httpd doesn't start with own certificate

2002-02-27 Thread Arnaud De Timmerman
hi all, i'm trying to launch an apache ssl server (thanks to "httpd start") with the pretty well known "ssl.crt/server.crt" file, the server starts with no problem, so far so good i've made my own ca, then used this ca to sign a certificate request, giving me a new certificate file (i use th

Re: httpd doesn't start with own certificate

2002-02-27 Thread anand
Hi, r u using the same server key with generated certificate? also test the path where you placed (regenerated) certificate. agd > > > hi all, > > i'm trying to launch an apache ssl server (thanks to "httpd start") > with the pretty well known "ssl.crt/server.crt" file, the server starts w

Réf. : Re: httpd doesn't start with own certificate

2002-02-27 Thread Arnaud De Timmerman
Hi, >r u using the same server key with generated certificate? also test the path where you placed (regenerated) certificate. i use the new i've created for the new certificate, and the path is correct in the httpd.conf do i have to give specials access to these both files ? 400 ? 644 ? someth

Documentation Suggestion - mod_ssl compilation - wish list

2002-02-27 Thread David Buerer
If anyone is ever looking for a documentation project, I've got one for you: Tell us how to compile in a Windows environment mod_ssl. The existing doc talks about the make files, how to use the, what to do, but quite frankly that's about one step beyond where I'm at. I'm affluent in many progr

csr password

2002-02-27 Thread Henning Sittler
Title: csr password I setup a secure server with a password on the csr that must be entered when apache starts up.  How can I remove this password so that apache can start without asking for it? Do I need to generate a new key pair?  If I do, will that invalidate my current issued certificate

RE: Réf. : Re: httpd doesn't start with own certificate

2002-02-27 Thread Glen S Mehn
is it listening on port 443? server# netstat -a | grep 443 netstat -a | grep https are you using `apachectl startssl` ps -ef/-waux | grep http should show something like: /usr/local/apache/bin/httpd -DSSL if you don't see the -DSSL, then you're not running with ssl on. -g -Original Me

RE: csr password

2002-02-27 Thread Glen S Mehn
Title: csr password from openssl.org:   To remove the pass phrase on an RSA private key: openssl rsa -in key.pem -out keyout.pem read the full openssl rsa man page here:http://www.openssl.org/docs/apps/rsa.htmlnote that it's the KEY that has a passphrase on it, not the csr. And you've gotta b

RE: csr password

2002-02-27 Thread Price, Gary
Title: csr password Use the SSLPassPhraseDialog option. For example in httpd.conf put the following.   SSLPassPhraseDialog exec:/path to script/script_name   The script should look like this, all it needs to do is echo the password back. _ #!/bin/ksh #

FW: csr password

2002-02-27 Thread Henning Sittler
Title: FW: csr password Ok, I found the HOWTO (from a link in the mail list archives): http://www.modssl.org/docs/2.3/ssl_faq.html#ToC25 But when I try this, I get: read RSA key Enter PEM pass phrase: unable to load key 29484:error:06065064:digital envelope routines:EVP_DecryptFinal:bad decr

Advisory 012002: PHP remote vulnerabilities (fwd)

2002-02-27 Thread R. DuFresne
Considering the plethroa of php users on the list, and the fact many are perhaps not reading bugtraq: -- Forwarded message -- From: [EMAIL PROTECTED] Subject: Advisory 012002: PHP remote vulnerabilities Date: Wed, 27 Feb 2002 12:30:56 +0100 To: [EMAIL PROTECTED], [EMAIL PROTECTED

RE: Advisory 012002: PHP remote vulnerabilities (fwd)

2002-02-27 Thread SoilentG
Thanks. One note. I use php 4.0.6 and I had to set file_uploads = 0 in order for it to take the value, setting it to "Off" showed "no value" in phpinfo(); Jeff > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of R. DuFresne > Sent: Wednesday, Febru

Réf. : RE: Réf. : Re: httpd doesn't start with own certificate

2002-02-27 Thread Arnaud De Timmerman
glen, >is it listening on port 443? >server# netstat -a | grep 443 netstat -a | grep https netstat -a | grep https gives : * tcp0 0 *:https *:* LISTEN * >are you using `apachectl startssl` no to start the server, i use "httpd st