SSLVerifyClient require per directory context

2010-01-19 Thread aaron
trying to debug this, I noticed that if I do a hack and revert back to an earlier RPM version of openssl, openssl-0.9.8g-11.fc10.i386.rpm, that both configurations (per-server and per-directory contexts) work as expected. What might be wrong here? Aaron __

Re: SSLVerifyClient require per directory context

2010-01-20 Thread aaron
Thanks so much for your tip. Now I have a much better understanding of the problem. Aaron > Hello, > > I faced the same issue. > Actually, client authentication has been disabled on recent versions. It > has nothing to do with your configuration. > > See (on my blog): >

Apache with mod_ssl problems

2000-10-11 Thread Aaron Beveridge
ny of this.   Aaron Beveridge Systems Administrator Intrinsix Corp.    

SSL Handshake Errors.

2000-10-13 Thread Aaron Beveridge
rrupted by system[Hint: Stop button pressed in browser?!] (System error follows)[Fri Oct 13 11:46:22 2000] [error] System: Connection reset by peer (errno: 104)   Aaron Beveridge Systems Administrator Intrinsix Corp.    

RE: KeepAlive and mod_ssl

2000-10-20 Thread Aaron Beveridge
How can you turn off all keep alives for every version of IE? Aaron -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Jeffrey Burgoyne Sent: Friday, October 20, 2000 9:21 AM To: '[EMAIL PROTECTED]' Subject: RE: KeepAlive and mod_ssl I have

SSLSessionCache

2000-11-03 Thread Aaron Beveridge
could point me in the right direction or answer some of my questions, I would greatly appreciate it.   Aaron Beveridge Systems Administrator Intrinsix Corp. 33 Lyman St. Westboro, MA 01581 (508)836-4100 x375 (508)366-2772(fax) [EMAIL PROTECTED]  

mod_ssl-2.8.0 win32 build fixed

2001-02-14 Thread Aaron Ng
Hello, I had made a fixed configure.bat for mod_ssl-2.8.0 for win32 build. Here it is, http://www.modssl.org/contrib/mod_ssl-2.8.0-win32fix.zip Unzip it and replace the orignal files. Have a nice day! Aaron

Re: mod_ssl-2.8.0 win32 build fixed

2001-02-17 Thread Aaron Ng
W. Peterson, Thanks for you correction! I made a stupid typo on making the directory. :( Aaron. "W. Peterson" wrote: > > Aaron, > > Thx for your fix! I took the liberty of correcting the name of one folder: > > renamed pkg.epai to pkg.eapi > > I als

Win32 fix for mod_ssl-2.8.0

2001-02-23 Thread Aaron Ng
Hello,     I had made a fixed configure.bat for win32 build.   Unzip and replace the orignal files.   Here is the link,   http://www.modssl.org/contrib/mod_ssl-2.8.0-win32fix.zip     Have a nice day!   Aaron.

Fix win32 build for mod_ssl 2.8.0

2001-02-23 Thread Aaron Ng
Hello, I had make a fixed configure.bat for win32 build. Unzip it and replace the orignal files. I also include a 'awk.exe' for the new makefil.win. Aaron. __ Apache Interface to OpenSS

Another IE problem

2001-12-05 Thread Aaron Gee
ed until our last day of testing because most of our testers have win2k machines. Any advice? Aaron Gee BestNet of Palm Coast __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing Li

RE: Another IE problem

2001-12-05 Thread Aaron Gee
> Adding the following two lines solved the problem though: > > SSLSessionCache shm:/var/log/http/ssl_gcache_data(512000) > SSLSessionCacheTimeout 300 > > and the setup has been working ever since (about 6 months). I have tried all of the following (commented out is not currently used) None made

RE: OpenSSL I/O error causing "Page cannot be displayed" in browser

2001-12-18 Thread Aaron Gee
We finally gave up. In our new install Win 98 and 95 IE users are simply SOL (Sh** Out of Luck) unless they use another browser. Win 2000 and SOME NT machines seem to work fine. The confusing thing is that the build numbers on IE are inconsistent. Build 5.05.blah.blah.blah may work on NT somet

RE: OpenSSL I/O error causing "Page cannot be displayed" in browser

2001-12-18 Thread Aaron Gee
We tried that also. Below is a short list of the combinations and variations we have tried Notice some lines from the conf file do the same as others, just trying all possibilities the comments (#) in front are my addition. I have tried almost every iteration of the following to get SOMETHING to

Network I/O errors w/ POST method

1999-03-12 Thread Aaron Turner
to an older version of mod_ssl? I'm running Apache 1.3.4. Thanks. -Aaron Turner __ Apache Interface to SSLeay (mod_ssl) www.engelschall.com/sw/mod_ssl/ Official Support Mailing List [EMAIL PROTECTED] Auto

Re: ANNOUNCE: mod_ssl 2.2.5-1.3.4

1999-03-19 Thread Aaron Turner
Now I get: "An I/O error occured during security authorization. Please try your connection again." Again, it only occursing during POST's, static and PHP pages come up fine. I'm using Apache::AuthzDBI, and I turned debugging on, but didn't get anything in my log at all. It's like mod_perl ne

Re: ANNOUNCE: mod_ssl 2.2.5-1.3.4

1999-03-21 Thread Aaron Turner
On Sun, 21 Mar 1999, Ralf S. Engelschall wrote: > On Fri, Mar 19, 1999, Aaron Turner wrote: > > > Now I get: > > > > "An I/O error occured during security authorization. Please try your > > connection again." > > > > Again, it only occurs

Multiple SSL and non-SSL vhosts question...

1998-12-03 Thread Aaron Bell
rName ernie.etc.etc DocumentRoot /pkg/httpd/docroot/ernie ServerName ernie.etc.etc DocumentRoot /pkg/httpd/docroot/ernie ... SSL directives... ... Any assistance greatly appreciated. Aaron J. Bell Business Process Re-Engine

Core dump

1999-04-16 Thread Aaron Turner
lseek(3, 0, SEEK_SET) = 0 getpid()= 28961 read(3, "-BEGIN RSA PRIVATE KEY-\n"..., 1024) = 963 getpid()= 28961 getpid()= 28961 --- SIGSEGV (Segmentation

Re: mod_ssl/POST error

1999-04-17 Thread Aaron Turner
Dan, I think you're probably running an old version of mod_ssl. 2.2.7 and above seem to have fixed that bug. -Aaron On Fri, 16 Apr 1999, Dan Parsons wrote: > I'm implementing a SSL-based order page, but I can't do the cgi via > https... this is the error I get: &g

RE: Apache ssl question

1999-05-19 Thread Aaron Woldman
Aaron Woldman Vision Net Ltd -Original Message- From: Ralf S. Engelschall [SMTP:[EMAIL PROTECTED]] Sent: Wednesday, May 19, 1999 10:48 AM To: [EMAIL PROTECTED] Subject:Re: Apache ssl question On Wed, May 19, 1999, Vision Net Administration wrote: > Hi all, I have trie

Re: ANNOUNCE: mod_ssl 2.4.8 (Important Bugfix)

1999-01-03 Thread Aaron Turner
refix=/home/https \ --exec-prefix=/usr/local/https \ --enable-module=ssl \ --runtimedir=/home/https/run sudo make sudo make install su - /usr/local/https/bin/httpd -DSSL *boom* Thanks... -- Aaron Turner, Core Developer http://vodka.linuxkb.org/~aturner/ L

Mac OS X Server, Apache, mod_ssl, and OpenSSL, some kinda problem

2000-03-16 Thread Aaron Faby
have been administering apache web servers on linux for 2 years. Thanks in advance!!! 0,0,028L;56L;84L;112L;140L;168L;196L;224L;252L;280L;308L;336L ___ | | | Aaron Faby| | [EMAIL PROTECTED] | | System/Network

Using the same certificate on multiple servers

2000-05-03 Thread Aaron Faby
I would like to know if its possible to use the same certificate on multiple apache servers. We would like to have multiple servers being load balanced. I've heard this can be done but Im not sure how to do it. Thanks! Aaron Faby [EMAIL PROT

Another Virtual Host Question

2000-06-14 Thread Aaron Faby
I have to use non-standard SSL ports? Thanks in advance! Aaron Faby System Administrator AmericanManufacturers.com [EMAIL PROTECTED] __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing

mod_ssl/mod_jk failure with client authentication on

2003-03-07 Thread Aaron Stromas
e: done Connection: Client IP: 164.95.119.43, Protocol: SSLv3, Cipher: EXP1024-RC4-SHA (56/128 bits) Initial (No.1) HTTPS request received for child 5 (server www-sps.sps.fms.treas.gov:443) I've spent a couple of days trying to figure this out and have not made any progress. Can anyone he

Re: mod_ssl/mod_jk failure with client authentication on

2003-03-07 Thread Aaron Stromas
I realised that I included irrelevant log snipet from the SSL log. Please see the correction below. Aaron Stromas said: > Hi, > > I apologise for cross-posting - I'm really not sure which component is > at fault, looks like mod_ssl but possibly mod_jk. BTW, is there a list >

Need SSL debug help

2003-03-11 Thread Aaron Stromas
ar/2003 07:42:47 00747] [error] SSL handshake timed out (client 164.95.119.43, server www-sps.sps.fms.treas.gov:443) -- Aaron Stromas | "Tik-tik-tik!!!... ja, Pantani is weg..." [EMAIL PROTECTED]| BRTN commentator +1 (301) 493 4933 | L'Alpe d'Huez http:/

Re: self signed certificate

2003-03-13 Thread Aaron Stromas
lso remember having to initialise the serial file: echo 00 > serial HTH > > Jan > > __ > Apache Interface to OpenSSL (mod_ssl) www.modssl.org > User Support Mailing List [EMAIL

Re: private key not found

2003-03-13 Thread Aaron Stromas
strator > Pelathe Community Resource Center > > > ______ > Apache Interface to OpenSSL (mod_ssl) www.modssl.org > User Support Mailing List [EMAIL PROTECTED]

Re: private key not found

2003-03-13 Thread Aaron Stromas
ww.modssl.org User Support Mailing List >> > [EMAIL PROTECTED] Automated List Manager >> > [EMAIL PROTECTED] > > -- > A. Putnam > Assistant IT Administrator > Pelathe Community Resource Center > >

Re: private key not found

2003-03-13 Thread Aaron Stromas
[EMAIL PROTECTED] >> Automated List Manager[EMAIL PROTECTED] > > -- > A. Putnam > Assistant IT Administrator > Pelathe Community Resource Center > > > __ > Apache Int

Re: How to 'start' mod ssl?

2003-03-17 Thread Aaron Stromas
r/sbin/httpd -t > Syntax OK > #->/usr/sbin/httpd -S > VirtualHost configuration: > Syntax OK > > I'm (obviously) new to this whole thing, so I'd be grateful if anyone > who's been through this before can steer me in the right direction. > > Thanks for your time > > E > > --- > _

client certificates won't verify under Apache

2005-09-04 Thread Aaron Turner
correct perms (files are 644 and directories 755). I've even tried copying over the aaron_turner.crt to the conf/ ssl.crt directory and regenerating the hashes, but that doesn't help. I can only assume I'm missing something horribly obvious, but I've been working on thi

Re: Mod_ssl and how to reduce overhead

2005-09-26 Thread Aaron Turner
nk and hardware (load balancer, multiple boxes) to pull this off. I gotta ask though, just what are you doing where you expect 100K people trying to download a 15MB file all at the same time? You working for Microsoft and planning the next security tuesday patch update or something? :) -

SSL + Basic Auth

2007-07-25 Thread Aaron Dalton
t(password) FROM users WHERE username=%s" AuthName "Super Duper Games" Require valid-user - --END CONFIG-- - -- Aaron Dalton | Super Duper Games [EMAIL PROTECTED] | http://superdupergames.org -BEGIN PGP S

Re: SSL and Virtual hosts?

2007-08-01 Thread Aaron Dalton
t per IP:port combination. http://httpd.apache.org/docs/2.0/ssl/ssl_faq.html#vhosts -- Aaron Dalton | Super Duper Games [EMAIL PROTECTED] | http://superdupergames.org smime.p7s Description: S/MIME Cryptographic Signature

Re: SSL and Virtual hosts?

2007-08-02 Thread Aaron Dalton
Glyn Astill wrote: > Hi Aaron, > > As I uderstand, the docks say you can't have name based virtual hosts > because SSL is alreday serving the page before apache sees any http > header? > That is essentially correct. > In the example I posted, https://mail.mydomain.n

SSL + Basic Auth

2007-09-02 Thread Aaron Dalton
AuthName "Super Duper Games" Require valid-user --END CONFIG-- -- Aaron Dalton | Super Duper Games [EMAIL PROTECTED] | http://superdupergames.org smime.p7s Description: S/MIME Cryptographic Signature

Apache and mod_ssl

2007-09-04 Thread Aaron Smith
em to locate it. Anyone have any ideas on what else I might need to look at? Aaron ---- Aaron Smith[EMAIL PROTECTED] System Administrator (269) 337-7496 Kalamazoo College

Apache and mod_ssl (extra info)

2007-09-04 Thread Aaron Smith
So I tried something kind of new. I completely removed the directory with the non-functioning apache install. I went back to the source, did a make clean, a new configure using the same parameters as before: ./configure --prefix=/opt/apache3 --enable-auth-dbm=shared --enable-exp

Mod-ssl and Apache

2007-09-11 Thread Aaron Smith
known protocol speaking not SSL to HTTPS port!? [Tue Sep 11 10:10:43 2007] [info] Connection to child 2 closed with abortive shutdown(server ourserver.name.scrubbed:8040, ) Thoughts anyone? -Aaron

RE: Mod-ssl and Apache

2007-09-11 Thread Aaron Smith
Considering this a mailing list for modssl 1.x not 2.x, which is part of the apache distribution... you may need to seek help on the apache mailing lists. modssl 1.x =! modssl 2.x On 9/11/07, Aaron Smith <[EMAIL PROTECTED]> wrote: > > > > > Not sure if these

Re: How to redirect http to https on same server?

2007-10-11 Thread Aaron Dalton
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Bernard Barton wrote: > I'm trying to redirect users from http://vhost.mydomain.com to > https://vhost.mydomain.com using this RewriteRule: I just use: RedirectPermanent / https://my.host.com - -- Aaron Dalton | Super Duper G

Re: How to redirect http to https on same server?

2007-10-11 Thread Aaron Dalton
er with all the ssl stuff). Can you copy your http://myhost config? -- Aaron Dalton Super Duper Games http://superdupergames.org __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Suppo

Re: Will these name based virtual host work with SSL?

2007-10-16 Thread Aaron Dalton
pache.org/docs/2.2/ssl/ssl_faq.html#vhosts http://httpd.apache.org/docs/2.2/ssl/ssl_faq.html#vhosts2 -- Aaron Dalton | Super Duper Games [EMAIL PROTECTED] | http://superdupergames.org __ Apache Interface to OpenSSL (mod_ss

Re: Apache with Mod ssl on a system running apache on freebsd

2008-01-24 Thread Aaron Dalton
e to down your web server to do the upgrade. That is unavoidable. -- Aaron Dalton | Super Duper Games [EMAIL PROTECTED] | http://superdupergames.org __ Apache Interface to OpenSSL (mod_ssl) www.m

Re: Apache with Mod ssl on a system running apache on freebsd

2008-01-25 Thread Aaron Dalton
[EMAIL PROTECTED] wrote: On Thu, 24 Jan 2008, Aaron Dalton wrote: Date: Thu, 24 Jan 2008 07:30:47 -0700 From: Aaron Dalton <[EMAIL PROTECTED]> Reply-To: modssl-users@modssl.org To: modssl-users@modssl.org, [EMAIL PROTECTED] Subject: Re: Apache with Mod ssl on a system running apa

Re: Apache with Mod ssl on a system running apache on freebsd

2008-01-26 Thread Aaron Dalton
[EMAIL PROTECTED] wrote: Aaron I am not able to remove or deinstall because of the dependencies, that is the problem I have built apache with mod_ssl but when we try a make deinstall reinstall, it says it can not deinstall bacuse it has dependencies so I am not sure what to do now Can