Re: Netscape ask always certificat

2003-10-30 Thread Mads Toftum
On Thu, Oct 30, 2003 at 11:40:52AM +0100, xavier jeannin wrote: [SNIP] > --- > drop connection and then reconnect > CONNECTED(0003) > --- > New, TLSv1/SSLv3, Cipher is EDH-RSA-DES-CBC3-SHA > SSL-Session: >Protocol : TLSv1 >Cipher: EDH-RSA-DES-CBC3-SHA >Session-ID: >Session

Re: Netscape ask always certificat

2003-10-30 Thread xavier jeannin
Ok Sorry I correct my mistake so now I  can connect  with SSL Client and get my HTML Page. Thank you it is a powerful tools to debug (redirect, etc) I send to you the response I get, I am not capable to analyse the SSL sequence. Is it a normal sequence ? Seeing this can we deduce the sessi

Re: apache 1.3.29?

2003-10-30 Thread Zvi Har'El
Hi Ralf, If you don't mind, please include a fix which allows the HTTPS env variable to be passed by suexec --- apache_1.3.28/src/support/suexec.c.~20030719062731~ Sat Jul 19 09:27:31 2003 +++ apache_1.3.28/src/support/suexec.c Tue Aug 26 16:49:20 2003 @@ -134,7 +134,7 @@ /* variable name s

Re: Netscape ask always certificat

2003-10-30 Thread Mads Toftum
On Thu, Oct 30, 2003 at 09:24:04AM +0100, xavier jeannin wrote: > 24359:error:14094413:SSL routines:SSL3_READ_BYTES:sslv3 alert > unsupported certificate:s3_pkt.c:1031:SSL alert number 43 > 24359:error:1409E0E5:SSL routines:SSL3_WRITE_BYTES:ssl handshake > failure:s3_pkt.c:514: > > I am sorry bu

Re: Netscape ask always certificat

2003-10-30 Thread xavier jeannin
Hi Thanks Mads for your answer : I should write Netscape still ask the cert at each page  instead of "it does not work". I mad the test you suggest, here is the result [EMAIL PROTECTED] jeannin]# openssl s_client -host intranet.stic.cnrs.fr -port 443 -cert /usr/local/apache/conf/ssl.crt/intr

Re: apache 1.3.29?

2003-10-30 Thread Ralf S. Engelschall
In article <[EMAIL PROTECTED]> you wrote: > Andreas Gietl wrote: >> >> On Wednesday 29 October 2003 15:39, Jim Jagielski wrote: >> >> i guess there will be a new patch within the next days/hours? > > I would guess, but that's not my area :) Yes, there will be a mod_ssl 2.8.16 released today or