RE: Automatic change from http to https when password is required

2001-02-13 Thread Joshua Gerth
Hi Harald, > One step is still missing in my chain: I like to change from http to https > not depending on the directory or location tag. I like to switch as soon > as an authorization is required. This is more flexible. I too tried to take it this direction first. So I added a bunch of stuff

RE: Automatic change from http to https when password is required

2001-02-13 Thread Joshua Gerth
Hi Harald, > your described solution looks like the way I'm looking for. Can you please > give me a piece of configuration? I'm not so familiar with handler > handlings. So it would help me a lot. Sure, your tag would look like: AuthName "Whats the secret knock"

RE: Automatic change from http to https when password is required

2001-02-12 Thread Joshua Gerth
Hi Harald, Although not strictly a modssl solution, I solved this by using a mod_perl PerlAccessHandler directive in each of my tags. Access handlers are processed before Authen/Authz handlers so all protected pages (those that require a login/password) are sent to the secure sever. Ho

Re: starting apache without passphrase

2000-12-22 Thread Joshua Gerth
> I have obtained a server certificate and the server is working fine. But > whenever the machine reboots (not very common though), I can't make the > web server start with ssl support because if I do that, I have to > physically be there to enter the passphrase. So I do a > > /etc/init.d/apache

Re: common practice for giving passphrase at startup?

2000-06-10 Thread Joshua Gerth
Howdy, > Hi all, regarding the SSLPassPhraseDialog option, I don't think it's > practical for an admin to type in the pass phrase every time apache is > restarted (builtin mode). I'm temporarily using a script which just echo's > the passphrase (exec mode). I'm wondering how other people are han

Re: Security Hole in mod-ssl

2000-05-20 Thread Joshua Gerth
> I've seen this question asked many times over the past several weeks > and have never had anyone come up with a response that works. I think > this is a serious security problem with browsers. Then the subject for this message should really be: Security Hole in browsers. pegging mod-

Re: VeriSign keys.

2000-05-15 Thread Joshua Gerth
Hi Zohar, > I have several domains name and for each I have a separate key from > VeriSign. > How could I use them In the same httpd.conf If I want to hosts them on the > same sever, using virtual server. > which directive I should place beneath each virtual host section. > Where can I look for

Re: I need help with this....

1999-10-24 Thread Joshua Gerth
> I have recently installed Apache 1.3.9, and mod_ssl 2.4.5 along with > FrontPage extensions, PHP, and mod Perl. Everything installed > perfectly, and I am having no problems except for one thing. When you > try to connect to my site using HTTPS, you get my certificate > presented like it shou