Problem with IE

2002-02-06 Thread Thomas Lepik
Hello, I compiled apache-1.3.2+mod_ssl-2.8.6+php-4.1.1 sucessfully on RH 7.2 Linux. I created certificates, modified httpd.conf for my needs and started apache with ssl option. Things seemed to be working fine - even tested with lynx browser to see wheather https://localhost gives a connection -

RE: How do I create a un-encrypted private key (without pass phrase)?

2002-02-06 Thread Sir SoilentG_kov
actually no need to reply my request for an explanation... i went to the mod-ssl.org page and re-read the FAQ and the thing I was after was the way to bypass the Apache "wait for PEM code" thingy. It's in the FAQ's and was very easy to do. Now I can boot remotely and walk away :) Security? well

Re: Stop mod_ssl from writing errors to the general Apache error logfile

2002-02-06 Thread Owen Boyle
Bert Courtin wrote: > > I wonder how I can stop mod_ssl from writing errors to the general > Apache error logfile. > Since your SSL site is defined by a virtualhost, simply put a separate ErrorLog directive in the SSL VH. Errors generated by that VH will go there instead of the global error_log

RE: Apache SSL redundancy

2002-02-06 Thread rwidmer
** Reply to note from [EMAIL PROTECTED] Tue, 5 Feb 2002 13:04:25 - > > I have heard that AOL change dial-up IPs every 3-4 seconds. I have no > data to back this up, but considering their large user base it > wouldn't be surprising as they'd need to ensure that there are no > unused IPs out

SSLRandomSeed set to PRNGD socket = apache fails to start on IRIX

2002-02-06 Thread ulairi
Ok, first, the environment: SGI Octane running IRIX 6.5.13f Apache 1.3.22 ModSSL 2.8.5 OpenSSL 0.9.6b PRNGD 0.9.17 and 0.9.23 If I have the following in my config: SSLRandomSeed startup file:/dev/urandom2 512 SSLRandomSeed connect file:/dev/urandom2 512 The logs show: [Tue Feb 5 15:30:43 2002]

Re: SSL Certs

2002-02-06 Thread Owen Boyle
Brandon Amundson wrote: > > We have created a CA using openssl for our apache server which is running on > linux.. We currently have more than 200 users that access our site via > certificates. Here is what we are having problems doing. > > We have an IIS Web server which we would like to allo

Re: SSLRandomSeed set to PRNGD socket = apache fails to start on IRIX

2002-02-06 Thread Lutz Jaenicke
On Tue, Feb 05, 2002 at 03:40:08PM +0800, [EMAIL PROTECTED] wrote: > Ok, first, the environment: > SGI Octane running IRIX 6.5.13f > Apache 1.3.22 > ModSSL 2.8.5 > OpenSSL 0.9.6b > PRNGD 0.9.17 and 0.9.23 > > If I have the following in my config: > SSLRandomSeed startup file:/dev/urandom2 512 >

Re: How do I create a un-encrypted private key (without pass phrase)?

2002-02-06 Thread Owen Boyle
Sir SoilentG_kov wrote: > > It's in the FAQ's and was very easy to do. Now I can boot remotely and > walk away :) Security? well, if someone can get into the > /etc/httpd/conf/ssl > directory then I'm hosed anyhow so why worry? I think one of the guru's > around here even said p'word protectin

Re: How do I create a un-encrypted private key (without pass phrase)?

2002-02-06 Thread Cliff Woolley
On Wed, 6 Feb 2002, Owen Boyle wrote: > Having a password means that no-one can use your certificate - even if > they obtain a copy of it. They can load the cert into their server but > it won't let the server come up unless they know the password. > > The downside is that you have to type in the

Re: How do I create a un-encrypted private key (without pass phrase)?

2002-02-06 Thread Mark J Cox
> Having a password means that no-one can use your certificate - even if > they obtain a copy of it. They can load the cert into their server but > it won't let the server come up unless they know the password. Although after accepting a passphrase the unencrypted key is sitting in memory in the

duplicate message delivery

2002-02-06 Thread Cliff Woolley
I've been seeing duplicate deliveries of messages to the list from mmx.engelschall.com for the last few days... Ralf, can you check on this when you get a chance? Thanks, --Cliff -- Cliff Woolley [EMAIL PROTECTED] Charlottesvi

RE: Problem with IE

2002-02-06 Thread Kuczborski, Carol L
Try the following setting for the IE browser in the httpd.conf file. I know it is the recommendation made in the mod_ssl FAQ, but it seemed to help me. I had the same problem you are having and researched it for months. After making the change to the http.conf below (and applying a patch from Or

RE: Problem with IE

2002-02-06 Thread Kuczborski, Carol L
Sorry, it is NOT the recommendation made in mod_ssl But it worked for me. Carol Kuczborski EDS - Enabling Business Solutions MS A6N-B47 13600 EDS Drive Herndon, VA 20171 * phone: +01-703-742-1025 (8-432) * mailto:[EMAIL PROTECTED] www.eds.com -Original Message- From: Kuczborski,

Re: Problem with IE

2002-02-06 Thread David Wall
> to the ApacheModuleSSL.dll file on Windows NT), it reduced the intermittent > "Cannot find server or DNS error" and "Page cannot be displayed" messages > received when using the IE browser. I never received these errors when > using the Netscape browser. I'd be interested to know if the mod-ss

Re: Problem with IE

2002-02-06 Thread Shain Miley
I fixed a problem this morning by adding this line to my httpd.conf file: SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0 Shain Kuczborski, Carol L wrote: >Sorry, it is NOT the recommendation made in mod_ssl But it worked for >me. > >Caro

Re: Stop mod_ssl from writing errors to the general Apache error logfile

2002-02-06 Thread Bert Courtin
Hi Owen, thank you for your reply:-) ... but - when sending the output for the ErrorLog to /dev/null I don't have an ErrorLog at all, and that's not really what I needed.. I dont what no ErrorLog at all but just no SSL errors in my ErrorLog (even inside the virtual host!). I don't see the point

Re: Problem with IE

2002-02-06 Thread Daniel Sully
I am finding it very hard to believe that even late versions of IE, 5.5, 6.x have these problems, yet I encounter wacky form post bugs when I do not downgrade the connection. Is there nothing else that can be done? Is no one that is running Apache+mod_ssl able to use KeepAlives or HTTP/1.1, and a

Re[2]: Problem with IE

2002-02-06 Thread Christopher Taranto
Shain, Do you have a public URL that I can try a browser on? I have the same in my httpd.conf file and it does not fix my problem with the IE browser that I have installed in my office. Chris At 01:12 PM 2/6/02 -0500, you wrote: >I fixed a problem this morning by adding this line to my http

RE: Problem with IE

2002-02-06 Thread Kuczborski, Carol L
That is the suggestion in the mod_ssl FAQ, but it did not work for me. I had to remove the forcing of http 1.0 and nokeepalive. Carol Kuczborski EDS - Enabling Business Solutions MS A6N-B47 13600 EDS Drive Herndon, VA 20171 * phone: +01-703-742-1025 (8-432) * mailto:[EMAIL PROTECTED] www.eds.co

Re: How do I create a un-encrypted private key (without pass phrase)?

2002-02-06 Thread R. DuFresne
On Wed, 6 Feb 2002, Cliff Woolley wrote: > On Wed, 6 Feb 2002, Owen Boyle wrote: > > > Having a password means that no-one can use your certificate - even if > > they obtain a copy of it. They can load the cert into their server but > > it won't let the server come up unless they know the passwo

simple name-based virtual host tutorial, PLEASE

2002-02-06 Thread Eduardo Gomez
Can someone PLEASE post a simple tutorial on how to set domain name-based virtual hosts with apache for windows??. I've been trying many things and I just cant get it right. What is confusing me is how the following general config. lines interact or have conflic with each other: -Listen -BindAdre

problem with configure on mod_ssl 2.8.6 with apache 1.3.23.

2002-02-06 Thread PAD HOSMANE
Hi, I am trying to configure mod_ssl with apache_1.3.23 on HP-UX 11.00, gcc 3.0.1. I get "Execute permission denied" as shown below, I get this error when i give CC="gcc shared -fpic" while i run configure as shown below under "OUTPUT OF configure in Mod_ssL". When I run make from apache_1.3.23

Was: simple name-based virtual host tutorial, PLEASE Now: pleasehelp me to better flame off-topic posters

2002-02-06 Thread Tom Oehser
> Can someone PLEASE post a simple tutorial on how to set domain name-based > virtual hosts with apache for windows??. I've been trying many things and I Could someone PLEASE post a simple tutorial on flaming off-topic inappropriate posts that have nothing to do with the list topic? I've been t

Re: simple name-based virtual host tutorial, PLEASE Now: please help me to better flame off-topic posters

2002-02-06 Thread Eduardo Gomez
> Could someone PLEASE post a simple tutorial on flaming off-topic > inappropriate posts that have nothing to do with the list topic? Haha, that was funny... You're right, I sent this by accident to 2 lists (one is this one) Sorry...i'll see that it doesn't happen again :) __ Eduardo

Re: simple name-based virtual host tutorial, PLEASE Now: pleasehelp me to better flame off-topic posters

2002-02-06 Thread R. DuFresne
On Wed, 6 Feb 2002, Eduardo Gomez wrote: > > Could someone PLEASE post a simple tutorial on flaming off-topic > > inappropriate posts that have nothing to do with the list topic? > > Haha, that was funny... > You're right, I sent this by accident to 2 lists (one is this one) > Sorry...i'll see t