Re: best way to automate startup

2001-05-24 Thread Martin Lichtin
> Can someone point me in the right direction, or have any ideas on how I can > have my Apache server start up without asking for the pass phrase? http://www.modssl.org/docs/2.8/ssl_faq.html#ToC31 __ Apache Interface to OpenSSL (

best way to automate startup

2001-05-24 Thread Belkie, Dan
Hi All! Can someone point me in the right direction, or have any ideas on how I can have my Apache server start up without asking for the pass phrase? I assume I could just not make a password when I make my cert request, but oops, too late! Can I maybe have it read the password from a file?

Re: PAM password

2001-05-24 Thread Sang Yi
it's simple to write a shell script that echo's out the password. then in your httpd.conf SSLPassPhraseDialog exec: the script can be as simple as: #!/bin/sh echo passphrase exit On Thu, 24 May 2001, Michael Avdeev wrote: > is there a way to automate the process of entering the passwor

PAM password

2001-05-24 Thread Michael Avdeev
is there a way to automate the process of entering the password when the system boots up. every time i boot the box it sits there for me to enter the password. sorry if this is a repost, i cant seem to find this anywhere. thanks, M __

floating point exception

2001-05-24 Thread Michael Grant
I am seeing the following error in my apache_error_log file: child pid 86832 exit signal Floating point exception (8) It only happens when I try to connect to my server via https, therefore I think it is related to apache-mod-ssl. The process which exits is one of the httpd processes. I'm runn

[BugDB] client authentication (PR#567)

2001-05-24 Thread modssl-bugdb
Full_Name: R.Chu Version: mod_ssl-2.7.1-1.3.14 OS: Redhat Linux 7.0 Submission from: (NULL) (61.187.56.10) I have installed mod_ssl-2.7.1-1.3.14 with apache_1.3.14 and openssl-0.9.6a successfully. Now I want to get client authentication, I modified the httpd.conf as this: SSLVerifyClient requi

[BugDB] Symbol referencing errors (PR#568)

2001-05-24 Thread modssl-bugdb
Full_Name: Gabriel Hung Version: 2.8.4-1.3.20 OS: Solaris 7 Submission from: (NULL) (128.107.248.220) After fixed alloc.c file not found by renaming it to ap_alloc.c, it seems to compile fine 'til it hit by another error as following: ranlib libssl.a <=== src/modules/ssl <=== src/modules gcc -c

CNAME question/problem

2001-05-24 Thread Robin P. Blanchard
the scenario: old webserver (www.blahblahblah.edu) had a verisign cert. our organization recently purchased www.blahblahblah.org and a corresponding thawte cert. we want to phase out www.blahblahblah.edu, entirely. i've setup mod_rewrite to rewrite www.blahblahblah.edu -> www.blahblahblah.org ; b

RE: Apache SSL MOD

2001-05-24 Thread McCaffity, Ray
Before you did the "make install" of apache, did you do a "make certificate" ?  If you did, and just left the passwd blank, you should be able to just use a null passwd.  But if you didn't do this step, or if you're doing this with precompiled binaries, I think you'll probably have to go ba

Re: SSLSessionCache broken on Solaris

2001-05-24 Thread Geoff Thorpe
On Thu, 24 May 2001, Lars Hecking wrote: > > OS: SunOS 5.8 Generic_108528-07 > Compiler: gcc 2.95.3 > Software: mm-1.1.3, openssl-0.9.6a, >apache_1.3.19 and mod_ssl-2.8.3-1.3.19, >apache_1.3.20 and mod_ssl-2.8.4-1.3.20 > > The new shmcb option in SSLSessionCache is b

[BugDB] apache crash with mod_ssl (PR#569)

2001-05-24 Thread modssl-bugdb
Full_Name: Josef Goebel Version: 2.8.4 OS: Win2k Submission from: (NULL) (62.138.8.66) We are running an application causing lots of traffic on the server including file upload. On the server side we've written two Apache modules handling incoming requests. The problem is, that Apache (1.3.20)

Apache, mod_ssl, & openssl

2001-05-24 Thread David Hansen Jr.
Ok, I's a little lost. I've got a couple VirtualHosts in apache, in different directories. I'm trying to get SSL working on one. I've added these lines to httpd.conf: DocumentRoot /var/www/domainname.com ServerName www.domainname.com SSLEngine on SSLCertificateFile /var/www/domainname.com/s

RE: SSLSessionCache broken on Solaris

2001-05-24 Thread McCaffity, Ray
It runs fine on my Solaris 8 servers. With Solaris 8, you don't need mm. In fact I'd recommend not using it. Did you edit the /etc/system file to match your shmem and shsem settings? I would also recommend removing these if you did. Are you running Sol8 in 64-bit or 32-bit? All of mine are 64

SSLSessionCache broken on Solaris

2001-05-24 Thread Lars Hecking
OS: SunOS 5.8 Generic_108528-07 Compiler: gcc 2.95.3 Software: mm-1.1.3, openssl-0.9.6a, apache_1.3.19 and mod_ssl-2.8.3-1.3.19, apache_1.3.20 and mod_ssl-2.8.4-1.3.20 The new shmcb option in SSLSessionCache is broken, at least on my platform. More or less all httpd's

[BugDB] handshake problem by pocket IE thru SSLv3 (PR#570)

2001-05-24 Thread modssl-bugdb
Full_Name: Adrian Mak Version: 2.8.1 OS: RH 7.0 Submission from: (NULL) (152.101.109.228) this is the linux config RH 7.0 openssl 0.9.6 mod_ssl 2.8.1 apache 1.3.19 I found that there is a handshake time-out problem by IPaq H3630 pocket PC, IE using SSLv3 I have to disable SSLv3 so that pocket

RE: The input information is invalid when installing client cert in I E 5.0

2001-05-24 Thread Robert Buckley
Thank you very much Ray, You hit the answer on the head. 1/2 my clients that worked, were at 128 bit cypher strength, and all the clients that do not work, are all at 40 bit cypher strength. Thank you for your time and help, Robert -Original Message- From: McCaffity, Ray [mailto:[EMAIL

RE: The input information is invalid when installing client cert in I E 5.0

2001-05-24 Thread McCaffity, Ray
I have seen this when I didn't have the 128-bit encryption pack. http://www.microsoft.com/windows/ie/download/128bit/default.asp Go to Help > About Internet Explorer, then look at the second line in the dialog box. It says "Cipher Strength". I would really recommend upgrading to 5.5sp2 if you ca

The input information is invalid when installing client cert in IE 5.0

2001-05-24 Thread Robert Buckley
Howdy, Ive created a CA and made a cert or two for apache and some clients. All my netscape clients accept the p12 format. When I try to install a known working cert into IE 5.0, I get the error "The input information is invalid" Anyone know why? Thanx in advance, Robert __

RE: problem with server certificate

2001-05-24 Thread McCaffity, Ray
All you should have to do is, (I don't know what browser you are using) but for MS IE 5.5 try to open your site with just a regular html page. (i.e. https://mysite.com/regular.html) Make sure your security settings are all turned on in your browser. You should get a dialog box warning you that yo

RE: problem with server certificate

2001-05-24 Thread chirag parikh
i there, I have apache +mod_ssl + openssl +tomcat on linux rehat. Now the problem is I have server.crt in my apapche conf/ssl.crt/ direcry. I made it through "make certificate TYPE=custom" comand. Then I store it in keystore through the java keytool import command. So now its trusted server ce

SSLRequireSSL and +FakeBasicAuth

2001-05-24 Thread Madalina Baltatu
Hello all! Sorry if you've already seen this mail, I'm reposting it because I haven't. I'm new to mod_ssl, so I apologize if I ask too dumb questions... I have apache + mod_ssl and I would need to use groups of DNs for authorization purposes. I saw the example in Chapter 5 (HowTo) of the tutori