Re: Questions about running cgi's

2001-05-07 Thread Brett W. McCoy
On Mon, 7 May 2001, Mark on GCI Server wrote: > I would like to run cgi scripts within the Virtual server. Which directive > do I modify with what path. I thought if I set it to use anywhere, that > should do the trick, it didn't. I would like the ability to run cgi scripts > on the secured ser

Re: modssl performance

2001-05-02 Thread Brett W. McCoy
On 2 May 2001, John Evans wrote: > My company just changed from Stronghold to Apache/mod_ssl and we have noticed > a several decline in performance. I would like to stay with mod_ssl for a > couple of reasons (support open source, price, continual licensing fees) but > unless I can find some way

Re: Netscape give I/O Exception, IE OK

2001-04-24 Thread Brett W. McCoy
On Tue, 24 Apr 2001, Neil Aggarwal wrote: > This is really strange. It's in the FAQ -- http://www.modssl.org/docs/2.8/ssl_faq.html#ToC50 When I connect via HTTPS to an Apache+mod_ssl server with Netscape Navigator I get I/O errors and the message "Netscape has encountered bad data from the serv

Re: Disabling Server Authentication

2001-04-17 Thread Brett W. McCoy
On Tue, 17 Apr 2001, Jeffroy, Robert wrote: > Is it possible to configure the server to not provide a server > certificate? We want to set up an encrypted conversation without > requiring server authentication. That kind of defeats the purpose of using SSL in the first place, doesn't it? You ca

Re: apache, modssl, win32

2001-04-05 Thread Brett W. McCoy
On Thu, 5 Apr 2001, Joachim Feise wrote: > Amazing. For some time now, all modules, even on Windows, have the > extension .so, and they are all called mod_whatever.so, to have > consistency between Unix and Windows. > If you have a .dll module, you are using an old version. I'm using 1.3.14, wit

Re: apache, modssl, win32

2001-04-05 Thread Brett W. McCoy
On Thu, 5 Apr 2001, Shain Miley wrote: > hey, I see that alot of people are having this problem. I found out > that the docs say to copy the .dll files into c:/winnt/system32, but > if you copy them into your apache root dir then it should work fine. > Shain I put them under %APACHE_ROOT%\modul

Re: SSLMutex error

2001-04-05 Thread Brett W. McCoy
On Thu, 5 Apr 2001, Maarten van Lieshout wrote: > > > [04/Apr/2001 23:46:57 97322] [error] Child could not open SSLMutex > > > lockfile /home/www.nottherealname.com/chroot/tmp/ssl_mutex.89573 (System error >follows) > > See what I mean? It cannot find the file ssl_mutex.89573 which DOES > exist.

Re: apache, modssl, win32

2001-04-04 Thread Brett W. McCoy
On Wed, 4 Apr 2001, Shain Miley wrote: > Hi, > I am trying to figure out how to get Apache and ModSSL to work with > Windows 2000. I went to modssl.org/contrib and downloaded the newest > version of modssl,apache and openssl. I can get apache to start without > SSL support, but if I try to unco

Graphics on IE

2001-03-23 Thread Brett W. McCoy
I am getting a very weird graphics problem on Internet Explorer 5.x using SSL. The problem is identical if I use apache + mod_ssl under Windows NT/2000 or Stronghold on Solaris 2.7. The problem is that the top of the page has a logo, and below this a login & password form. In the logo at the top

RE: Which SSLSessionCache to use for best performance?

2001-03-23 Thread Brett W. McCoy
On Fri, 23 Mar 2001, Max Clark wrote: > I know that if you do a bin/httpd -l it will show you the compilied modules. > Should the mm show up there? No, the -l shows you Apache-specific modules, not external libraries used to build the apache binary. If you have your source tree still around, yo

Re: 1024 bit key on server

2001-03-23 Thread Brett W. McCoy
On Fri, 23 Mar 2001, Pradeep kamath wrote: > Hello all, > I have had problems with browsers trying to access an Apache mod_ssl > server with private key size other than 1024 .For sizes of > 600bits,1025bits for the private key, IE is unable to connect to the > secure server,Netscape connects

Re: Missing Graphics?

2001-03-19 Thread Brett W. McCoy
On Mon, 19 Mar 2001, Chong, Arthur wrote: > We are noticing missing graphic icons when displayed > on some IE 5 browsers (Mac and Windows) on a https SSL link. > > (mod_ssl 2.8.0 on Apache 1.3.17 on Linux) > > The page shows up fine, but the graphics are missing? > > On some browsers, they show u

Re: SSL with secure/nonsecure virtual hosts

2001-03-17 Thread Brett W. McCoy
On Sat, 17 Mar 2001, Bob Radvanovsky wrote: > Hello there!!! I don't have a solution, but am subscribed to the same list > as you (mod_ssl). I, too, would be interested in knowing more about > virtual hosting with more than one domain (yada, yada, yada). If you find > anything out, I'd apprecia

Re: Automatically switch back to HTTP

2001-03-12 Thread Brett W. McCoy
On Tue, 6 Mar 2001, Martin Kong wrote: > I have a few pages on a web site that I want to protect with SSL. I > have changed the links to those pages with fully qualified path, i.e. > https://www.mysite.com/pagename.html instead of just /pagename.html. > This all works fine. But onces user is in

RE: SSLRequireSSL

2001-03-09 Thread Brett W. McCoy
On Fri, 9 Mar 2001, Chong, Arthur wrote: > In the scenario you implemented with "Tomcat and JSPs and servlets and > all..." > do you actually support different virtual hosts with specific directories > that are secure using the "redirects from non-secure area to secure > area"...? > > How would y

RE: SSLRequireSSL

2001-03-09 Thread Brett W. McCoy
On Fri, 9 Mar 2001, Chong, Arthur wrote: > Pardon my *stupidity* but when you say _default_:443 > you really mean whatever the IP addresss is or > virtual domain name lime "www.mydomain.com" - right? > > > ... > > SSLRequireSSL > ... > > That's how you actually specify it in yo

Re: SSLRequireSSL

2001-03-09 Thread Brett W . McCoy
On 2001.03.09 03:28 Owen Boyle wrote: > There are many ways to control access and the override rules can get a > bit complicated. I suspect your SSLRequireSSL is being overridden by a > later directive in the non-SSL Vhosts or in a .htaccess file... Nope, that wasn't the case at all. > The sane

RE: SSLRequireSSL

2001-03-08 Thread Brett W . McCoy
On 2001.03.08 21:30 "Chong, Arthur" wrote: > Per my earlier post, if this directive works, > I suppose folks are building one secure server > with secure directories that are in > the virtual hosted server areas.would that be a > good way to go about it? > > i.e. one secure web server off

SSLRequireSSL

2001-03-08 Thread Brett W. McCoy
Maybe I am missing something about the use of SSLRequireSSL, but I am trying to control access to a directory so that only connections using SSL to that directory can be made. But no matter what directory I use that directive in, non-SSL connections can still connect to anything in that directory