How to import self signed certificate as trusted certificate ?

Hi all. I've created a self-signed certificate for testing purposes. I would like to import that into my IE5 and Ntescape7.1 browsers as trusted certificate so that the browser will accept the applet requests implicitly. Can someone point me in the right direction please i.e. read-ups, howto

Re-direct in vhost

Hi all. Currently I've one vhost on Port 443 and while others listen on Port 80. I would like to test the scenario of putting *everything* on openSSL ie listening on Port 443. Do I assume right that all I need is a "redirect" from the Port 80 vhost to Port 443 ? TIA :-) ___

Re: SET payload factor ???

Hiya. How's it going Dave ? Remember we were talking about ATM packet and payload factor ? U mentioned something like payload to o/head @ 48/5. Were u talking about S.E.T. ? Am I looking at the right thing for very *high* volumn, short duration, 24x7 operations ? There's actually a small box insid

howto fossick around in archive

Hiya. How does one get to the archive to look around ? __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager

Re: configuration question

. But that's the subject of another mail and I've got > some coffee getting cold over here. ;-) > > Hope this didn't glaze your eyes over. :-) > Best~ > -dsp > > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf O

Re: configuration question

Hi Boyle, I've been debating with myself over whether to encrypt everything, that's a cogent argument you have offered. I have a few questions myself : (1) assuming an openssl encrypted packet is bigger than a plain text one, would mod_gzip shrink it significantly to warrant the effort? (2) and wou

high-grade vs low-grade encryption with MD5 and DES

Hi all. Verisign currently has a discount on both a high grade (128bits) SSL encrypted and a low grade (40bits) SSL encrypted certificates. The former is priced at US$895 and the latter at US$1395. I noticed some sites also present Verisign certificates with low-grade, 54-bits encryption from their

Re: high-grade vs low-grade encryption with MD5 and DES

dering if the market is moving to use such a longer bits > key. > > -Kiyoshi > Kiyoshi Watanabe > > > Practicality : do not use 4096 bits server side private key. No, not even > > 2048. > > Key size larger than 1024 is not supported by those bollocky client > > b

How to installing a "trusted" certificate in Netscape

Hi all. This may be a trivial question... I have signed my own ceritificate. How do I "install" that as a "trusted" certificate so that Netscape6 doesn't throw the warning screen that I have been presented with a certificate form an untrusted site. _

How does JSSE interact with OpenSSL ?

Hi All, Well it seems to me with java's URLConnection as distinct from HttpURLConnection, *some* data slip through un-encrypted. Oddly, only data declared as "text" e.g. Oracle's VARCHAR2, slip through into the Net in human readible form. First, I thought JSSE is part of the standard install for j2

It's alive : thank-you all, for the assistance

I have my Apache2+mod_ssl talking OpenSSL and working with my Tomcat now. Thanks to all of you who helped, especially to [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] __ Apache Interface to OpenSSL (mo

FRUSTRATION : SSL throws SSL23_GET_SERVER_HELLO error

e.com/[EMAIL PROTECTED]/msg16205.html http://forums.devshed.com/archive/15/2001/11/4/25897 Hope they help. Regards, Nauman ___ Citibank N.A., 111 Wall St., New York, NY Ph: +1-212-657-1070 (w), +1-718-951-0508 (h) Fax: +1-212-657-1645 -Original Message-

Re: high-grade vs low-grade encryption with MD5 and DES

Practicality : do not use 4096 bits server side private key. No, not even 2048. Key size larger than 1024 is not supported by those bollocky client browsers. Netscape and MSIE4 come to mind. Regards, Arthur Chan - Original Message - From: "Dave Paris" <[EMAIL PROTECTED]

Re: high-grade vs low-grade encryption with MD5 and DES

" is > more accurate. If you're going to use SSL and you're dealing with data > that needs to be protected longer than 5 minutes, use 128bit SSL. > > -dsp > > On Sunday, Aug 10, 2003, at 02:25 US/Eastern, Arthur Chan wrote: > > > Hi all. > > Veris

FRUSTRATION : SSL throws SSL23_GET_SERVER_HELLO error

> Problem #1: your OpenSSL doesn't have the error messages loaded so you're > getting a rather non-descriptive error message. No big deal, it just > means you have to look harder to find out what the error means. How to I load them in order to get a more meaningful description ??? I've recompiled

Browser specific OpenSSL mod_ssl problem !

Hi All. Help. Netscape is driving me to drinks! Problem : Netscape 7.1 will not "redirect" from http://my.first.dom to https://my.secure.dom, claims it is transmitting in clear text (rather than encrypted). Objective : from first web-site, create a linik to a secure web-site inside index.html usin

But why does it work now : SSL throws SSL23_GET_SERVER_HELLO error

Hi Yoshi. I think that works ! Instead of [ssl] # openssl s_client -connect localhost:443 -state -debug I key in [ssl] # openssl s_client -connect 192.168.100.10:443 -state -debug and it worked, no SSL23_GET_SERVER_HELLO error, why is that ??? I am still *VERY CONCERNED* that the output from TCPDUM

SSL throws SSL23_GET_SERVER_HELLO error

Hi All. When I run the following line command : [ssl] # openssl s_client -connect localhost:443 -state -debug I get this error message : ... SSL_connect:error in SSLv2/v3 read server hello A 1565:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:460: ... Looking at lin

Any tools to test https+mod_ssl ???

Hi All. Further to my earlier comments that httpd + mod_ssl seems to be ignored by Netscape 7.1 After logging-in and accepting the certificate, 7.1's liitle lock remains open and says I am transmitting in clear text. Yet Netscape 6.2, MSIE5 and Mozilla all accepted the certificate and they say the

test subscription - don't reply

testing subscription __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED]

Instruction on Apache - SSL - Jserv on Unix

have downloaded the following src apache_1.3.19 ApacheJserv-1.1.1 mod_ssl-2.8.2-1.3.19 openssl-0.9.6a Any help would be greatly appreciated. Thanks. begin:vcard n:;Allen x-mozilla-html:FALSE adr:;; version:2.1 email;internet:[EMAIL PROTECTED] fn:Allen Chan end:vcard

apache+ssl+jserv

Hi:   I'm not sure if this is the right address to ask.  I'm trying to download a preconfigured apache with SSL and Jserv from www.modssl.org/contrib/ web site.  But all of the binaries are in .rpm extension.  Anyone knows how to extract the files.  Appreciate your help.   Thanks.

Problem request

and getversign instead of    getca     4.This saves the Secure Server ID to the file SSLTOP/certs/hostname.cert     5.Remove the temporary file. For example: # rm/tmp/cert.tmp     6.Restart the server. Thanks! Edwin Chan

Re: apachectl startssl

you can find the answer in the documentation on www.modssl.org Sun JunXu wrote: > hi,all: > when I do "apachectl startssl" , it would ask me password, I think it will > be not convenient , anyway to pass this? > > thanks a lot. > > sincerely > sun > _