Re: [BugDB] Performance issue (PR#723)

2002-06-26 Thread modssl-bugdb
Hi Thomas, I'll try that and send the results to the list. thank you On Mon, 2002-06-24 at 05:52, Thomas Binder wrote: Hi! On Sat, Jun 22, 2002 at 01:49:12AM +0200, [EMAIL PROTECTED] wrote: This caused a different behavior. I mean, it took a little while (~3 minutes), to the loadav get

Re: Apache Chunking Exploit

2002-06-26 Thread c . bailiff+bugtraq
Ron and David have understood the real utility of mod_blowchunks: On Tue, 25 Jun 2002, Cliff Woolley wrote: On Tue, 25 Jun 2002, David Marshall wrote: For those of you working to patch your production Apache installations. I have tested and verified Cris Bailiff's interim fix. (see

Re: Apache, ssl, and solaris

2002-06-26 Thread Dave Kimberley
Your assert popped on the line that I prefixed with --. Try changing your vhosts to not use _default_. I forget exactly which configuration combination causes that error, but it's definitely been seen before. Hi I've replaced _default_ in ssl.conf and all now working. Thanks

Cannot startup the mod_ssl

2002-06-26 Thread Eric Lai
Hi, After the installation of the mod_ssl, when I type the following command, [root@localhost bin]# ./apachectl startssl ./apachectl startssl: httpd could not be started Can you tell me the solution. Thanks\ Eric

Re: Cannot startup the mod_ssl

2002-06-26 Thread michael_pacey
try ./apachectl configtest then make sure your not already running something on port 80 / 443 [EMAIL PROTECTED]

Newbies : Apache - mod-ssl error

2002-06-26 Thread Andy Soedibjo
Hi, I tried to install Apache1.3.26 - mod-ssl2.8.9-1.3.26 - OpenSSL0.9.6d in windows2000. I think i've succeeded to install everything. Now for Apache, i can run it without SSL. But, if i try to add LoadModule ssl_module modules/mod_ssl.so and run it ... it returns error : Syntax error on

Newbies : Apache - mod-ssl error

2002-06-26 Thread Andy Soedibjo
Hi, I tried to install Apache1.3.26 - mod-ssl2.8.9-1.3.26 - OpenSSL0.9.6d in windows2000. I think i've succeeded to install everything. Now for Apache, i can run it without SSL. But, if i try to add LoadModule ssl_module modules/mod_ssl.so and run it ... it returns error : Syntax error on

Re: Newbies : Apache - mod-ssl error

2002-06-26 Thread R. DuFresne
not sure how it is on winblows machines, but, on unix/linux systems the modules are found under libexec in the installed apache tree, it maybe looking for your module in the wrong place? Thanks, Ron DuFresne On Wed, 26 Jun 2002, Andy Soedibjo wrote: Hi, I tried to install Apache1.3.26 -

Re: Newbies : Apache - mod-ssl error

2002-06-26 Thread Kristijan Cafuta RIP
The most common mistake on windows is that people forget to copy ssleay32.dll and libeay32.dll to WINNT\System32... it returns exactly that error... did you copy them? Hi, I tried to install Apache1.3.26 - mod-ssl2.8.9-1.3.26 - OpenSSL0.9.6d in windows2000. I think i've succeeded to install

SSL3_GET_CERT_VERIFY:wrong signature size

2002-06-26 Thread Mary Peterson
Can anyone help with this problem??? I am getting the following error in my apache error log when a user is using their certificate's private key to digitally sign a registration form on our website. Does anyone know how to fix this so the error message doesn't appear? The signing algorithm is

Re: SSL3_GET_CERT_VERIFY:wrong signature size

2002-06-26 Thread Eric Rescorla
Mary Peterson [EMAIL PROTECTED] writes: Can anyone help with this problem??? I am getting the following error in my apache error log when a user is using their certificate's private key to digitally sign a registration form on our website. Does anyone know how to fix this so the error

Re: SSL3_GET_CERT_VERIFY:wrong signature size

2002-06-26 Thread Mary Peterson
The client is Internet Explorer 5.0. We do not get the error when we authenticate to the site, however when a user submits a registration form they have to digitally sign their registration form with their private key. That is when we get the error. The signing algorithm that our certificate

Re: SSL3_GET_CERT_VERIFY:wrong signature size

2002-06-26 Thread Eric Rescorla
Mary Peterson [EMAIL PROTECTED] writes: The client is Internet Explorer 5.0. We do not get the error when we authenticate to the site, however when a user submits a registration form they have to digitally sign their registration form with their private key. That is when we get the error.

RE: Apache Chunking Exploit

2002-06-26 Thread David Marshall
I'd like to calrify, my point I have binary DSO modules from 3rd party companies. I have several non-source Binary Apache versions from Sun, IBM, Stronghold and Oracle deployed. Mod_blowchunks has closed the door while I get updates from my vendors and test them with all the other software that

mutex lock and session cache problem

2002-06-26 Thread Rok Zevnik
Hello, I have a problem with mod_ssl running apache 2.0.36 on Linux Debian. The ssl server hangs after couple of HTTPS requests and i have to restart it. In log file I get these two warnings when the connection hangs: [warn] Failed to acquire global mutex lock [warn] Failed to release global

getting close with apache2, ssl, solaris 8

2002-06-26 Thread Jeff Landers
I am getting the key values mismatch error which seems like it should be pretty basic in that they don't match just like it says. However, I remade the CA, cert request, and signed it using the CA.sh -newca, CA.sh -newreq, and CA.sh -sign which created the cakey.pem and the newcert.pem. I

Re: getting close with apache2, ssl, solaris 8

2002-06-26 Thread Jeff Landers
That makes sense. I was pointing at the wrong files. Oops. Thank you everyone for helping the newbie get his first apache ssl server running. I will try to be a giver instead of taker. [EMAIL PROTECTED] 06/26/02 04:00PM I think your confusion is in using the cakey when in fact you should

Reverse Proxy https question

2002-06-26 Thread Michael
I am trying to Reverse ProxyHTTPS connections in the following manner: CLIENT Browser (https://secure-site.com) - Apache 2.0 Reverse Proxy, posing as secure-site.com (non-ssl, non-decrypting, just passing the https through) - Sonicwall SSL Accelerator (a stand-alone HW device for SSL