Re: [BugDB] modssl ostensibly not working... (PR#561)

2001-05-16 Thread Owen Boyle
[EMAIL PROTECTED] wrote: NameVirtualHost 213.144.223.111:443 Don't know about the rest of your stuff but this is a no-no... You can't run name-based virtual-hosts under SSL. http://www.modssl.org/docs/2.8/ssl_faq.html#ToC47 http://marc.theaimsgroup.com/?l=apache-modsslm=98559369910170w=2

Re: [BugDB] ssl_engine_mutex compile problems (PR#564)

2001-05-16 Thread Owen Boyle
[EMAIL PROTECTED] wrote: Full_Name: Marcel Erkens Version: 2.8.2 OS: Linux 2.2.7 Submission from: (NULL) (209.180.107.60) Trying to build Apache 1.3.19 with mod_ssl 2.8.2, php4.0.4pl1, mod_perl 1.25 and mod_auth_mysql 2.20 and I'm about ready to teach that box how to fly! First it

Re: modssl freezes on startup

2001-05-16 Thread Owen Boyle
Chris M wrote: First of all, reply to the list, not to me personally. When there is new information in a post this is likely to be valuable, when not, posting to the list (as right here in this instance) is just noise. Stop whining. The accepted convention is that all communication

RE: IE and javascript

2001-05-16 Thread John . Airey
-Original Message- From: Götz Babin-Ebell [mailto:[EMAIL PROTECTED]] Sent: 10 May 2001 09:16 To: [EMAIL PROTECTED] Subject: Re: IE and javascript David Powers wrote: My SSL server has a page with frames on it and it makes use of javascript to change both frames from a

Re: modssl freezes on startup

2001-05-16 Thread Rich Salz
Sorry, no time to respond in detail for a day or two, this'll have to do. If you have your system misconfigured so that security credentials are unavailable, that is a security issue, not a configuration issue. A principal tenant of security is: if something's broke, stop. NEVER silently

Re: modssl freezes on startup

2001-05-16 Thread John Ott
Chris M wrote: If there is a cogent reason for killing 100 sites when 1 is configured wrong, I'm listening to what it might be. Chris Seems silly to have 100 production web sites hung up by a wrong or untested config. Ever think to test it separately first? begin:vcard n:Ott;John

Re: modssl freezes on startup

2001-05-16 Thread Mads Toftum
On Wed, May 16, 2001 at 10:42:34AM -0600, Chris M wrote: [SNIP] Your first post said to check file names and paths. Gawd, if I hadn't checked that and read the FAQ first (AND STFW too) I think I'd be pretty embarrassed. You wouldn't be the first to ask a question without having read docs

Re: modssl freezes on startup

2001-05-16 Thread Chris M
Chris M wrote: If there is a cogent reason for killing 100 sites when 1 is configured wrong, I'm listening to what it might be. Chris Seems silly to have 100 production web sites hung up by a wrong or untested config. Ever think to test it separately first? Yeah I did, and

Re: modssl freezes on startup

2001-05-16 Thread Chris M
Sorry, no time to respond in detail for a day or two, this'll have to do. If you have your system misconfigured so that security credentials are unavailable, that is a security issue, not a configuration issue. A principal tenant of security is: if something's broke, stop. NEVER

Re: modssl freezes on startup

2001-05-16 Thread Chris M
BTW, thanks to all for all the great comments on this thread. Chris __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List

Re: modssl freezes on startup

2001-05-16 Thread Chris M
snip Thanks for your response. A curious architectural choice to say the least that I must not understand the reasoning behind. It is the standard choice for Apache to abort the startup on configuration errors and IMNSHO the right way to do it. If there is a problem in your httpd.conf,

Re: modssl freezes on startup

2001-05-16 Thread Mads Toftum
I think we should just end this discussion here concluding that Apache has one way of handling its configuration processing and the point and click world has a different way. A look at http://www.netcraft.com/survey/ should be enough to suggest that the Apache way can't be a major problem ...

Re: modssl freezes on startup

2001-05-16 Thread Chris M
I think we should just end this discussion here concluding that Apache has one way of handling its configuration processing and the point and click world has a different way. A look at http://www.netcraft.com/survey/ should be enough to suggest that the Apache way can't be a major problem

Re: R: Cert signed by own CA and IE

2001-05-16 Thread Arcady Genkin
Andrea Cerrito [EMAIL PROTECTED] writes: Connecting to a secure site with a certificate signed by own CA, IE seems to provide no obvious way of permanently adding the cert to the browser's configuration. As a result, a warning that The security certificate is issued by a company

SSLCertificateChain file for Intermediate CA

2001-05-16 Thread Damon Maria
I'm using a Verisign Global ID and therefore need to configure modssl to serve up the Intermediate CA. I've followed the various instructions I've found for this but with no success. I downloaded the Intermediate CA and saved it under intermediate_ca.crt (I've listed it at the bottom of this

RE: SSLCertificateChain file for Intermediate CA

2001-05-16 Thread Juha Saarinen
Gidday Damon, Seems to work OK... https://www.motorweb.co.nz loads fine, and if I look at the cert, I see: Issued to: www.motorweb.co.nz Issued by: www.verisign.com/CPS Incorp.by Ref. LIABILITY LTD.(c)97 VeriSign [sic] Valid from: 05/02/01 to 06/02/02 Cert serial is: 74EB B7E7 DB06 D3A7

Re: SSLCertificateChain file for Intermediate CA

2001-05-16 Thread Damon Maria
Seems to work OK... Did you use IE? That seems to work fine (I guess it comes with the Intermediate CA), Netscape and Opera both barf on it tho'. https://www.motorweb.co.nz loads fine, and if I look at the cert, I see: Issued to: www.motorweb.co.nz Issued by: www.verisign.com/CPS

RE: SSLCertificateChain file for Intermediate CA

2001-05-16 Thread Juha Saarinen
:: Did you use IE? That seems to work fine (I guess it comes with the :: Intermediate CA), Netscape and Opera both barf on it tho'. Yes, IE 5.5; Konqueror 2.1.1 works too. :: Wait until you try it in NS first :) Nutscrape 4.76 says it does not recognize the authority who [sic] signed its [sic]