http redirects to https

2002-04-02 Thread Farooq Khan
Hi All, I need some help with the Mod_Rewrite module. I need to redirect all http calls to https for a specific hostname only. The httpd.conf file is something like: VirtualHost A.com:80 DocumentRoot /docs/A ... /VirtualHost VirtualHost B.com:80 DocumentRoot /docs/B ... /VirtualHost

Bug appear after an upgrade...

2002-04-02 Thread Rabellino Sergio
Dear list, I've an apache server with mod_ssl and today i've done a regular upgrade to my web, installing the latest apache (1.3.24) with the relative mod_ssl with openssl 0.9.6c/mm 1.1.3. After the restart of the server, almost all the thing are fine except for the client authentication with

RE: SSL cache issue

2002-04-02 Thread Shiraz Esat
Terry, If anyone passes you a solution, can you please pass it on to me as well, as I have the same problem :( [Only difference, though, is that I'm using PHP generated pages] Thanks in advance Shiraz -Original Message- From: Terry Ziemniak [SMTP:[EMAIL PROTECTED]] Sent: Friday,

RE: SSL cache issue

2002-04-02 Thread Edward Wong
This is related, and might be work noting: With modSSL 3.x in apache 2.x land, I have found that it cannot renegotiate during a POST. However, hitting the refresh button seems to do the handshake and then to the POST correctly. --Ed From: Shiraz Esat [EMAIL PROTECTED] Reply-To: [EMAIL

RE: SSL cache issue

2002-04-02 Thread Jeremy Walton
Actually I've had this problem. I may have the solution for you if you can tell me what OS your running the client from and what browser. Jeremy Walton DICE Corporation -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Shiraz Esat Sent: Tuesday, April

Dumb SSL question.

2002-04-02 Thread Ladner, Eric (Eric.Ladner)
How can I enable mod_ssl and apache to use SSL encryption for browser to server communication without having to have the user accept a certificate? I've noticed several sites do this on the web without asking for you to accept or reject a certificate. Basically, I want to use encryption, but

AW: Dumb SSL question.

2002-04-02 Thread Peter Stöhr
Hi Eric, For example you can buy a certificate from Thawte (www.thawte.com) or Verisign (www.verisign.com) I hope, this was helpful. Rgds, Peter Stoehr GAYNET.AT -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]Im Auftrag von Ladner, Eric (Eric.Ladner)

Re: Dumb SSL question.

2002-04-02 Thread Andrew Lietzow
Eric Ladner wrote RE:Basically, I want to use encryption, but not have the user intervene to enable/disable it. -- In IE 5.5; Tools, Internet Options, Security, Custom Level... Enable Don't prompt for Client Certificate... (or is it Disable -- it's a double negative and I

RE: Dumb SSL question.

2002-04-02 Thread Ladner, Eric (Eric.Ladner)
Oops.. I finally found this info in the mailing list. I still have a question though.. What mechanism is it that will allow an encrypted communication (a connection to the https side of the web server) without popping up the View/Accept/Whatever dialog for the certificate? Is there a

ca cert questions (was Re: Dumb SSL question)

2002-04-02 Thread jon schatz
On Tue, 2002-04-02 at 13:50, Ladner, Eric (Eric.Ladner) wrote: What mechanism is it that will allow an encrypted communication (a connection to the https side of the web server) without popping up the View/Accept/Whatever dialog for the certificate? All that's required is a valid cert ( valid

Re: Dumb SSL question.

2002-04-02 Thread Eric Rescorla
Ladner, Eric (Eric.Ladner) [EMAIL PROTECTED] writes: Oops.. I finally found this info in the mailing list. I still have a question though.. What mechanism is it that will allow an encrypted communication (a connection to the https side of the web server) without popping up the

RE: SSL cache issue

2002-04-02 Thread David Marshall
Make sure that the JSPs in question are resolving their url's with the right protocol HTTPS/HTTP when appropriate. The JSPs may be trying to GET/POST with HTTP when they need to use HTTPS. Since you are using Apache and RESIN. I would assume that you are using the mod_caucho plug-in for Apache.

Creating client certificates ?

2002-04-02 Thread jmos
Hello modssl users ! I managed to set up an ssl aware web server. Although I searched the web and also the list archive I haven't been able to create a client certificate which is signed by my own CA for client authentication. Could someone describe the process of creating such a certificate in

Re: ca cert questions (was Re: Dumb SSL question)

2002-04-02 Thread Cliff Woolley
On 2 Apr 2002, jon schatz wrote: we had not chose to trust). geotrust had me install a CA cert on the server and use 'SSLCACertificateFile' to point to it. magically, ie then trusted the certificate. so why does this work? i mean, why can't i start forging ssl certificates that are trusted

Re: Creating client certificates ?

2002-04-02 Thread Owen Boyle
[EMAIL PROTECTED] wrote: Hello modssl users ! I managed to set up an ssl aware web server. Although I searched the web and also the list archive I haven't been able to create a client certificate which is signed by my own CA for client authentication. Could someone describe the