Re: [BugDB] mod_ssl + explorer + local director woes (PR#475)

2000-10-30 Thread Mark Tiramani
when connecting to a mod_ssl-enabled server with versions of internet explorer 5.00.2614.3500IC or below, going through a cisco local director, we get broken images or page-not-found errors with some frequency, on something like 1% of the connections. Although our setup is different I think

RE: DNS entry - multi IP-based vhosts

2000-10-30 Thread Kirk Benson
If you add entries for your sites in your local "hosts" file, the DNS lookup will be skipped and you can then test using the domain names. of course, for your site to be generally available, you will need to add the DNS entries as Keith stated. -Original Message- From: [EMAIL

Securing subdirectorys

2000-10-30 Thread Alexander Häussel
Title: Securing subdirectorys Hi All, maybe this question has been asked before, but i wasnt able to find a solution right now. i have a website, that i want to allow access to via regular http. but as soon as the user logs in i want the pages to be secured via ssl. my ssl works, but it is

Re: Securing subdirectorys

2000-10-30 Thread Keith Parkansky
There is a "SSLRequireSSL" directive that I was playing around with last night on an Apache server. The www.apache-ssl.org docs page has Directory /dir-to-protect SSLRequireSSL /Direcotry I tried putting this in the SSL Global section of the conf file but it did't work. I could still access

Re: Securing subdirectorys

2000-10-30 Thread Owen Boyle
Alexander Häussel wrote: i have a website, that i want to allow access to via regular http. but as soon as the user logs in i want the pages to be secured via ssl. my ssl works, but it is possible to access those pages via http or https. i want that a special subdirectory is only accessibel

Re: Securing subdirectorys

2000-10-30 Thread James Treworgy
Here's one way... Set up your roots in separete directories in httpd.conf: ./normal-root/ ./secure-root/ Make a symbolic link from ./normal-root/index.html to ./secure-root/index.html This would be the only file under normal-root, and everything is stored in secure-root but the link makes just

Re: Securing subdirectorys

2000-10-30 Thread Keith Parkansky
I just found out that putting SSLRequireSSL alone in an htaccess file, without the Directory tags, works. -- Keith Parkansky [EMAIL PROTECTED] http://www.execpc.com/~keithp http://www.goingtovegas.com http://www.squawkware.com

Re: Securing subdirectorys

2000-10-30 Thread Owen Boyle
Keith Parkansky wrote: I just found out that putting SSLRequireSSL alone in an htaccess file, without the Directory tags, works. Of course it does. That's what it tells you in the documentation (http://www.modssl.org/docs/2.6/ssl_reference.html#ToC22). You *have* read the documentation...

Re: Basic Question...Key Pair and CSR generation

2000-10-30 Thread Rick Dunetz
I am still having trouble creating a Key Pair and a CSR. OpenSSL is not responding. The program resides in the appropriate directory, but it does not respond. Any suggestions? Rick Avi Green wrote: Rick Dunetz wrote: Openssl is in the src tree under apps, but it isn't recogonized. What

Re: Securing subdirectorys

2000-10-30 Thread Keith Parkansky
Owen Boyle wrote: Of course it does. That's what it tells you in the documentation (http://www.modssl.org/docs/2.6/ssl_reference.html#ToC22). You *have* read the documentation... haven't you? No, I just mystically devined it from the Great Pumpkin that flew over my house last night.

Re: libssl.so.0 - cannot open shared object file

2000-10-30 Thread Gary Mills
Daniel Rieger writes: Syntax error on line 99 of /usr/local/apache/conf/httpd.conf: Cannot load /usr/local/apache/libexec/libssl.so into server: libssl.so.0: cannot open shared object file: No such file or directory If this is under Solaris, I just posted a workaround for this bug a couple of

Re: Basic Question...Key Pair and CSR generation

2000-10-30 Thread Owen Boyle
Rick Dunetz wrote: I am still having trouble creating a Key Pair and a CSR. OpenSSL is not responding. The program resides in the appropriate directory, but it does not respond. Any suggestions? - What does "not responding" mean? - What happens if you type "openssl version"? E.g. the

Re: Basic Question...Key Pair and CSR generation

2000-10-30 Thread Rick Dunetz
I just got to the ../openssl-0.9.6/apps directory and type in "openssl" and I get openssl not found. Rick Owen Boyle wrote: Rick Dunetz wrote: I am still having trouble creating a Key Pair and a CSR. OpenSSL is not responding. The program resides in the appropriate directory, but it

Permanent re-direct

2000-10-30 Thread John Markunas
Hello What Apache directive do I use to make http://my-server always go to https://my-server Thank You John Markunas __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org

Re: Permanent re-direct

2000-10-30 Thread Martin A. Marques
On Lun 30 Oct 2000 16:42, you wrote: Hello What Apache directive do I use to make http://my-server always go to https://my-server I'm not sure how you could prepend this to all your http files... Other wise add these lines to all your pages: SCRIPT

Re: Permanent re-direct

2000-10-30 Thread Martin Lichtin
What Apache directive do I use to make http://my-server always go to https://my-server This should work: VirtualHost _default_:80 RedirectPermanent / https://my-server/ /VirtualHost __

RE: Permanent re-direct

2000-10-30 Thread John Markunas
Hello The suggested use of VirtualHost as shown below yields the following error upon httpd(Apache) start up Invalid command 'RedirectPermanent' perhaps mis-spelled or defined by a module not included in the server configuration. What am I doing wrong ? Sincerely John Markunas

Re: Permanent re-direct

2000-10-30 Thread Martin Lichtin
Invalid command 'RedirectPermanent' perhaps mis-spelled or defined by a module not included in the server configuration. What am I doing wrong ? Do you have the "mod_alias" module? It's part of the base configuration: http://www.apache.org/docs/mod/mod_alias.html Run "httpd -l" to see what

RE: Permanent re-direct

2000-10-30 Thread Kirk Benson
RedirectPermanent is implemented by mod_alias, so you need to activate mod_alias. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of John Markunas Sent: Monday, October 30, 2000 4:15 PM To: [EMAIL PROTECTED] Subject: RE: Permanent re-direct Hello

should you start ssl as a root???

2000-10-30 Thread Susmitha Vuyyuru
Hi All, I have apache+jserv+modssl running on red hat. I start it as a root. But, I have a question about the usual convention... Is the usual convention to start webserver as a root or as a general user?? thanks, Susmitha

Re: should you start ssl as a root???

2000-10-30 Thread Paul McGarry
Susmitha Vuyyuru wrote: I have apache+jserv+modssl running on red hat. I start it as a root. But, I have a question about the usual convention... Is the usual convention to start webserver as a root or as a general user?? Yes, it is normal to start Apache as root (in fact you have to if