[no subject]

2002-03-07 Thread Chris Cooper
- - - - - - Chris Cooper [EMAIL PROTECTED] Student Service Centre [EMAIL PROTECTED] Edith Cowan University http://www.ecu.edu.au/ Pearson Street Tel: +61 8 9273 8652 Churchlands

Re: .htaccess not processed with client authentication

2002-03-07 Thread Mads Toftum
On Fri, Mar 08, 2002 at 09:46:42AM +0800, Angus Lee wrote: > Hi, > > > Try to put all these directives in httpd.conf file and > > also try to put the SSLRequire directive as follows > > But I want each user to set their client authentication access control to their >directory. > > Is there any

RE: Job openings

2002-03-07 Thread Paul G. Weiss
OK, well that's what I call putting your foot in your mouth!  Apologies to all. -P -Original Message-From: Paul G. Weiss Sent: Thursday, March 07, 2002 9:43 PMTo: '[EMAIL PROTECTED]'Subject: RE: Job openings   -Original Message-From: Mark J. Matheson [

Re: Job openings

2002-03-07 Thread Mark J. Matheson
"Paul G. Weiss" wrote:    -Original Message- From: Mark J. Matheson [mailto:[EMAIL PROTECTED]] Sent: Thursday, March 07, 2002 9:40 PM To: [EMAIL PROTECTED] Subject: Re: Job openings   avijeet banerjee wrote:      We have a requirement for a developer(senior) in a  large software developm

RE: Job openings

2002-03-07 Thread Paul G. Weiss
  -Original Message-From: Mark J. Matheson [mailto:[EMAIL PROTECTED]]Sent: Thursday, March 07, 2002 9:40 PMTo: [EMAIL PROTECTED]Subject: Re: Job openingsavijeet banerjee wrote:      We have a requirement for a developer(senior) in a  large software development o

Re: Job openings

2002-03-07 Thread Mark J. Matheson
avijeet banerjee wrote:        We have a requirement for a developer(senior) in a  large software development organization. The person should have expertise in C , apache mods , Oracle Pl/sql and java/jsp experience would be an added advantage.Please send resumes ASAP.thanks Avijeet            

Re: .htaccess not processed with client authentication

2002-03-07 Thread Angus Lee
Hi, > Try to put all these directives in httpd.conf file and > also try to put the SSLRequire directive as follows But I want each user to set their client authentication access control to their directory. Is there any bug with previous versions of mod_ssl which would make client authenticati

Job openings

2002-03-07 Thread avijeet banerjee
We have a requirement for a developer(senior) in a  large software development organization. The person should have expertise in C , apache mods , Oracle Pl/sql and java/jsp experience would be an added advantage. Please send resumes ASAP. thanks Avijeet     Avijeet Banerjee >From:

Re: mod_ssl

2002-03-07 Thread avijeet banerjee
We have a requirement for a developer(senior) in a  large software development organization. The person should have expertise in C , apache mods , Oracle Pl/sql and java/jsp experience would be an added advantage. Please send resumes ASAP. thanks Avijeet     Avijeet Banerjee >From: "Patrick Wi

Re: IE browser does not disply proper error message if the certificate is expired

2002-03-07 Thread Ron Ridley
I posted a couple weeks back on the same problem. I had also tried setting specific ErrorDocument directives in my httpd.conf, but it didn't work. From what I can tell is that since the default errors are written into the apache/mod_ssl code to display errors in http not https and when all tr

RE: SSL Hardware acceleration questions . . .

2002-03-07 Thread lgazis
Fairly easy. For those hardware accelerators which are supported by the OpenSSL engine version, all you need to do is to compile modSSL with the engine version of OpenSSL (present as a separate version of OpenSSL from OpenSSL 0.9.6 on), and include a line in httpd.conf setting SSLCryptoDevice to

[BugDB] HTTPS doesn't work (PR#669)

2002-03-07 Thread modssl-bugdb
Full_Name: Carmen Shinzato Version: 2.8.7 OS: Solaris 2.7 Submission from: (NULL) (161.196.99.99) We have installed Apache 1.3.23 with Openssl 0.9.6b and mod_ssl 2.8.7, The HTTP protocol works well at port 8003 but the HTTPS doesn't work at port 8443, the error is: access denied to www.movilnet.

SSL Hardware acceleration questions . . .

2002-03-07 Thread mike . innes
Dear all, Has anyone had any experience with hardware acceleration? specifically: How easy is it to get MOD_SSL to be configured with hardware SSL cards (any cards to avoid/recommend). We have Sun hardware (so Sun/Sonicwall ?) Does anything need to be recompiled? which versions of OpenSSL

Re: mod_ssl

2002-03-07 Thread Patrick Willart
Hi Cesar, Mod_ssl isn't the problem It works fine. But when you also add JSP functionality (tomcat / WARP), the server becomes instable. It appears to be crashing when multiple requests for one or more JSPs are send to the server at the same time. Apache+mod_ssl works ok Apache+tomcat works

SSL Cert info

2002-03-07 Thread Brian Rectanus
Hello, I am looking for info on what risk is involved in a 40 bit SSL cert vs a 128 bit cert. When should one use a 128 bit cert over a 40 bit cert? If someone could please point me to some reliable info on this, I would appreciate it. Thanks, -Brian

Re[2]: MSIE broken SSL implementation - problems with mod_ssl / openssl

2002-03-07 Thread Christopher Taranto
Hi Carl, Unfortunately, I have had no luck in tracking down or fixing this problem. And it's really a big problem in my opinion. I haven't had enough time to really dig deep on the using openssl to debug the connection - but I don't really know what I would be looking for specifically. For

Re: new rpm for apache-mod_ssl?

2002-03-07 Thread Andrew Lietzow
Dear R. J. Goyette at Argonne National Laboratory, Just a FYI. I went to your web site at http://zuul.pns.anl.gov/security/ and clicked on the four Links under Destinations. Nothing happens. No propellers; no hour glass; no meter filling up on the browser-wowser. Is it possible that I have so

new rpm for apache-mod_ssl?

2002-03-07 Thread Rick Goyette
I am running apache-mod_ssl-1.3.20.2.8.4-2, and I like it very much. It is a complete package of apache and ssl, and, as it was packaged into a RedHat rpm, was easy to install. However, the recent security advisory concerning the buffer overflow in mod_ssl (appended below) demonstrates my need

Re: IE browser does not disply proper error message if the certificate is expired

2002-03-07 Thread Shiva Murugesan
Any help from anyone? I need this desperately. Sincerely Shiva --- Shiva Murugesan <[EMAIL PROTECTED]> wrote: > Many thanks jon. The problem occurs in 5.5 and 6.0 > as > well. > I have tried unchecking the "Show friendly error > message", still it is not displaying the correct SSL > message.

Re: .htaccess not processed with client authentication

2002-03-07 Thread Shiva Murugesan
Try to put all these directives in httpd.conf file and also try to put the SSLRequire directive as follows SSLRequire %{SSL_CLIENT_M_SERIAL} eq "A6" -- Shiva --- Angus Lee <[EMAIL PROTECTED]> wrote: > Hi, list, > > I used .htaccess to add client authentication to > access a particular direct

.htaccess not processed with client authentication

2002-03-07 Thread Angus Lee
Hi, list, I used .htaccess to add client authentication to access a particular directory. However it seems that .htaccess is not processed occassionally when http request is made to an object in that directory. Anything wrong with my configuration? SSLRequireSSL SSLVerifyClient require SSLVeri

How do i start ?

2002-03-07 Thread Amir Abiri
I just recently installed mod_ssl from an rpm, and i wanted to know if there is some document that exaplains what i NEED in the httpd.conf file for the minimum set of functions. The howto and the reference simply throw a metric ton of information at me, and i don't udnerstand everything they