AW: issuing certificate

2001-10-23 Thread Peer Stefan
hmm, you did stop and start your apache? because restart didn't work for me either ... you'll have to stop apache and wait, until no more processes are left and then start it again. cheers, Stefan -Ursprüngliche Nachricht- Von: Murali K. Vemuri [mailto:[EMAIL PROTECTED]] Gesendet: Dienst

IE 6 and 128bit certificate problem

2001-10-23 Thread Martin B. Nielsen
Hi Does anyone have a clue why ie6 and apache 1.3.19 with mod_ssl 2.8.4 (and openssl 0.9.6a) with a 128bit certificate may refuse to connect to the server (i.e. it shows the typical error screen on ie). The server has the usual settings - namely: SSLSessionCache dbm:/var/cache/httpd/ssl_session_

Re: issuing certificate

2001-10-23 Thread Owen Boyle
"Murali K. Vemuri" wrote: > > hi, > i could make a certificate in the way given by you. > i copied the .crt and .key files into /etc/httpd/conf/ssl.crt/server.crt and > ../ssl.key/server.key respectively and then restarted the httpd. > after that i set the multi.crt ( i created like this instead

Re: AW: issuing certificate

2001-10-23 Thread Murali K. Vemuri
yeap. when i say "/usr/local/apache/bin/httpd start" httpd gets started but, i get some message also, which goes " could not determine server's fully qualified domain name, using 127.0.0.1 for servername " " httpd started". if i say " /usr/local/apache/bin/apachectl start" also, i

Client Authentication

2001-10-23 Thread Marcelo Maraboli
Hello. Has anyone successfuly done Client Authentication using client certificates with apache-openssl-modssl ? (server has self signed certificate and Client has a GlobalSign Certificate) or knows about a good tutorial? thanks... -- Marcelo Maraboli Rosselott Ingeniero Civil Electroni

Re: Client Authentication

2001-10-23 Thread Mads Toftum
On Tue, Oct 23, 2001 at 07:44:35AM -0300, Marcelo Maraboli wrote: > Hello. > > Has anyone successfuly done Client Authentication using client > certificates with apache-openssl-modssl ? (server has self signed > certificate and Client has a GlobalSign Certificate) > works just fine for me. >

Re: issuing certificate

2001-10-23 Thread Murali K. Vemuri
well. i followed both the suggestions given by Boyle. cleaning up the browser cache worked! thanks a lot to Boyle cheers murali krishna vemuri Owen Boyle wrote: > "Murali K. Vemuri" wrote: > > > > hi, > > i could make a certificate in the way given by you. > > i copied the .crt an

Re: New User: must be obvious question

2001-10-23 Thread ComCity
Well that doesn't make a lot of senseso your saying that "configtest is better at error checking than apache is at running?" Here's the error I get: Syntax error on line 1158 of /usr/local/apache/conf/httpd.conf: Invalid command 'SSLEngine', perhaps mis-spelled or defined by a module not inc

Re: New User: must be obvious question

2001-10-23 Thread Owen Boyle
> >Well that doesn't make a lot of senseso your saying that > >"configtest is > >better at error checking than apache is at running?" How do you think configtest works? - it's just an instance of apache with an error trap and exit stuck on. Actually I think you were mistaken when you told u

Re: New User: must be obvious question

2001-10-23 Thread Andy Osborne
apachectl configtest is equivalent to httpd -t. Try doing httpd -DSSL -t and see if you still get errors. Chances are you have sections of your httpd.conf file that should be wrapped in a section. Andy ComCity wrote: > > Well that doesn't make a lot of senseso your saying that "configtest

Re: New User: must be obvious question

2001-10-23 Thread R. DuFresne
What does line 1158 of /usr/local/apache/conf/httpd.conf contain? Sure looks here like yer compilation went wrong and ssl wasn't really included into the resulting binary, though, again Owen and John will have a better clue on this, but, that certainly looks like the error is telling you ssl fai

Re: New User: must be obvious question

2001-10-23 Thread ComCity
> > > >Well that doesn't make a lot of senseso your saying that > > >"configtest is > > >better at error checking than apache is at running?" > > How do you think configtest works? - it's just an instance of apache > with an error trap and exit stuck on. Exactly my point. It absolutely is ru

Re: New User: must be obvious question

2001-10-23 Thread Austin Gonyou
Instead of saying figure it out for yourself. Perhaps we could give someone the answer they are looking for. With the understanding that this list, modssl-users, is for helping each other understand what's going on here. So, my 2cents is this: Check ssl_engine_log, error_log and also make sure you

Re: IE 6 and 128bit certificate problem

2001-10-23 Thread David Rees
On Tue, Oct 23, 2001 at 09:49:22AM +0200, Martin B. Nielsen wrote: > > Does anyone have a clue why ie6 and apache 1.3.19 with mod_ssl 2.8.4 > (and openssl 0.9.6a) with a 128bit certificate may refuse to connect to > the server (i.e. it shows the typical error screen on ie). > > The server has th

RE: New User: must be obvious question

2001-10-23 Thread John . Airey
The commented out "Listen 443" and "Listen 80" are probably part of your problem, however, I'd suspect that your httpd.conf is missing the following from the relevant sections also: LoadModule ssl_module modules/libssl.so AddModule mod_ssl.c - John Airey Internet systems support officer

Re: New User: must be obvious question

2001-10-23 Thread ComCity
Thank youAustin,Andy and Ron. I thought the purpose of the list was to get helpI'm sorry if my question seemed stupid. It was not my intention to post a stupid question in which I had not exhausted other resources or throughly looked at what I could find on this. I searched the FAQ's an

RE: New User: must be obvious question

2001-10-23 Thread R. DuFresne
On Tue, 23 Oct 2001 [EMAIL PROTECTED] wrote: > The commented out "Listen 443" and "Listen 80" are probably part of your > problem, however, I'd suspect that your httpd.conf is missing the following > from the relevant sections also: > > LoadModule ssl_module modules/libssl.so > AddModule

Re: New User: must be obvious question

2001-10-23 Thread Mads Toftum
On Tue, Oct 23, 2001 at 03:19:42PM -0400, R. DuFresne wrote: > On Tue, 23 Oct 2001 [EMAIL PROTECTED] wrote: > > > The commented out "Listen 443" and "Listen 80" are probably part of your > > problem, however, I'd suspect that your httpd.conf is missing the following > > from the relevant sections

Re: New User: must be obvious question

2001-10-23 Thread Erdmut Pfeifer
On Tue, Oct 23, 2001 at 11:42:15AM -0700, ComCity wrote: > > --Heres what I found. > I did a httpd -DSSL -t > and it just said > Syntax OK > > whereas the httpd -t gives the same previous error complaining about line > 1158 if I'm reading the apachectl startup script correctly, the "restart" is

Re: New User: must be obvious question

2001-10-23 Thread ComCity
The commented lines have no effect in or out. This was occuring long before these line comments were added. I just added those recently to find things easier when editing the file to try with this issue. I added these comments after the problem started...they where not there originally. Withou

Re: New User: must be obvious question

2001-10-23 Thread R. DuFresne
What speciafically does yer configs line 1158 state? It's the whole clue to the issue, as that is the speciafic line httpd is pointing you to. Thanks, Ron DuFresne On Tue, 23 Oct 2001, ComCity wrote: > Thank youAustin,Andy and Ron. I thought the purpose of the list was to > get help

Re: New User: must be obvious question

2001-10-23 Thread ComCity
Interestingcould this be the problem? As I said earlier LoadModule ssl_module modules/libssl.so is there and I thought AddModule mod_ssl.c was not. However, it is there, it's just in a different place and split up. Could that be the problem? This is on line 208 of httpd.conf LoadM

Re: New User: must be obvious question

2001-10-23 Thread R. DuFresne
On Tue, 23 Oct 2001, Mads Toftum wrote: > On Tue, Oct 23, 2001 at 03:19:42PM -0400, R. DuFresne wrote: > > On Tue, 23 Oct 2001 [EMAIL PROTECTED] wrote: > > > > > The commented out "Listen 443" and "Listen 80" are probably part of your > > > problem, however, I'd suspect that your httpd.conf is m

Re: New User: must be obvious question

2001-10-23 Thread ComCity
Ok, so if I read this right apachectl restart ...is not suppose to work and that's why it doesn't work for me. I made the changes you suggested to a copy of apachectl and it worked fine as far as I can tell. The restart occurred and there was no error. - Original Message - Fro

Re: New User: must be obvious question

2001-10-23 Thread James Hastings-Trew
> > Sure it is. I gave you the urls in the httpd.conf file. Try them they both > work > > http://209.10.62.26 > The ssl version of the site: > https://209.10.62.26 Actually, I got an error connecting to the SSL site - identity certificate name is not correct. And the session was not encry

Re: New User: must be obvious question

2001-10-23 Thread Georg . Oppenberg
Hi Mike, the problem you are observing has a simple explanation. If you define -DSSL as argument for apachectl or configtest or httpd the according parts included in .. are executed. If not defined, they are ignored. Your LoadModule and AddModule statements are properly nested with IfDefine

Re: New User: must be obvious question

2001-10-23 Thread Georg . Oppenberg
Hi Ron, Apache does not load the source file mod_ssl.c. Therefore there is no need for it to know where the source is. The filename (without path) is part of the module structure (coded in by the define STANDARD_MODULE_STUFF) used to register handlers, commands etc. of a module into the core h