Re: Migrating cert from Sun Web Server

2005-08-09 Thread Phil Ehrens
greatly appreciated! Look here (search for pk12util): http://docs.sun.com/source/816-5682-10/esecurty.htm -- Phil Ehrens <[EMAIL PROTECTED]>| Fun stuff: The LIGO Laboratory, MS 18-34 | http://www.ralphmag.org California Institute of Technology| http://www.yellow5.co

Re: Mod_ssl and how to reduce overhead

2005-09-26 Thread Phil Ehrens
Aaron Turner wrote: > > I gotta ask though, just what are you doing where you expect 100K > people trying to download a 15MB file all at the same time? You > working for Microsoft and planning the next security tuesday patch > update or something? :) That or he has the video of Gates getti

Re: Mod_ssl and how to reduce overhead

2005-09-26 Thread Phil Ehrens
Pigeon wrote: > Ok, lets assume I can get a network connection with: > A)10mbit > B)100mbit > C)1000mbit > > And I will have 10k concurrent downloads (let us throw out 100k for now.. > because i can alwasy scale up figures if we get a base). > > (The reason I say 10k concurrent is because we hav

Re: Back in the ModSSL group?

2006-01-23 Thread Phil Ehrens
BJ Swope wrote: > Until the "me toos" this list received about 1 mail a month... And generally about old versions of the module. -- Phil Ehrens <[EMAIL PROTECTED]>| Fun stuff: The LIGO Laboratory, MS 18-34 | http://www.ralphmag.org California Institute of T

Re: CRL Checking Uses Excessive Memory

2006-04-21 Thread Phil Ehrens
www.modssl.org > User Support Mailing List modssl-users@modssl.org > Automated List Manager[EMAIL PROTECTED] -- Phil Ehrens <[EMAIL PROTECTED]>| Fun stuff: The LIGO Laboratory, MS 18-34 | http://www.ralphmag.org

Re: ssl trouples

2006-05-22 Thread Phil Ehrens
Markus wrote: > Made all the ca.key and the server.key and sign it via sign.sh everthing > looked good so far. > > then the misery begins. > > ./configure --with apache... --with-ssl --with-mm > --with-crt=/var/local/certs --with -key=/var/local/private > --prefix=../apache_1.3.35 --enabled-

Re: ssl trouples

2006-05-22 Thread Phil Ehrens
Markus wrote: > Phil Ehrens wrote: > > >Markus wrote: > > > > > >>Made all the ca.key and the server.key and sign it via sign.sh everthing > >>looked good so far. > >> > >>then the misery begins. > >> > >>./configure

Re: Detecting if https is used from within a .conf file

2006-10-03 Thread Phil Ehrens
Toomas Aas wrote: > > I was thinking of putting this large block of directives into separate > file and Include it in both vhost sections, to tidy up my main config > file. But in order to do that, I would need to define some logic in this > file for those cases where http and https need to be

Re: Does Mod_SSL use SSL_get_shared_ciphers()?

2006-10-11 Thread Phil Ehrens
Stanley Laufer wrote: > Does anyone know if Mod_SSL uses the SSL_get_shared_ciphers() > function from OpenSSL? > > As you may know a buffer overflow has been detected in that > function in OpenSSL versions prior to 0.9.8d. > > I'm trying to find out if Mod_SSL uses the vulnerable function. I jus

Re: Does Mod_SSL use SSL_get_shared_ciphers()?

2006-10-24 Thread Phil Ehrens
Per Olausson wrote: > > >Phil Ehrens: > >I just checked a couple different versions and did not see that > >function. > > I posted a question about this to the apache security mailbox, but > nobody responded. I guess that is inline with the policy for that > m

Re: Does Mod_SSL use SSL_get_shared_ciphers()?

2006-10-25 Thread Phil Ehrens
bal text symbol. > t Local text symbol. > > Regards, > > > Per > > Phil Ehrens wrote: > >Per Olausson wrote: > > > >>>Phil Ehrens: > >>>I just checked a couple different versions and did not see that > >>>function. > >&g

Re: cant start ssl on apache2

2007-04-27 Thread Phil Ehrens
C2007E > __ > Apache Interface to OpenSSL (mod_ssl) www.modssl.org > User Support Mailing List modssl-users@modssl.org > Automated List Manager[EMAIL PROTECTED] -- Phil Ehrens

Re: cant start ssl on apache2

2007-04-27 Thread Phil Ehrens
javier rojas wrote: > 2007/4/27, Phil Ehrens <[EMAIL PROTECTED]>: > >Are you calling apachectl using the full path to the apachectl > >that knows where THOSE conf files are? > > > >Sorry for top-posting... It just seemed like the right thing to do > >in this

Re: cant start ssl on apache2

2007-04-27 Thread Phil Ehrens
t;logs/httpd.pid" > -D DEFAULT_SCOREBOARD="logs/apache_runtime_status" > -D DEFAULT_LOCKFILE="logs/accept.lock" > -D DEFAULT_ERRORLOG="logs/error_log" > -D AP_TYPES_CONFIG_FILE="conf/mime.types" > -D SERVER_CONFIG_FILE="conf/httpd