confused about ca signing.

2001-02-22 Thread tc lewis
hi. i'm using apache 1.3.17 with modssl 2.8.0-1.3.17 and openssl 0.9.6 on linux. i'm having a problem using 2 apache servers serving 2 ssl areas with certificates signed by the same self-made ca. in each's config i have: sslcertificatefile /web/corp/conf/ssl/server.crt sslcertificatekeyfile

RE: confused about ca signing.

2001-02-22 Thread David Rees
Are you using Netscape? Did you check the FAQ? http://www.modssl.org/docs/2.6/ssl_faq.html#ToC49 -Dave -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of tc lewis Sent: Wednesday, February 21, 2001 6:52 PM To: [EMAIL PROTECTED] Subject: Re:

RE: confused about ca signing.

2001-02-22 Thread tc lewis
so if i have 2 sites under the same second-level domain name, i can't switch back and forth between them in netscape without clearing the cert each time? that kind of sucks. -tcl. On Wed, 21 Feb 2001, David Rees wrote: Are you using Netscape? Did you check the FAQ?

crash: Apache+mod_ssl+open_ssl+php4

2001-02-22 Thread Michael Schmidt
I am using Apache 1.3.17 with mod_ssl and Open_ssl 0.9.6. I am creating my Webpages with Php 4.0.4. Problem is now, that sometimes, apache creates a runtime error. This happens only then i use php with ssl. Php without ssl runs normaly, so do ssl with php. anyone have an idea what could be the

RE: crash: Apache+mod_ssl+open_ssl+php4

2001-02-22 Thread Chong, Arthur
Would be very interested to know what you find out. We have the same environment installed - just last night in fact! Please share your findings with the group. Thanks! -Original Message- From: Michael Schmidt [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 22, 2001 9:19 AM To:

RE: crash: Apache+mod_ssl+open_ssl+php4

2001-02-22 Thread Earl Brannigan
Hi, Sorry your mail is not very clear, Could you supply more info regarding the error (any output from your logs would be of value) as well as any relevant lines from your config files. best regards Earl Brannigan On 22 February 2001 15:19, Michael Schmidt [SMTP:[EMAIL PROTECTED]] wrote: I am

Re: crash: Apache+mod_ssl+open_ssl+php4

2001-02-22 Thread Owen Boyle
Michael Schmidt wrote: I am using Apache 1.3.17 with mod_ssl and Open_ssl 0.9.6. I am creating my Webpages with Php 4.0.4. Problem is now, that sometimes, apache creates a runtime error. This happens only then i use php with ssl. Php without ssl runs normaly, so do ssl with php. Could

RE: confused about ca signing.

2001-02-22 Thread David Rees
If restarting Netscape doesn't help, then yes, you can't do it. It's a bug in Netscape. -Dave -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of tc lewis Sent: Wednesday, February 21, 2001 7:02 PM To: [EMAIL PROTECTED] Subject: RE: confused about ca

Troubles with IE

2001-02-22 Thread Alexander Burke
Hi, folks. As a newbie to the list, I'm having some issues with IE (and occasionally Netscape) clients accessing a server, and I hope someone has dealt with the same thing. Essentially, older versions of IE usually (but not always) freak out with "An error occurred in the secure channel

How to configure IP datagram forwarding on AIX

2001-02-22 Thread meiqing zhang
Hello Does anyone know How to configure IP datagram forwarding on AIX machine (RS6000), It looks like my machine can not route IP datagram from one network card to anopther network card. I used SMIT tool and find no field related IP datagram for me to check. I also do not know which command to

RE: Troubles with IE

2001-02-22 Thread David Rees
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Alexander Burke snip Also, I scrubbed the mod_ssl FAQ and found this gem, which seemed to pinpoint the issue to a tee: http://www.modssl.org/docs/2.3/ssl_faq.html#io-ie I reconfigured Apache as

Re: How to configure IP datagram forwarding on AIX

2001-02-22 Thread Jens-Uwe Mager
On Thu, Feb 22, 2001 at 02:36:59PM +0600, meiqing zhang wrote: Does anyone know How to configure IP datagram forwarding on AIX machine (RS6000), It looks like my machine can not route IP datagram from one network card to anopther network card. I used SMIT tool and find no field related IP

Re: How to configure IP datagram forwarding on AIX

2001-02-22 Thread James Ford
On Thu, 22 Feb 2001, meiqing zhang wrote: Does anyone know How to configure IP datagram forwarding on AIX machine (RS6000), It looks like my machine can not route IP datagram from one network card to anopther network card. I used SMIT tool and find no field related IP datagram for me to check.

Re: How to configure IP datagram forwarding on AIX

2001-02-22 Thread meiqing zhang
Thanks Jens-Uwe It works meiqng - Original Message - From: "Jens-Uwe Mager" [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, February 23, 2001 3:23 AM Subject: Re: How to configure IP datagram forwarding on AIX On Thu, Feb 22, 2001 at 02:36:59PM +0600, meiqing zhang wrote:

RE: Solved: Intermittent Data Encryption Error on IE or Network IOError on Netscape

2001-02-22 Thread David Rees
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Mark Morrill Sent: Thursday, February 22, 2001 5:41 PM I revisited the FAQ and re-reread the list archives. I tried a few things. A few things from the FAQ actually made things worse! :) Can you

RE: Solved: Intermittent Data Encryption Error on IE or Network IOError on Netscape

2001-02-22 Thread Alexander Burke
At 05:50 PM -0800 Thursday 02/22/2001, you wrote: # The important part of this is the !EXPORT56. 56-bit versions # of MSIE won't connect at all with this. SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL This is what the FAQ recommends. So this will lock out all

RE: Solved: Intermittent Data Encryption Error on IE or Network IOError on Netscape

2001-02-22 Thread David Rees
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Alexander Burke Sent: Thursday, February 22, 2001 6:23 PM To: [EMAIL PROTECTED] Subject: RE: Solved: Intermittent "Data Encryption Error" on IE or "Network IOError" on Netscape Blast! That Ctrl-E

Stupid questions

2001-02-22 Thread Alexander Burke
A few observations: At http://www.modssl.org/docs/2.7/ssl_faq.html#io-ie, the use of !EXPORT56 is suggested to pacify IE. However, at http://www.modssl.org/docs/2.7/ssl_reference.html#ToC9, EXPORT56 is not listed, but EXP56 is. The output of: openssl ciphers -v

RE: Stupid questions

2001-02-22 Thread David Rees
A few observations: At http://www.modssl.org/docs/2.7/ssl_faq.html#io-ie, the use of !EXPORT56 is suggested to pacify IE. However, at http://www.modssl.org/docs/2.7/ssl_reference.html#ToC9, EXPORT56 is not listed, but EXP56 is. The output of: openssl ciphers -v

RE: Stupid questions

2001-02-22 Thread Alexander Burke
At 07:05 PM -0800 Thursday 02/22/2001, you wrote: I'm not sure where EXP56 came from (or EXP40 for that matter), but as you checked, it doesn't work. You need EXPORT56. [ 8 ] Hopefully Ralf will fix this descrepancy in the docs. Okay, so it wasn't just me! :) This begs several questions:

Re: Stupid questions

2001-02-22 Thread Mark Morrill
Thanks Alexander and David for this discussion! I figured that EXP56 and EXPORT56 were interchangeable... I'm going to revisit my tests tomorrow. I'll also better document my report back to the list :) Mark __ Apache

crypto board experiences

2001-02-22 Thread Marko Asplund
i'm interested in using crypto accelerator cards with mod_ssl. mod_ssl seems to support crypto devices using the OpenSSL v0.9.6 engine feature. is the accelerator card support in mod_ssl/OpenSSL ready for production use? which cards are known to work well with mod_ssl? could someone post some

Solved: Intermittent Data Encryption Error on IE or Network IOError on Netscape

2001-02-22 Thread Mark Morrill
I revisited the FAQ and re-reread the list archives. I tried a few things. A few things from the FAQ actually made things worse! :) But the one incantation that seemed to work was to add the following line to apache.conf: SSLProtocol all -SSLv3 Thanks all for your help! Mark on