Re: Mod_proxy and client certificate auth

2006-06-08 Thread Paul D. Robertson
ng I would LOVE to hear how you got it done > > I'm getting end-to-end SSL, just the undesired (this time) effect of having the client cert passed all the way through the chain, which I'd expect folks to want as normal behavior. Paul ---

Mod_proxy and client certificate auth

2006-06-06 Thread Paul D. Robertson
oxyMachineCertificatePath conf/cert SSLEngine on conf/cert contains user.pem, a .pem cert file with an RSA private key catenated to it. I also have a hash link to the user.pem cert file. Just in case, I've also added "export OPENSSL_ALLOW_PROXY_CERTS=1" to bin/envvars. Can a

Re: SSLVerifyClient fails

2005-08-04 Thread Paul Puschmann
read server hello A > depth=0 /C=DE/ST=NRW/L=Hattingen/O=MX/OU=Demo > Server/CN=www.test.de/[EMAIL PROTECTED] > verify error:num=20:unable to get local issuer certificate Seems you don't have the required Root-CA-Certificates installed on your webserver. (you need the root-certificate

Re: SSLVerifyClient

2005-06-30 Thread Paul Puschmann
. Perhaps you could file a bug against Safari (or have a look in their bug-database (if existent)). Paul - -- Linux-User #271918 with the Linux Counter, http://counter.li.org/ -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.2 (MingW32) iEYEARECAAYFAkLDpLUACgkQqErKt

Re: SSLCACertificatePath

2005-06-30 Thread Paul Puschmann
ut all certificate-entries in one file. This worked for me. Paul - -- Linux-User #271918 with the Linux Counter, http://counter.li.org/ -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.2 (MingW32) iEYEARECAAYFAkLDpF0ACgkQqErKtBWD7VRs+wCfSsCouThgc6mT5MyQprbvCbJi rDkAoPFUHhuQo1e9u

Re: SSLVerifyClient

2005-06-28 Thread Paul Puschmann
nts with your ca-files and certificates. Paul -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.2 (MingW32) iEYEARECAAYFAkLBXkUACgkQqErKtBWD7VStpQCeN0GB4nmhZcJz5EwCqdXUmno8 3rkAoOx908jbK/YpKH6GKBIs/kSeShPh =NQne -END PGP SIGNATURE-

Invalid command SSLEngine

2004-12-18 Thread Paul Madoff
le /usr/lib/apache/libssl.so.0 LoadModule ssl_module /usr/lib/apache/libssl.so.0.9.7 Last clue I found on the internet suggested that mod_ssl was not loading. Is that my problem or have I missed something? thanks, Paul

Re: mod_ssl and mod_jk (Win32)

2002-12-04 Thread Paul Christmann
Answering my own question in case anyone else ever encounters this: Modify Tomcat's server.xml specifying scheme="https" (rather than scheme="http") for the Connector used to wire Apache and Tomcat. Paul Christmann wrote: Environment: Running Apache 2.0.43/OpenSSL

mod_ssl and mod_jk (Win32)

2002-11-29 Thread Paul Christmann
/app/index.html Its only the https://localhost/app URL that's failing. Thanks for any assistance, Paul Christmann __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List

How to read the html content

2002-11-28 Thread Blesson Paul
Hi all I am a newbie to this list. I need to know how mod_ssl gets the content(I mean the HTML message body) which the apache sends to the client. If it is difficult to explain, atleast please tell in which part of code, it is described Thanking in advance regards Blesson Paul

Win32 Binary Builds

2002-11-26 Thread Paul Christmann
cense. Without that, is there any way I can compile Apache 2.X? (I have and use cygwin's gcc and make if that matters) Thanks, Paul Christmann __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org Use

RE: Securing directories

2002-11-08 Thread Paul Bleimeyer
Anytime. Thats what this group is all about. Let us know once you get things rolling. Regards, Paul On Fri, 8 Nov 2002, Robert Lagana wrote: > Thank you very much Paul. > > Regards, > Robert > > -Original Message- > From: Paul Bleimeyer [mailto:paulb@;may

Re: Securing directories

2002-11-08 Thread Paul Bleimeyer
Rob, You might want to use a restricted realm setup and use the authnname and setup a number of users to control the access. Part I: Restricting access. Using a authorization file on the folder in question is also possible, but if your users create subfolders, then they will be prompted to reaut

RE: Mod_SSL_2.8.10 and OpenSSL_0.9.6g

2002-09-19 Thread Paul Bleimeyer
Geoff, Are you running 1.x or 2.40 apache? Regards, Paul > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Geoffrey Talvola > Sent: Thursday, September 19, 2002 1:28 PM > To: '[EMAIL PROTECTED]' > Subject: RE: Mod_S

RE: Apache2.0.39 + mod_ssl

2002-09-11 Thread Paul Bleimeyer
Raj,   Shouldn't your apache statement read apache -k -D SSL ? Note the space behind the -D. Also I didn't see your attachments most likely due to it being stripped on the listserv, but you might also want to check that listen 443 is in the httpd.conf file.   Regar

RE: Antw: RE: Apache 2.0.40 - Loaded mod_ssl successfully on w2k?

2002-09-03 Thread Paul Bleimeyer
Andre, I think I am hitting a wall somewhere. Somewhat the same errors running your code. Could it be my browser? Connections over 80 and 443 are fine, but when I invoke ssl via https://localhost or the server name I get the internal 501 error code. I shutdown my copy, renamed the folder to apach

RE: Antw: RE: Apache 2.0.40 - Loaded mod_ssl successfully on w2k?

2002-09-03 Thread Paul Bleimeyer
Whose compiler did you use? > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Lakey, > Jeremy # IHTUL > Sent: Tuesday, September 03, 2002 10:52 AM > To: '[EMAIL PROTECTED]' > Subject: RE: Antw: RE: Apache 2.0.40 - Loaded mod_ssl successfully on > w2k?

RE: Apache 2.0.35 - ssl fails silently?

2002-09-03 Thread Paul English
past. I made sure that it did build for 2.0.40. Thanks everyone, Paul > -Original Message- > From: Paul English [mailto:[EMAIL PROTECTED]] > Sent: 02 September 2002 22:55 > To: [EMAIL PROTECTED] > Subject: Re: Apache 2.0.35 - ssl fails silently? > > >

RE: Apache 2.0.40 - Loaded mod_ssl successfully on w2k?

2002-09-03 Thread Paul Bleimeyer
Has anyone successfully implemented mod_sll under 2.40 apache for w2k? I am getting a 501 1051 internal server error back. The ssl engine is loading but no response when I connect to the port. [info] Init: Initializing OpenSSL library [Fri Aug 30 15:51:28 2002] [info] Init: Seeding PRNG with 0 by

Re: Apache 2.0.35 - ssl fails silently?

2002-09-02 Thread Paul English
> On Mon, 2 Sep 2002, Paul English wrote: > > > I'm working with a new setup of 2.0.35 under Linux, and having > > First of all, why 2.0.35 on a new setup? 2.0.36 was the first full > release (back in April). 2.0.40 is the current release. Oops, I guess I sh

Apache 2.0.35 - ssl fails silently?

2002-09-02 Thread Paul English
tested all the interfaces using nmap, which just says that port 443 is closed, and telnet. I've attached my config files to see if anyone else can make sense of it. Thanks, Paul # # This is the Apache server configuration file providing SSL support. # It contains the configuration direct

Changing dummy cetificates?

2002-08-18 Thread Paul F
Can anyone tell me how to change the dummy cert? I run gendummycerts again but the old cert is still kept for apache. Thanks! __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List

http or https but not both?

2002-08-14 Thread Paul F
I have a fresh linux installation with apache + mod_ssl. With the mod_ssl module and AddModule uncommented, I can access https://mysite. BUT NOT http://mysite. Any help appreciated! __ Apache Interface to OpenSSL (mod_

Warning message when starting modssl

2002-07-19 Thread paul priestman
already added, skipping but apache still starts but why is it giving me these warning messages? thanks paul _ Chat with friends online, try MSN Messenger: http://messenger.msn.com

Re: back button with SSL

2002-05-16 Thread paul priestman
This is probably because under SSL no caching of pages is allowed. You could store the varibales and if errors occur pass the variables back to the script and re-populate the fields with these values - or you could do error checking on the client side using javascript. >From: "Boex,Mat

Performance issues - testing

2002-04-29 Thread paul priestman
1.3.22 with mod ssl. Thanks for your time Paul _ MSN Photos is the easiest way to share and print your photos: http://photos.msn.com/support/worldwide.aspx

Re: Problems with Apache 2.0.35 and SSL

2002-04-18 Thread paul priestman
1. I have managed to install Apache 2.0.35 with mod SSL but it ony works >when i sepecify the servername as been the servers IP address instead of >the >actual name - is this a bug or is this the way Apache in tended? Do you mean in the actual ServerName directive? No that's not intended, but

mod_auth_ldap with Apache 2.0.35?

2002-04-16 Thread paul priestman
Hello, Does anyone know if mod_auth_ldap comes with apache 2.0.35 like mod_ssl and mod_dav etc..The documentation seems to suggest so but I can't figure out a way to configure the makefile to install the module at compile time. Does anyone have any suggestions?

Re: Apache 2.0.35 with SSL - wont start

2002-04-15 Thread paul priestman
> > (13)Permission denied: make_sock: could not bind to address 0.0.0.0:443 > > no listening sockets available, shutting down > > ./apachectl startssl: httpd could not be started > > It's *not* trying to start on 8443 though... thanks, Ron DuFresne On Mon, 15 Apr 200

Re: Apache 2.0.35 with SSL - wont start

2002-04-15 Thread paul priestman
numbers aswell but to no luck.... Paul >From: "R. DuFresne" <[EMAIL PROTECTED]> >To: paul priestman <[EMAIL PROTECTED]> >CC: [EMAIL PROTECTED] >Subject: Re: Apache 2.0.35 with SSL - wont start >Date: Mon, 15 Apr 2002 09:12:42 -0400 (EDT) > > >You're

Apache 2.0.35 with SSL - wont start

2002-04-15 Thread paul priestman
available, shutting down ./apachectl startssl: httpd could not be started Has anyone any ideas what i'm doing wrong - i have succesfully got ssl working with apache 1.3.22. Thanks for your time Paul _ Chat with friends online

Apache 2.0.35 and SSL

2002-04-11 Thread paul priestman
Hello all, I am trying to compile apache 2.0.35 with ssl but it is not working. My config is as follows: ./configure --prefix=/path/whereiwant/apache \ --enable-ssl \ --with-ssl=/path/to/openssl however on make i get the following error flex -Pssl_expr_yy -s -B /home/user/jwoodman/apache/ht

RE: Job openings

2002-03-07 Thread Paul G. Weiss
OK, well that's what I call putting your foot in your mouth!  Apologies to all. -P -Original Message-From: Paul G. Weiss Sent: Thursday, March 07, 2002 9:43 PMTo: '[EMAIL PROTECTED]'Subject: RE: Job openings   -Original Message-From: M

RE: Job openings

2002-03-07 Thread Paul G. Weiss
  -Original Message-From: Mark J. Matheson [mailto:[EMAIL PROTECTED]]Sent: Thursday, March 07, 2002 9:40 PMTo: [EMAIL PROTECTED]Subject: Re: Job openingsavijeet banerjee wrote:      We have a requirement for a developer(senior) in a  large software development o

Hanging Processes

2001-09-05 Thread Paul G. Weiss
(fe3ae070, fe3b0fa0, 0, 0, 0, 0) + 34 fe38e3d0 _reaper (fe3ac524, fe3ae070, fe3ad308, 455f34, 1, fe401000) + 34 Look familiar to anyone? -Paul Weiss __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org

RE: Solaris8(x86) install problem

2001-08-06 Thread Paul McGarry
n into when compiling things yourself on Solaris. Paul This document and any attachments are intended solely for the named addressee(s), are confidential, and may be subject to legal professional privilege. Please notify us (on +61-

Re: http and https, same instance

2001-07-19 Thread Paul
If you have mod_perl, check out an article I wrote for take23 a while back at http://take23.org/articles/2001/03/12/redirect.xml?style=printable If you don't, maybe mod_rewrite would help? Then again, maybe I'm misreading what you need? --- Christopher Piggott HOME <[EMAIL PROTECTED]> wrote: >

Seriously frustrating problem...

2001-07-10 Thread Paul Hooper
compiler (gcc ) works... no but I can't work out where this is being read from. Can somebody please explain what is happening. I have been mulling this over for a good few days now, but really need some expert advice. Thanks Paul I did not have sexual relations with Miss Lew

RE: Newbie to mod_ssl

2001-06-20 Thread Paul McGarry
> I've downloaded apache_1.3.20.tar.gz and mod_ssl-2.8.4-1.3.20.tar.gz. > Is there a step-by-step guide to install Apache with mod_ssl ? Such instructions are hidden away in a file named, somewhat cryptically, "Install" in the mod_ssl tar.gz. -- Paul McGarryma

RE: Multiple Server Certificates

2001-06-11 Thread Hooper, Paul, (FNMF)
Owen, Thank you very much. I hadn't dared hope for such a clear and succinct answer. Much appreciated. Paul -Original Message- From: Owen Boyle [mailto:[EMAIL PROTECTED]] Sent: 11 June 2001 10:34 To: [EMAIL PROTECTED] Subject: Re: Multiple Server Certificates "Hooper, P

Multiple Server Certificates

2001-06-11 Thread Hooper, Paul, (FNMF)
, if so, can anyone recommend a solution to meet this requirement. Thanks for any help you can offer. Paul __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List

Re: R: Cert signed by own CA and IE

2001-05-18 Thread Paul-Catalin Oros
erver certificate. Hope this help, Paul PS: I am using IE 5.0 On Wed, 16 May 2001, Arcady Genkin wrote: > "Andrea Cerrito" <[EMAIL PROTECTED]> writes: > > > > > > Connecting to a secure site with a certificate signed by own CA, IE > > > > > seems

hang time, segfaults

2001-05-02 Thread Paul
.com:8443/";>here. Apache/1.3.12 Server at mailto:[EMAIL PROTECTED] m">bos04111.al.bst.bls.com Port 8080 0 (** and this? **) Connection closed by foreign host. ==

Urgent: remove password from server cert?

2001-05-02 Thread Paul
und to feed the password to the startup query. This really needs to be automated. Help? =o) Paul = Friends are those who, when you must inconvenience them, are less bothered by it than you. ;o] __ Do You Yahoo!? Send instant messages & get emai

Re: Urgent: remove password from server cert?

2001-05-02 Thread Paul
> Forsake rebooting, use Unix! (-: LOL!! I'm with you, bud. But it *is* UNIX, just 10.2(only recently upgraded to that!) on an old T-500 machine. We just try to keep it clean. =o) __ Do You Yahoo!? Send instant messages & get email alerts with Yah

Re: Invalid method in request

2001-04-27 Thread Paul
--- Pavel_Hlou¹ek <[EMAIL PROTECTED]> wrote: > What's wrong? When I connect to apache via https, Netscape says > "Conection refused" and there is "invalid method in request" written > in apache's error_log. > I'm using Apache 1.3.19 + mod_ssl-2.8.1-1.3.19 + openssl-0.9.6. Did you use GET? or may

negative LocationMatch syntax?

2001-04-12 Thread Paul
Hi all. I need to leave a few areas of our site freely accessible, but most of the site is restricted, and I'd like the default behavior to be restrictive. I don't want to have to remember to change the config if I add new directories, as in adding SSLVerifyClient require Is there a way I cou

Re:[OT] explusion?

2001-04-06 Thread Paul
Thanks, Ralph. Now I don't feel so stupid, lol --- "Ralf S. Engelschall" <[EMAIL PROTECTED]> wrote: > On Thu, Apr 05, 2001, Paul wrote: > > > I have been looking at this for a while, and must be looking in the > > wrong places. From httpd.conf: &g

explusion?

2001-04-05 Thread Paul
I have been looking at this for a while, and must be looking in the wrong places. From httpd.conf: # Semaphore: # Configure the path to the mutual explusion semaphore the # SSL engine uses internally for inter-process synchronization. "mutual eplusion semaphore"? OK, expulsion I would un

RE: repeatedly asking for authenticataion

2001-04-05 Thread Paul
--- Robert Buckley <[EMAIL PROTECTED]> wrote: > Ive created a CA, one server cert and one client cert. > All works well, however, every time I click a cgi script, it asks for > authentication. Are you sure it's the server? Netscape's default behavior for digital certificates is "Ask Every Time"

accessing SSL environment data in Perl*Handler

2001-04-04 Thread Paul
Though I feel rather foolish, the fact remains that I can't seem to find my SSL environment variables. httpd.conf has SSLVerifyClient require SSLOptions+StdEnvVars # ... Exactly when and where are they set? For example, SSL_CLIENT_S_DN. Once set, shouldn't I be able to just s

Re: SSL validation

2001-04-02 Thread Paul
--- Manne Anliot <[EMAIL PROTECTED]> wrote: > Hi all, > > New to mod_ssl I've stumled upon a very disturbing problem: I'm > coding an Apache module that needs to know whether we have a secure > (SSL) connection or not in the URI Translation phase. We've solved > this problem on for example MS II

Re: can anyone help me....

2001-03-30 Thread Paul
--- Rene Labiran <[EMAIL PROTECTED]> wrote: > i been having this error: > > "invalid command loadmodule perhaps mispelled or defined by a module > notincluded in the server configuration sshd." It would help to see the commend in context. Is it in your config file? In a script? Are you using DS

Re: Enabling a single directory as SSL enabled

2001-03-27 Thread Paul
--- Alex Moon <[EMAIL PROTECTED]> wrote: > Set the server up as secure - allowing insecure or secure > connection to the server but denying access to the the directory > you want as secure except through the secure server port 443 You know, that makes remarkably good sense. Does it work? I've

Re: Enabling a single directory as SSL enabled

2001-03-26 Thread Paul
--- Scott Brown <[EMAIL PROTECTED]> wrote: > I'm probably looking for an answer to a FAQ tell me where it's > listed, and I'll take it from there. lol -- on these lists, a lot of the time. Read back through the archives. > I'm from a MS-IIS background - and when I want to make a directory >

RE: FYI - Equifax reselling Verisign Global SGC certs at cost!

2001-03-22 Thread Paul McGarry
> Given my experiences of Verisign's customer service, I often > wonder what > exactly they do for me. Well, they gave me something to laugh about this morning. http://www.microsoft.com/technet/security/bulletin/MS01-017.asp -- Paul McGarrymailto:[EMAIL PROTE

RE: SSLSession and an HTTP session

2001-03-20 Thread Paul McGarry
E browser versions will > expire the session after 1 or 2 minutes. -- Paul McGarrymailto:[EMAIL PROTECTED] Systems Integrator http://www.opentec.com.au Opentec Pty Ltd http://www.iebusiness.com.au 6 Lyon Park RoadPhone: (02) 9878 1744 North

SSLSession and an HTTP session

2001-03-19 Thread Paul McGarry
Howdy All, I'm considering mapping SSL_SESSION_IDs to sessions on my webserver. Are there any obvious gotchas that I should be aware of before I start going down this route? Thanks. -- Paul McGarrymailto:[EMAIL PROTECTED] Systems Integrator http://www.opentec.com.au Op

Re: Very[OT]:Technical query re: scratchpad lookups for my() vars

2001-03-15 Thread Paul
Many thanks to everyone, Malcolm in particular, for humoring my curiosity and assisting my esoteric research. Hope it helped someone else, too, and sorry for cluttering up the board. But it *dod* say it was Very[OT]. ;o) Paul --- Malcolm Beattie <[EMAIL PROTECTED]> wrote: > Pa

Re: Very[OT]:Technical query re: scratchpad lookups for my() vars

2001-03-14 Thread Paul
--- Brian Ingerson <[EMAIL PROTECTED]> wrote: > Garrett Goebel wrote: > > > > From: Paul [mailto:[EMAIL PROTECTED]] > > > > > > Anybody know offhand *why* my() lexicals are supposedly faster? > Yes this is OT, but I'll contribute to th

Very[OT]:Technical query re: scratchpad lookups for my() vars

2001-03-14 Thread Paul
Anybody know offhand *why* my() lexicals are supposedly faster? If they're stored on a scratchpad for the scope, which is an array, (technically a stack of them to accommodate recursion,) then exactly how does Perl go about finding which data location you mean when you say $x for a lexical? $::x

RE: ANNOUNCE: mod_ssl 2.8.1 for Apache 1.3.19

2001-03-12 Thread Paul Rubin
That's interesting if the dbm cache is causing those problems. Unfortunately I'm not able to use the shm cache in my installation. I might try replacing dbm with Berkeley DB (www.sleepycat.com) which is an upward-compatible dbm replacement with much better concurrency support. It might be worth

Re: it runs but that's about it

2001-03-09 Thread Paul
your index.htm or ome.shtml or whatever. If it's a *that server* doesn't exist, maybe you should check to make certain your SSL server is running on a valid virtual server name? I dunno, that could be so many things. and I'm no expert. But good luck! Paul ___

port correction consequences....

2001-02-15 Thread Paul
Hi all. I have an intranet site with a core area that is public access, but the rest of the site is SSL secured. I have a PostReadRequest handler checking the port, and if it's 443 returning OK, but if not it checks to see if the requested page is in the list of nonsecure areas and exceptions. Any

[OT] make test fail [WAS mod_ssl: Init: Failed to generate temporary 512 bit RSA private key]

2001-02-09 Thread Paul
--- Lutz Jaenicke <[EMAIL PROTECTED]> wrote: > On Fri, Feb 09, 2001 at 01:04:51PM -0800, Paul wrote: > > EGD is great -- thanks for the suggestion -- but the "make test" is > > still no go. The OpenSSL manpage for RAND_egd (to which egd.pl docs > > pointed me

Re: mod_ssl: Init: Failed to generate temporary 512 bit RSA private key

2001-02-09 Thread Paul
--- Ges Seger <[EMAIL PROTECTED]> wrote: > Paul wrote: > > > Hi, all. > > > > I've been trying to add a couple of modules to my Apache, and just > > can't seem to get it to do it's thing. Forgive me if I tell you > too > &g

Re: ssl connection for a particular directory

2001-02-09 Thread Paul
> [EMAIL PROTECTED] wrote: > > Is there anybody to tell me : How can i force in the apache > > configuration file the use of a ssl connection for a particular > > directory without using virtual hosts ? You'll probably have to run a whole seperate server if you aren't using vhosts. The choice o

mod_ssl: Init: Failed to generate temporary 512 bit RSA private key

2001-02-08 Thread Paul
Hi, all. I've been trying to add a couple of modules to my Apache, and just can't seem to get it to do it's thing. Forgive me if I tell you too much, but I'm just trying to be thorough. STEP 1: === perl Makefile.PL USE_APACI=1 USE_DSO=0 EVERYTHING=1 \ DO_HTTPD=1 SSL_BASE=/usr/local/s

RE: Certs: where to get them?

2001-01-02 Thread Paul McGarry
ou are already likely to have an existing business relationship with such users). For general-public uses you more or less need a commercial cert if you don't want to scare people off. -- Paul McGarrymailto:[EMAIL PROTECTED] Systems Integrator http://www.opentec.com.au Opentec

RE: Certs: where to get them?

2001-01-02 Thread Paul McGarry
ificate for the test ids doesn't come with your average browser and therefore needs to be installed 'manually' by visitors to your site to prevent the warning messages from occurring. May as well use your own CA. -- Paul McGarrymailto:[EMAIL PROTECTED] Systems Integr

Re: Opinion on SSL/Virtual Hosting problem

2000-12-19 Thread Jason Paul McCartan
Hi Owen Thanks for the reply Owen Boyle wrote: > > Jason Paul McCartan wrote: > > Recently though the server was used to add other name-based virtual domains. > > Now the SSL through HTTPS is totally unavailable, and when we tried to view > > anything over HTTPS we get

Opinion on SSL/Virtual Hosting problem

2000-12-17 Thread Jason Paul McCartan
ing a HTTPS web page . Any help or comments are appreciated. -- Jason Paul McCartan - [EMAIL PROTECTED] CEO/President MindShift Design LLC http://www.mindshiftdesign.com __ Apache Interface to OpenSSL (mod_ssl

Re: forcing http to https with a twist

2000-12-08 Thread Paul
--- Haroon Rafique <[EMAIL PROTECTED]> wrote: > Thanks for responding, Paul, Carlos and Michael. You're welcome. =o) > Unfortunately, my situation is a catch 22. I will give you more > background to help understand my position. Good idea, lol > Here&

Re: forcing http to https with a twist

2000-12-06 Thread Paul
--- Haroon Rafique <[EMAIL PROTECTED]> wrote: > I have been reading the archives for a while now and didn't see any > solution > to my problem. So here goes... Thank in advance for any solutions > > To force people to use https instead of http, I could use the > mod_rewrite as > follows (all is

Re: Some question about modssl

2000-11-07 Thread Paul
the extra performance hit of all the 302's for correcting the protocol on restricted pages. On any high volume site, you'd want to handle it differently, but I think I've seen some posts where someone suggested mod_rewrite as an option. Paul ___

[repost]garbled redirects

2000-11-07 Thread Paul
RGE_FILES PERL_IMPLICIT_CONTEXT Built under hpux Compiled at May 5 2000 15:36:16 @INC: /usr/local/lib/perl5/5.6.0/PA-RISC1.1-multi /usr/local/lib/perl5/5.6.0 /dart10/perl5/lib/site

Re: How do browsers cache ssl pages?

2000-11-06 Thread Paul McGarry
of 300, using http sessions (which last until the browser is shutdown) to track users and I am not experiencing any such problems. I'm not doing any javascript posts to another frame, but I do use javascript to trigger gets in other frames. Can you run your app in straight http mode to

Re: unsecure objects with IE5.5

2000-11-05 Thread Paul McGarry
up the priority a bit. My testcase may seem a bit academic compared to the real world implications of the bug (making a secure site that uses javascript urls unusable unless the user turns off their security features). -- Paul McGarrymailto:[EMAIL PROTECTED] Systems Integrator http://w

Re: Ready for Prime Time ?

2000-11-01 Thread Paul McGarry
but their web-page suggests they'll help you with 'your toughest technical problems'. -- Paul McGarrymailto:[EMAIL PROTECTED] Systems Integrator http://www.opentec.com.au Opentec Pty Ltd http://www.iebusiness.com.au 6 Lyon Park Road

Re: Ready for Prime Time ?

2000-11-01 Thread Paul McGarry
asing much of their business model on support revenue I wouldn't think it would be all that difficult to find someone willing to give you support if you actually go and look. -- Paul McGarrymailto:[EMAIL PROTECTED] Systems Integrator http://www.opentec.com.au Opentec P

Re: unsecure objects with IE5.5

2000-10-31 Thread Paul McGarry
versions of the two leading browsers screw up an application I spent some time crafting out of entirely standards based technology (HTML4, CSS, ecmascript and DOM). -- Paul McGarrymailto:[EMAIL PROTECTED] Systems Integrator http://www.opentec.com.au Opentec Pty Ltd

Re: should you start ssl as a root???

2000-10-30 Thread Paul McGarry
you have to if you want it to bind to the standard port numbers for http and https). However your webserver should be changing to another user/group once it has started. Search for "User" in your httpd.conf file. -- Paul McGarrymailto:[EMAIL PROTECTED] System

Re: multiple secure name-based virtual hosts and mod_ssl

2000-10-24 Thread Paul McGarry
e doesn't care about the browser errors (eg in a dev environment). -- Paul McGarrymailto:[EMAIL PROTECTED] Systems Integrator http://www.opentec.com.au Opentec Pty Ltd http://www.iebusiness.com.au 6 Lyon Park RoadPhone: (02) 9878 1744 North Ry

multiple secure name-based virtual hosts and mod_ssl

2000-10-24 Thread Panon, Paul-Andre
e separate certificates for each vhost? If not, then why are the SSSCertificate(Key)File directives used in instead of being global? Thank you, Paul-Andre Panon __ Apache Interface to OpenSSL (mod_ssl) www.modss

Re: THE CLUELESS MORON

2000-10-16 Thread Paul McGarry
ne should drop a line to somewhere appropriate ([EMAIL PROTECTED]) in the computing services department there and get them to have a quiet word. -- Paul McGarrymailto:[EMAIL PROTECTED] Systems Integrator http://www.opentec.com.au Opentec Pty Ltd http://www.iebusiness

Re: why 8443?

2000-09-14 Thread Paul
--- [EMAIL PROTECTED] wrote: > Can someone explain the differences and why 8443 is the default? Anything below 1024 requires root privelege. Sometimes the web admin isn't root, so this is a "standard" accomodation. __ Do You Yahoo!? Yahoo! Mail - F

Re:[OT]Things are getting a bit HOT on this mailing list![advice]

2000-08-31 Thread Paul
like to buy the world a Coke, and keep it company" >:o] Later, all. And have a *really* good day. Paul __ Do You Yahoo!? Yahoo! Mail - Free email you can access from anywhere! http://mail.yahoo.com/

./configure --with-apxs=/usr/sbin/apxs

2000-08-30 Thread Paul Ingendorf
When running the configure with apxs command on mandrake 7.1 helium with apache 1.3.12 already installed from rpm I recieved the following message. Configuring mod_ssl/2.6.6 for Apache/1.3.12 ./configure:Error: The mod_ssl/2.6.6 can be used for Apache/1.3.12 only. ./configure:Error: Your Apache s

APACI Error - Argh...

2000-08-12 Thread Paul Slinski
I'm sure this has been discussed before but I can't seem to figure out why this is happening. This is a RedHat 6.2 system. The following is the command line used to compile (all paths are correct): ./configure \ --with-apache=/misc/apache_1.3.12 \ --with-ssl=/misc/openssl-0.9.5a \ --with-layout=

ssl_scache

2000-08-03 Thread Paul
I have my session caching set to about 5 minutes, and now it's working *but* -- I've had some trouble getting the system to *keep* the ssl_scache file. At this point I have a nightly process doing a ">>ssl_scache.pag" and ">>ssl_scache.dir" and "chmod 777 ssl_scache.???", but that certainly doesn

Re: Frames & Javascript -> insecure?

2000-07-31 Thread Paul
--- Lee Feigenbaum <[EMAIL PROTECTED]> wrote: > the page gives the warning > "this page contains both secure and insecure elements" This will happen if ANYTHING is accessed by a nonsecure protocol, even so much as a single banner from another site. You did say all links were relative, though..

Re: What's this error?

2000-07-20 Thread Paul
--- Mads Toftum <[EMAIL PROTECTED]> wrote: > On Wed, Jul 19, 2000 at 08:22:57AM -0700, Paul wrote: > > > > Somebody suggest a debugger? I'm feeling pretty ignorant, here, and > > unfortunately won't have any time to RTFM for a few weeks yet. > > (~m

Re: What's this error?

2000-07-19 Thread Paul
ebugger? I'm feeling pretty ignorant, here, and unfortunately won't have any time to RTFM for a few weeks yet. (~mumblegrumble~) Paul __ Do You Yahoo!? Get Yahoo! Mail – Free email you can access from anywhere! http://mail.yahoo.com/

Re: error_log message

2000-07-14 Thread Paul
* webserver active, shut it down, then try again (if that's an option). Paul __ Do You Yahoo!? Get Yahoo! Mail – Free email you can access from anywhere! http://mail.yahoo.com/ __

Re: How to ...?

2000-07-13 Thread Paul
rstand the question. Good luck. Paul __ Do You Yahoo!? Get Yahoo! Mail – Free email you can access from anywhere! http://mail.yahoo.com/ __ Apache Interface to OpenSSL (mod_ssl)

Re: Multiple secure domains against one server.

2000-07-13 Thread Paul McGarry
David Leeson wrote: > If its an RTFM, mads, please tell me gently ;-) It is, and TFM will tell you that you can't do it. It'll also tell you why. -- Paul McGarrymailto:[EMAIL PROTECTED] Systems Integrator http://www.opentec.com.au Opentec Pty Ltd

Re: HTTPS

2000-07-12 Thread Paul
nows it should be watching 8443 -- cross-port the commands, and I kinda doubt it will work. =o) *Read The Manual*, but for a quick reference check the http.conf file. Paul __ Do You Yahoo!? Get Yahoo! Mail – Free email you can access from anywh

Re: which port ? 80 or 443

2000-07-11 Thread Paul
> > Any idea why ? Does Apache need to have port 80 open always ? > > Thanks! > >Leo > Hi Leo, but what´s your Test URL? > This question can sound strange, but i have saw many users testing > SSL connections using a HTTP URL! > Bye, Danilo. A little added clarif

Re: Help : Annoying information windows in Internet Explorer ?

2000-07-07 Thread Paul
er can tell the browser not to bother him/her anymore. Some reconfigure, some just suffer through. Paul --- Gianluca Morello <[EMAIL PROTECTED]> wrote: > I configured a good working configuration of Apache-SSL, > I created my own CA. > All is up and working: > I have a web based ce

Re: Apache/mod_perl

2000-07-07 Thread Paul
Stronghold would give you professional tech support, but if all you want is SSL, check out Ralph Engelschall's mod_ssl (www.modssl.org) based on the OpenSSL protocol (www.openssl.org). It works well with vanilla Apache, and it's *free* -- thanks again, Ralph. =o) --- Pramod Sokke <[EMAIL PROTEC

  1   2   >