SSL handshake interrupted

I have seen this error reported many times in the archive, but not really solved. Is it solved? We are using mod_ssl/2.6.6 openssl 0.9.6.a Apache 1.3.19   We get this error: [Thu Apr  5 02:25:00 2001] [error] mod_ssl: SSL handshake interrupted by system[Hint: Stop button pressed in browser?!]

Mixed use of SSL/non-SSL

Hello, I have one server with 3 IP addresses and 3 VirtualHost with SSL. I would like to allow HTTP clear everywhere but not in some precise directories Is it possible. I thought I can do it with SSLRequire, but I can't manage to make it work like I want. Other question : Is it possible to chan

RE: Apache mod_ssl and openssl - I messed up

> -Original Message- > From: Aage J. Skjolingstad [mailto:[EMAIL PROTECTED]] > Sent: 06 April 2001 01:06 > To: [EMAIL PROTECTED] > Subject: Re: Apache mod_ssl and openssl - I messed up > > > Hi John, > > I removed several of the packages and forced new installation > of opensll > and

SSL request log analyser

Has anyone written an analyser for the SSL request log that comes with apache-mod_ssl? I've been asked to show when our site is having the most SSL requests, but have around 3/4 million SSL requests per month to deal with. Obviously, if anyone hasn't, I'll have to put my programming hat on again

Newbie, weird question

Hopefully someone can answer this. I'm running Oracle 9ias which comes with the apache listener. I have modified the httpd.conf file and my site is up and running. The dilema is, now I want to install a Thawte 128 bit certificate for ssl. Using the openssl genrsa command I am able to generate a ke

Forcing Session Expiration in 'apache/mod_ssl' Implementations

We are hosting several web sites to Redhat Linux/x86 platforms using the apache/mod-ssl secure web server implementation. Our problem is this, we would like to implement an explicit "logout" feature for some of our secure virtual hosts. This feature would simply be implemented as a logout button

Apache with mod_ssl / openssl

Hi-       Does anyone know where I can find the binary for the latest Apache with mod_ssl and openssl for SCO 5.0.5?       Scott Trowbridge, VPInformation Resources   mailto: [EMAIL PROTECTED]Web: www.hsmc-ul.com

FakeBasicAuth design flaw?

My problem: I need to authenticate based on certificates from multiple, unrelated CA's. Because FakeBasicAuth only maps on the subject, it won't work on it's own; a hacker could register the same subject name with a different (but still accepted CA). My first attempt to work around this was to

Re:[OT] explusion?

Thanks, Ralph. Now I don't feel so stupid, lol --- "Ralf S. Engelschall" <[EMAIL PROTECTED]> wrote: > On Thu, Apr 05, 2001, Paul wrote: > > > I have been looking at this for a while, and must be looking in the > > wrong places. From httpd.conf: > > > > # Semaphore: > > # Configure the

Re: Newbie, weird question

>The machine returns this: > >Using configuration from /usr/local/ssl/openssl.cnf >unable to load config info >Enter PEM Passphrase: > > >I have checked and I do not have a file called openssl.cnf or a >/usr/local/ssl/ folder. Jay, Been there - Done that. The file you seek is in the OpenSSL pa

RE: Newbie, weird question

thanks, I'll try the latest version and see if that helps. Jay A. Stoltenberg Mgr. Networks and PC Applications [EMAIL PROTECTED] (412)-854-5688 -Original Message- From: Deocs Postmaster [mailto:[EMAIL PROTECTED]] Sent: Friday, April 06, 2001 11:08 AM To: [EMAIL PROTECTED] Subject: Re:

RE: Newbie, weird question

Keeping in mind that I'm new to this, I went to the site and clicked on the latest tar.gz file I got a compilation error unrecognized headerstring. It downloaded to my computer, but where is the openssl.cnf file. Jay A. Stoltenberg Mgr. Networks and PC Applications [EMAIL PROTECTED] (412)-854-56

RE: Unexplained http_main.c patch

> This should be already gone with 2.8.2. > I guess you are looking at an older version, right? > Please use the latest one. Right, this is 2.8.0. I'm using it mainly because I still have Apache 1.3.17, and upgrading to 1.3.19 is a pretty awkward proposition at the moment. The mod_ssl version n

Re: SSL handshake interrupted

On Fri, Apr 06, 2001 at 05:52:44AM -0400, kreso wrote: > I have seen this error reported many times in the archive, but not really > solved. > Is it solved? > We are using > mod_ssl/2.6.6 > openssl 0.9.6.a > Apache 1.3.19 > > We get this error: > [Thu Apr 5 02:25:00 2001] [error] mod_ssl: SSL h

Re: Mixed use of SSL/non-SSL

You need to redirect them to https if they're connecting on port 80. This was discussed in detail a little while back, check the list archives. Something simple like: Redirect /securedir https://myserver/securedir Should do the trick for you. -Dave On Fri, Apr 06, 2001 at 12:27:30PM +0200,

RSA?

Title: RSA? I apologize if this is documented somewhere, but I can't make sense out of the existing docs and maillist postings that I've been reading.  Hopefully someone can set me straight, or point me in the right direction. I currently have a modified version of Apache 1.3.19 that we're lo

Re: Apache with mod_ssl / openssl

FWIW Scott: I am a UnixWare7.1.1 user. It took me awhile to learn the value of doing so, but I grew weary of SCO not keeping up to date with either Apache or Sendmail, so I have removed their distributions of each and built them from source with very little trouble. The one problem I did expe

Re: SSL handshake interrupted

we also did put all the patches suggested SetEnv and SSLCiper and SSLSessionCache... please help.. thanks... - Original Message - From: "David Rees" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, April 06, 2001 11:46 AM Subject: Re: SSL handshake interrupted > On Fri, Apr 06

Successful build with perl-5.00503-12

Hi modssl users: I've been able to build apache_1.3.19/mod_ssl-2.8.2 on a RedHat 6.2 system with the perl rpm version above. The modssl docs tell me perl 5.60 is *required*. Am I missing any functionality or likely to encounter problems staying (for now) with this older (but not so old) perl? Th

Re: SSL handshake interrupted

Thank you for your prompt reply Our connection (with MSIE) gets disconnected very often. I looked again and we are using both openssl 0.9.6.a and mod_ssl-2.8.2, question though: do we need to recompile apache with it or we can just add it dynamically? - Original Message - From: "David

Re: SSL handshake interrupted

Hello, this is the situation now: We are using: OpenSSL 0.9.6a 5 Apr 2001 mod_ssl-2.8.2-1.3.19 Apache 1.3.19 In httpd.conf we did insert the following: SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 fo rce-response-1.0 SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:

RE: SSL handshake interrupted

What versions of MSIE, and what are the exact problems you are experiencing? -Dave > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of kreso > Sent: Friday, April 06, 2001 4:40 PM > To: [EMAIL PROTECTED] > Subject: Re: SSL handshake interrupted > > >

RE: RSA?

Title: RSA? 1.  No.   2.  RSA encryption is included in OpenSSL, so it is now a Legacy reference.  If you find any references to it in current documentation, post it to the list and Ralf can remove it.   -Dave -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On

Re: SSL handshake interrupted

We are using 5.50.4134.0100 MSIE The problem is that when we access secure site, we get rejected about 20% of times. The error message is the standard browser message: This page cannot be displayed at this time... etc... Once rejected, if we re-submit the request, just a second or less after the

RE: SSL handshake interrupted

It really sounds like keepalive is turned on. Can you verify that keep alive is turned off? Disable keepalive for the entire server if need be. I'm using MSIE 5.50.4522.1800 (128bit) here, and I've never had problems connecting. -Dave > -Original Message- > From: [EMAIL PROTECTED] > [

Re: SSL handshake interrupted

this is what we have in our httpd.conf SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 fo rce-response-1.0 If for any case our server is using different versions (as I am not sure), like older Apache, older openssl and/or older mod_ssl... would this fix the problem

load problem: apache_1.3.19 + openssl-0.9.6a + mod_ssl-2.8.2

Hi from the West Coast! For quite some time I have been building this server config without any problems. Today I get "Cannot load /opt/apache/libexc/libssl.so into server: dnamic linker: /opt/apache/bin/httpd: relocation error: symbol not found: -llasgremu; referenced from: /opt/apache/libex

RE: load problem: apache_1.3.19 + openssl-0.9.6a + mod_ssl-2.8.2

What operating system is this on? The problem is that the library lasgremu (which I've never heard of) can't be found. -Dave > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of George Walsh > Sent: Friday, April 06, 2001 7:29 PM > To: [EMAIL PROTECTED

Re: Successful build with perl-5.00503-12

On Fri, Apr 06, 2001 at 11:15:16AM -0700, Tony Hunter wrote: > > I've been able to build apache_1.3.19/mod_ssl-2.8.2 on a RedHat 6.2 > system with the perl rpm version above. The modssl docs tell me > perl 5.60 is *required*. Am I missing any functionality or likely > to encounter problems stayin