DIFFIE-HELLMAN

2000-09-25 Thread Harald Langaker
Hope this is not to off-topic. Has anyone experience with using DH-keyexchange-algorithm? Is it possible to configure Apache-mod-SSL to use DH-keys that have been generated in advance? Can pre-genrated DH_keys be stored in a directory so that Apache-mod-SSL can get them and use them while doing th

Apache can not read certificate ?

2000-09-25 Thread Christian Muenscher
Hi, Modssls ! We have a Linux - Server (SUSE 7) running Apache 1.3.12 and ModSSL / OpenSSL. The certificate I myself created using OpenSSL does work without any problems. But the certificate our in-house CA created does not work, Apache dumps out. When taking a closer look on both certificates o

Making certificates for 3DES

2000-09-25 Thread maistaff
As RC4 is vulnerable to known plaintext attack (which is a problem with webpages having known headers - hence making finding the key, 40 bit or 128 bit, not difficult) I would like to set the defaults for Apache+mod_ssl and the certificates for a VPN to use 3DES (which is not so easily broken).

Help

2000-09-25 Thread yjhzjx
How to do create SSL client certificates signed by your own CA certificate ca.crt? Thank yjh --- 163µç×ÓÓʾ֣¬¸øÄú¸üÍêÃÀEmail·þÎñ£¡ http://www.163.net __ Apache Interface to OpenSSL

Re: IE question

2000-09-25 Thread Hans Lohmander
Hi, do you use your own cert or have you a commercial? If you created it yourself MSIE for mac will complain. This is the case for both 4.5 and 5.5. /Hans Blaise Camp wrote: > > Hi, folks. I have a site that's running apache 1.3.12 and mod_ssl > 2.6.5-1.3.12. IE (I suspect v5.x) users on Macs

allow access to https area without certificate

2000-09-25 Thread Rickard Svorén
Hi I am working on a www-project for a customer, my role is to configure the apache-wwwserver. The problem is; they want to have https secured pages that users can access without getting certificates to their webbrowser or other warnings that IE or netscape show. Anyone knows howto do that? -Mv

Re: allow access to https area without certificate

2000-09-25 Thread James Treworgy
You can't have a secured area without a certificate. This is the entire principle of the system depends on a certificate from the server. It's like trying to find a way to keep your door locked without carrying keys around. You need to either buy a cert from a trusted issuing authority, or g

Re: Apache can not read certificate ?

2000-09-25 Thread Mads Toftum
On Fri, Sep 22, 2000 at 11:51:38AM +0200, Christian Muenscher wrote: > > So I would be very happy if somebody could tell me a way to convert this > certificate so that Apache can use it... out CA says they are not able to > create any other formats, and different certs they created for other > co

Re: Making certificates for 3DES

2000-09-25 Thread Mads Toftum
On Fri, Sep 22, 2000 at 08:12:37PM -0500, maistaff wrote: > As RC4 is vulnerable to known plaintext attack (which is a problem with webpages > having known headers - hence making finding the key, 40 bit or 128 bit, not > difficult) Uhm - where did you get that idea? Link? > I would like to set