Re: ServerName Problem (I think)

2001-10-02 Thread J. Johnson
On Tue, 2 Oct 2001, Robert Mazur wrote: > ssl_engine_log says: > > (servername.somedomain.com:443) RSA server certificate CommonName (CN) > `www.mydomain.com' does NOT match server name!? > This is true, but the server name does not have to be the domain name of the > site, does it? Peter Wainw

Re: Lost Virtual Host

2001-10-04 Thread J. Johnson
You haven't provided any details, so it's hard to provide a specific suggestion. But in general I've found that when things change "out of the blue" it is usually because of some latent problem that wasn't noticed because of some other circumstance. E.g., you change a configuration file, but for

Re: Single IP and need two virtual SSL servers

2001-11-02 Thread J. Johnson
Right: "one can do this by using another IP." === JJ = On Sat, 3 Nov 2001, G.Roderick Singleton wrote: > I have a single IP. I need to implement two SSL servers. The FAQ seems to > state that using one IP for more than one SSL-enab

Re: build openssl + mod_ssl + apache on cygwin

2001-10-06 Thread J. Johnson
My experience was that 'patch' failed because the target _had already been patched_! (Because this is not the first run.) My strong recommendation is that the entire Apache source tree be removed, and reinstalled from the tar file, prior to _each_ mod_ssl configuration. Apache itself has probl

Re: build openssl + mod_ssl + apache on cygwin

2001-10-07 Thread J. Johnson
the file to be patched and the patch file from the tar file into a different directory, and run patch again. If that fails, check your patch program. === JJ = On Sun, 7 Oct 2001, MindTerm wrote: > Dear Johnson, > > All

Re: Apache_1.3.20 and mod_ssl-2.8.4-1.3.20 won't work withopenssl-0.9.6b

2001-10-09 Thread J. Johnson
On Tue, 9 Oct 2001, Mads Toftum wrote: > On Sun, Oct 07, 2001 at 01:44:16PM +, G.Roderick Singleton wrote: > > Interesting. This is why I tried 6b in the first place. Unfortunately it, > > 6b does not integrate with mod_ssl-2.84and Apache_1.3.20 to produce an > > ssl aware http server. > >

Re: Apache_1.3.20 and mod_ssl-2.8.4-1.3.20 won't work withopenssl-0.9.6b

2001-10-09 Thread J. Johnson
On Wed, 10 Oct 2001, G.Roderick Singleton wrote: > Thank you. I will try again later. Downgrading to 0.95a worked where > 0.9.6b did not. I am curious why? Because something was different! (Weren't you listening?) As 6b _does_ work for the rest of us, there appears to be something differe

Re: Apache mod-ssl on Solaris 8 problem...

2001-10-12 Thread J. Johnson
That sounds like a problem I had doing all of this on Solaris 2.6. I finally completely wiped out the Apache source, and re-installed. No problem! === JJ = On Fri, 12 Oct 2001, Mark J. de Jong wrote: > After compiling and installing

Re: Mod-SSL Configure Failed!!

2001-10-17 Thread J. Johnson
On Tue, 16 Oct 2001, Sabyasachi Gupta wrote: > [] > configure:526: checking for gcc > configure:603: checking whether the C compiler (gcc ) works > configure:617: gcc -o conftestconftest.c 1>&5 > gcc: installation problem, cannot exec `cpp0': No such file or directory

Re: R: Apache SSL doesn't work

2001-12-04 Thread J. Johnson
On Tue, 4 Dec 2001, Dario Prester wrote: > I think that the generation/configuration of certificates should be OK. Don't _think_ it's okay--VERIFY!!! ("It's not what don't know that hurts you, but what you _know_ is absolutely for sure true--but it ain't!" Or: "To assume makes an ass out of u a

Re: Security Checker?

2001-12-10 Thread J. Johnson
Did you have some particular kind of security check in mind, or were you interested in security overall? For security overall (and security does have have to be done over all) there is excellent material on Internet. Start with CERT or CIAC. For Web specific security see 'http://www.w3.org/Sec

Re: Security Checker

2001-12-12 Thread J. Johnson
On Wed, 12 Dec 2001, Lajos Moczar wrote: > I too am interested in this topic. Is there anything out there that does > these kinds of checks? Anyone writing or want to write such a thing? I'd > sure be interested in contributing to such a project were it necessary. If I had the time I'd write o

Re: DSO problems

2001-12-19 Thread J. Johnson
Doesn't that error have the feel of a makefile error? How about an experiment? Do a 'find ... -ls' on all of your Configure and make files, and check their modification dates. Better yet, make a radical change in your Apache configuration (like a different compiler), and see if it gets reflecte

RE: DSO problems

2001-12-21 Thread J. Johnson
On Thu, 20 Dec 2001, Simon Ritchie wrote: > I don't think you have to go that far. No, but the computer does the work, and scrubbing and replacing the entire distribution takes much less time than trying to find a faster solution. === JJ

Re: [BugDB] apachectl startssl failure (PR#655)

2001-12-31 Thread J. Johnson
Look in apachectl to see how it calls httpd in the cases of 'start' and 'startssl'. These should work out to something like 'httpd' and 'httpd -DSSL'. Try each of these directly from the command line. Possibly the second instance fails (check the return status with 'echo $?'); that would indica

Re: undefined symbol: _OtsRemainder32Unsigned

2002-01-01 Thread J. Johnson
In your libexec directory: do you even have 'libssl.so'? Either way, you probably need to look at your OpenSSL build. === JJ = On Tue, 1 Jan 2002, Kurt wrote: > Hi there, > > I've been trying to run apache (1.3.12) and mod_ssl > (2.

Re: Using https and http at the same time

2002-01-07 Thread J. Johnson
Perhaps someone could explain just why one would login with http, exposing one's password to whomever's watching, and _then_ switch to https? === JJ = On Thu, 3 Jan 2002, Waleed Hamad wrote: > > Hi Is it possible to run http and https