000-09-20 Thread Mads Toftum
On Wed, Sep 20, 2000 at 01:04:28PM -0400, Kirk Benson wrote: > Look at your environment variables: variable OPENSSL_CONF will contain the > path to this file. I presume that the H: drive is a relic of your install > process. I have attached a standard version of openssl.cnf > You can also over

RE: Failed to create CSR, unable to load config info

2000-09-20 Thread Kirk Benson
Look at your environment variables: variable OPENSSL_CONF will contain the path to this file. I presume that the H: drive is a relic of your install process. I have attached a standard version of openssl.cnf > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On

Re: Can Search Engines Index SSL-enabled Hosts?

2000-09-20 Thread Ed Kubaitis
On Tue, Sep 19, 2000, Steve Luzzi wrote: > At the risk of this being off-topic, I was wondering > if anyone knows whether the major Internet search > engines/indexers (Yahoo, Lycos, Altavista, etc.) have > the capability of indexing a site's data after it > switches from a non-SSL to an SSL-enab

Re: Working Properly

2000-09-20 Thread Clive Hughes
Mark, I know that Solaris has a powerful command-line tool called 'snoop' -Clive - Original Message - From: "Mark Lo" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, September 20, 2000 2:48 PM Subject: Re: Working Properly > Hi, > > which network monitor tools should

Re: Working Properly

2000-09-20 Thread Mark Lo
Hi, which network monitor tools should i use Thank you so much mark - Original Message - From: Ralf S. Engelschall <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, September 20, 2000 2:21 PM Subject: Re: Working Properly > On Wed, Sep 20, 2000, Mark Lo wrote: > > >

[BugDB] mod_ssl doesn't support 56 bit browsers with SGC certificates (PR#453)

2000-09-20 Thread modssl-bugdb
There is a problem with SGC key in openssl-0.9.5a mod_ssl-2.6.4-1.3.12 apache_1.3.12. Some of MSIE 5 (these with 56-bit cryptography) complain that cannot connect to server. In ssl engine log there's a request with 56 bits and that's all - no info in ssl request log. Other browsers (MSIE 5 too)

Re: Key - Cert

2000-09-20 Thread Ralf S. Engelschall
On Wed, Sep 20, 2000, Nick Davies wrote: > I'm kinda new to setting up ssl stuff (as you can guess from my > previous silly question). I just want to know about certificates and > stuff. I'm in the uk and getting certificates from BT's(grrr grr) > trustwise service. I've used openssl to

Re: Need some direction

2000-09-20 Thread Ralf S. Engelschall
On Tue, Sep 19, 2000, Joshua Skains wrote: > I am deeply sorry for asking an off topic question, but this is the only > group I am a member of at this time and need someone to send me to the right > group if possible. Yes, modssl-users is certainly not the appropriate forum for your questions. A

Re: Working Properly

2000-09-20 Thread Ralf S. Engelschall
On Wed, Sep 20, 2000, Mark Lo wrote: >How to find out that my secure web server is running properly. Request documents through URLs like https://yourserver/foo/bar, watch the SSL logfile entries to see what happens, watch the data flow with a network monitoring tool to confirm yourself that

Re: Key - Cert

2000-09-20 Thread Owen Boyle
Nick Davies wrote: > I'm kinda new to setting up ssl stuff (as you can guess from my > previous silly question). I just want to know about certificates and > stuff. I'm in the uk and getting certificates from BT's(grrr grr) > trustwise service. I've used openssl to generate a CSR and us

Re: [Feature Request] Handling attempts at SSL name based hosting

2000-09-20 Thread Ralf S. Engelschall
On Tue, Sep 19, 2000, Owen Boyle wrote: > > Is there any milage in having mod_ssl abort a start up if you try and configure > > it with name based virtual hosting ? > > The present behaviour is that it prints a warning message; "Attempt to > use Name-Based VirtualHosting with SSL" (or words to t

Key - Cert

2000-09-20 Thread Nick Davies
Hi, I'm kinda new to setting up ssl stuff (as you can guess from my previous silly question). I just want to know about certificates and stuff. I'm in the uk and getting certificates from BT's(grrr grr) trustwise service. I've used openssl to generate a CSR and used that to get a tria

Re: Can Search Engines Index SSL-enabled Hosts?

2000-09-20 Thread Ralf S. Engelschall
On Tue, Sep 19, 2000, Steve Luzzi wrote: > At the risk of this being off-topic, I was wondering > if anyone knows whether the major Internet search > engines/indexers (Yahoo, Lycos, Altavista, etc.) have > the capability of indexing a site's data after it > switches from a non-SSL to an SSL-enabl

Re: modssl EAPI with apxs error ;recompile +z

2000-09-20 Thread Ralf S. Engelschall
On Thu, Sep 14, 2000, code guru wrote: > [...] > DP relative code in file /isocor/newopenssl/openssl-0.9.5a/libssl.a(s2_srvr. > o) - shared library must be position > independent. Use +z or +Z to recompile. > *** Error exit code 1 > > have i done something wrong somewhere ... > what is the meani

Re: [BugDB] Make fails on HP-UX 11.00 (PR#452)

2000-09-20 Thread Lutz Jaenicke
On Wed, Sep 20, 2000 at 01:52:52PM +0200, [EMAIL PROTECTED] wrote: > Full_Name: Arthur Luimes > Version: 2.6.6 > OS: HP-UX 11.00 > Submission from: (NULL) (193.67.25.4) .. > /home/tss/install/ap_src_ssl/openssl-0.9.5a/libssl.a(s2_srvr.o) - share > d library must be position > independent. Use

[BugDB] Make fails on HP-UX 11.00 (PR#452)

2000-09-20 Thread modssl-bugdb
Full_Name: Arthur Luimes Version: 2.6.6 OS: HP-UX 11.00 Submission from: (NULL) (193.67.25.4) I am a newbie to Apache and SSL and am getting desperate: need some help with a problem during the make. I trying to install Apache 1.3.12 with mod_ssl 2.6.6 for Open SSL 0.9.5a. The operating system i

Re: linkage table overflow linking mod_ssl with apache 1.3.12 on HPUX11

2000-09-20 Thread code guru
Hi steffen, i am facing almost the same problems as u r, except for the fact that i am using HP UX 10.20 by the looks of it it seems that u were trying to build apache with static inclusion of mod ssl ... but i dont understand as to why u r using -fPIC option when configuring openssl especially

Re: [Feature Request] Handling attempts at SSL name based hosting

2000-09-20 Thread David Mitchell
Bill Moran <[EMAIL PROTECTED]> wrote > [EMAIL PROTECTED] wrote: > > > > Is there any milage in having mod_ssl abort a start up if you try and configure > > it with name based virtual hosting ? > > > > I don't even know if mod_ssl is able to determine this detail of > > configuration

Problem with SGC key

2000-09-20 Thread Michal_Hobot
I have a strange problem with SGC key in openssl-0.9.5a mod_ssl-2.6.4-1.3.12 apache_1.3.12. Some of MSIE 5 (not all) complain that cannot connect to server. In ssl engine log there's a request with 56 bits and that's all - no info in ssl request log. Other browsers (MSIE 5 too) works OK and in th

mod_vhost_alias

2000-09-20 Thread Cameron Brunner
how can i rig so with mod_vhost_alias with apache so that modssl knows where to get certificates for each site, or do i manually have to add every host under ssl? *note* i am not on this mailing list, please email me the replies, not just the list Cameron Brunner Director of Operations dynomyte

Can Search Engines Index SSL-enabled Hosts?

2000-09-20 Thread Steve Luzzi
At the risk of this being off-topic, I was wondering if anyone knows whether the major Internet search engines/indexers (Yahoo, Lycos, Altavista, etc.) have the capability of indexing a site's data after it switches from a non-SSL to an SSL-enabled site? TIA. Steve Luzzi USA ERDC-CERL [EMAIL PROT

modssl EAPI with apxs error ;recompile +z

2000-09-20 Thread code guru
hi all, i am facing a strange problem compiling apache + mod ssl on HP UX 10.20 openssl-0.9.5a apache-1.3.12 modssl_2.6.6 i have enabled EAPI i prepared the apache src tree using mod ssl config script as ./configure --with-apache \ --with-eapi-only Then i configures apache ./configure -

Problem with multiple certificates and builtin passphrase

2000-09-20 Thread Larry Leszczynski
Hi all - I'm trying to help someone with their Apache/mod_ssl setup on Red Hat Linux 6.2, and can't get the builtin mechanism to work to read the PEM passphrase for two private keys. Both of the private keys use the same passphrase. When I configure for one or the other of the sites individual

Failed to create CSR, unable to load config info

2000-09-20 Thread Shane Sarver
When trying to create a CSR, openssl try to look on the H: drive for openssl.cnf. There is no H: drive on my machine. Plus, I can't find a file anywhere called openssl.cnf. c:\Program Files\Apache>openssl genrsa -des3 -rand readme -out www.virtualhost.com.key 1024 Loading 'screen' into random s

Re: How to restrict a portion of web site to ONLY https?

2000-09-20 Thread rwidmer
** Reply to note from "Don Smith" <[EMAIL PROTECTED]> Thu, 14 Sep 2000 10:42:14 -0700 > > Hi all, new to this ssl thing. I am pretty familiar with regular Apache, > but this ssl stuff is greek to me, but I'm getting it slowly! :-) Tried > Apache-ssl and got it working, wasn't very easy. So, he

Re: Solution to SSL on name based virtual hosts?

2000-09-20 Thread Jeff Koch
Chris - this is an obvious plug for my employer, but Intersessions.com has no problem providing IP-based virtual hosting accounts - we even have a reseller program that will get you IP-based virtual hosts for a little as $3/month each. Regards, Jeff Chris Pomerantz wrote: > I know that it's not

Re: Apache and CGIs

2000-09-20 Thread John P. Dodge
You need to add Options +ExecCGI to the directory container where the CGI's are located. scripts are On Thu, 14 Sep 2000, Marcos Sanchez wrote: > > I finally installed Apache 1.3.12 with mod_perl and DSO, but I > have got a new problem. > > Apache doesn't execute CGIs now, it only disp

RE: How to restrict a portion of web site to ONLY https?

2000-09-20 Thread Jerrad Pierce
If my memory serves me their is a directive SSLRequireSSL that you may enlose in a Location, Directory, VirtualHost, Or Files scope... >-Original Message- >From: Don Smith [mailto:[EMAIL PROTECTED]] >Sent: Thursday, September 14, 2000 1:42 PM >To: [EMAIL PROTECTED] >Subject: How to restri

IPv6 Support - Mod_SSL

2000-09-20 Thread Shawn Starr
Hello, Does anyonw know if a mod_ssl ipv6 patch? I have been able to patch Apache to use ipv6 but there doesn't seem to be support for mod_ssl. If anyone knows, I would be greatful. Shawn Starr. __ Apache Interface to OpenSSL

Re: Working Properly

2000-09-20 Thread Owen Boyle
> Mark Lo wrote: > >How to find out that my secure web server is running properly. > You need to test it. __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List

Re: Need some direction

2000-09-20 Thread Owen Boyle
> Joshua Skains wrote: > > I am deeply sorry for asking an off topic question, but this is the > only group I am a member of at this time and need someone to send me > to the right group if possible. Have a look in http://marc.theaimsgroup.com/ and see if you find a group that seems more appropr

How can I setup this proxy

2000-09-20 Thread ApacheSSL
Sorry, I know this mailing list is about mod_ssl, but I don't know where can I put this question, would you give me some advice? Now I want to setup one apache server as proxy, the server name is proxy.mycompany.com, and I use proxypass / server.mycompany.com to setup the proxy, but I want to k