Re: Off topic - don't kill me

2000-08-28 Thread Diana Moreland
Thanks, James. Kill me if you must, but please make it painless. ;-) James Moore wrote: > On 28 Aug 00, Diana Moreland wrote: > > > I need to know how to let users run cgi scripts in their home > > directories without using the ExecCGI directive that is such a security >

Off topic - don't kill me

2000-08-28 Thread Diana Moreland
I need to know how to let users run cgi scripts in their home directories without using the ExecCGI directive that is such a security risk. Can somebody please offer me a hint or point me to the right mailing list? Thanks muchly, Diana ___

Re: SSLMutex error

2000-07-21 Thread Diana Moreland
> # don't use Group nobody on these systems! > # > > John > > -Original Message- > From: Diana Moreland [mailto:[EMAIL PROTECTED]] > Sent: 20 July 2000 20:03 > To: [EMAIL PROTECTED] > Subject: Re: SSLMutex error > > So I wonder why mine wouldn&#

Re: SSLMutex error

2000-07-20 Thread Diana Moreland
So I wonder why mine wouldn't work? Mads Toftum wrote: > On Thu, Jul 20, 2000 at 08:42:08AM -0700, David Rees wrote: > > > > Is anyone running mod_ssl as nobody with a /dev/null shell successfully? > > > Yep. > > vh > > Mads Toftum > -- > `Darn it, who spiked my coffee with water?!' - lwall > >

Re: SSLMutex error

2000-07-19 Thread Diana Moreland
both https and http connections successfully. Again, thanks everyone for your help! Diana Mads Toftum wrote: > On Tue, Jul 18, 2000 at 06:02:24PM -0400, Diana Moreland wrote: > > Thanks for the suggestion but when I tried it, the ownership of the mutex file did > > not change. The owner i

Re: SSLMutex error

2000-07-18 Thread Diana Moreland
chmod a+x /usr/local/apache/logs What next? Thanks very much, Diana Mads Toftum wrote: > On Tue, Jul 18, 2000 at 10:01:51AM -0400, Diana Moreland wrote: > > I know this question has probably come up in this mailing list before so > > excuse me for being redundant. I checked the archiv

SSLMutex error

2000-07-18 Thread Diana Moreland
I know this question has probably come up in this mailing list before so excuse me for being redundant. I checked the archives and tried a couple of things that were suggested there, but they didn't help. How do I fix this? Child could not open SSLMutex lockfile /usr/local/apache/logs/ssl_mutex

Re: SSL configuration with Apache

2000-07-12 Thread Diana Moreland
Thanks for the tip! I did the netstat command and found that port 443 is indeed listening. I appreciate the help. Diana Naresh Narang wrote: > Please do > > httpd -l > > and it will show > > httpd -DSSL > httpd -DSSL > > depending upon how many servers are started. The -DSSL shows up only if

Re: Opinions, please

2000-07-11 Thread Diana Moreland
1, 2000 at 01:30:14PM -0400, Diana Moreland wrote: > > In looking at my configuration, I noticed that I did not have DSO > > support enabled and I'm not sure that SSL is enabled correctly. I'm > > thinking about reconfiguring and recompiling Apache with the following >

Re: SSL configuration with Apache

2000-07-11 Thread Diana Moreland
hat version of Apache are you using? (httpd -v) > > -Dave > > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED]]On Behalf Of Diana Moreland > > Sent: Tuesday, July 11, 2000 10:45 AM > > To: [EMAIL PROTECTED] >

Re: SSL configuration with Apache

2000-07-11 Thread Diana Moreland
1.3.12 David Rees wrote: > Strange, what version of Apache are you using? (httpd -v) > > -Dave > > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED]]On Behalf Of Diana Moreland > > Sent: Tuesday, July 11, 2000 10:45 AM &

Re: SSL configuration with Apache

2000-07-11 Thread Diana Moreland
SL -l", you should see ssl in > there. > > -Dave > > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED]]On Behalf Of Diana Moreland > > Sent: Tuesday, July 11, 2000 8:07 AM > > To: [EMAIL PROTECTED] > > Subject:

Opinions, please

2000-07-11 Thread Diana Moreland
In looking at my configuration, I noticed that I did not have DSO support enabled and I'm not sure that SSL is enabled correctly. I'm thinking about reconfiguring and recompiling Apache with the following parameters: SSL_BASE="/usr/local/src/openssl-0.9.5a" \ RSA_BASE="/usr/local/src/rsaref-2.0/

SSL configuration with Apache

2000-07-11 Thread Diana Moreland
Hi everybody, I followed all the instructions for installing modssl but I'm not confident that everything is where it's supposed to be. When I issue the apachectl startssl command, the daemon starts but I'm not sure that SSL is actually enabled. When I do a httpd -l, I get this: Compiled-in mod

Testing https

2000-07-10 Thread Diana Moreland
Hello everybody, What methods would you folks recommend for testing https once modssl is installed? Thanks in advance, Diana __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List

Re: entropy gathering and PRNG

2000-07-06 Thread Diana Moreland
ta can be kept in (the file will be overwritten). connect: Connection refused connect:errno=111 Where would I set the RANDFILE environment variable? Thanks, everybody for being patient with me. Lutz Jaenicke wrote: > On Thu, Jul 06, 2000 at 10:57:03AM -0400, Diana Moreland wrote: > > Than

Re: entropy gathering and PRNG

2000-07-06 Thread Diana Moreland
I did was create an empty text file. What is the correct way to create a file as a socket? If this is a stupid question, I apologize for wasting everyone's time. Lutz Jaenicke wrote: > On Wed, Jul 05, 2000 at 04:47:43PM -0400, Diana Moreland wrote: > > My version of the Linux kernel

entropy gathering and PRNG

2000-07-05 Thread Diana Moreland
My version of the Linux kernel (2.0.33) is a couple of years old and I do not have /dev/random or /dev/urandom on my system. I've been researching what to use instead and have become confused. I downloaded EGD, installed it and started the daemon, pointing it to /etc/entropy. When I point the

/dev/random

2000-06-30 Thread Diana Moreland
I found commands for creating /dev/random and /dev/urandom but when I point the SSLRandomseed directive to /dev/random and try to start ssl, it hangs for a long time. I don't know if I just didn't wait long enough (I killed the process after waiting 5 minutes) or I've created the /dev/random inc

SSL connection refused

2000-06-30 Thread Diana Moreland
I'm using the following command to test https: openssl s_client -connect localhost:443 -state -debug I get back a connection refused error - the error number is 111. Does anybody know what this error number means or where I can look it up? Thanks __

Re: Trying to use test certificate

2000-06-29 Thread Diana Moreland
for a month. How can I create a random device that will meet the needs of SSL? Thanks a bunch. Mads Toftum wrote: > On Thu, Jun 29, 2000 at 01:04:34PM -0400, Diana Moreland wrote: > > Installed modssl, ran make certificate TYPE=test with default values > > instead of changi

Re: Trying to use test certificate

2000-06-29 Thread Diana Moreland
I read the FAQ once but I obviously missed the clue I was looking for. Thanks! It worked! Mads Toftum wrote: > On Thu, Jun 29, 2000 at 01:04:34PM -0400, Diana Moreland wrote: > > Installed modssl, ran make certificate TYPE=test with default values > > instead of changing an

Trying to use test certificate

2000-06-29 Thread Diana Moreland
Installed modssl, ran make certificate TYPE=test with default values instead of changing any of the fields. Got no errors on any of the makes but httpd will not start. I get this error in the error log: 0] [error] mod_ssl: Init: Failed to generate temporary 512 bit RSA private key Any suggesti

Re: Make test fails running bc

2000-06-28 Thread Diana Moreland
it somewhere! > > Or simply remove that test... :} > > Jason > > > Diana Moreland wrote: > > > > > > Trying to install modssl - I'm getting a make test failure, shown below: > > > > > > running bc > > > Failed! bc: /bin/sh: bc:

Re: Make test fails running bc

2000-06-28 Thread Diana Moreland
I guess I just like living on the edge. ;-) keiths wrote: > How will you know if it runs right without testing it?! ;-) > > Diana Moreland wrote: > > > > I did remove the test from the make file and ran make test again. It worked just > > fine. Thanks, folks

Re: Make test fails running bc

2000-06-28 Thread Diana Moreland
ok - any idea where I can find it? Also, is it necessary for modssl to work right? keiths wrote: > Would appear you don't have "bc", which must be part of the test. bc is > a unix calculator. guess you need to find it somewhere! > > Diana Moreland wrote: >

Make test fails running bc

2000-06-28 Thread Diana Moreland
Trying to install modssl - I'm getting a make test failure, shown below: running bc Failed! bc: /bin/sh: bc: command not found make[2]: *** [test_bn] Error 2 make[2]: Leaving directory `/usr/local/src/openssl-0.9.5a/test' make[1]: *** [tests] Error 2 make[1]: Leaving directory `/usr/local/src/ope