Re: how can i consider it normal?

2004-01-26 Thread marius popa
[EMAIL PROTECTED] wrote: [Thu Jan 22 17:02:25 2004] [error] mod_ssl: SSL handshake interrupted by system [Hint: Stop > !] (System error follows) I thik the message says it could be a normal ssl client error :stop button pressed in browser?

how can i consider it normal?

2004-01-26 Thread diego . veiga
[Thu Jan 22 17:02:25 2004] [error] mod_ssl: SSL handshake interrupted by system [Hint: Stop button pressed in browser? !] (System error follows) [Thu Jan 22 17:02:27 2004] [error] mod_ssl: SSL handshake interrupted by system [Hint: Stop button pressed in browser? !] (System error follows) [Thu

Re: How can I tell if mod_ssl is installed with Apache

2002-11-16 Thread R. DuFresne
These directives: --enable-module=ssl --enable-shared=ssl, made mod-ssl as a loadable module, it's not part of apache's core binary, so look in //libexec/ for the mdoule you built to load on the httpd.conf file; libssl.so. Additionally, I suggest you read through all the documentation as well,

How can I tell if mod_ssl is installed with Apache

2002-11-15 Thread rdkurth
I configured and installed mod_ssl with Apache but it does not seam to be working. When I run the ./httpd -l comand on Apache it does not show that mod_ssl.c is installed in Apache this is a list of every thing that is in there. Should it be in there? http_core.c mod_env.c mod_log_config.c m

RE: How can I enable IDEA and RC2 ciphers ?

2001-09-04 Thread John . Airey
>-Original Message- >From: Rajidhar Etta [mailto:[EMAIL PROTECTED]] >Sent: 03 September 2001 11:36 >To: [EMAIL PROTECTED] >Subject: How can I enable IDEA and RC2 ciphers ? > > >Hi all, >We have the following platform ( Oracle HTTP server: part of >Oracl

Re: How Can I enable IDEA and RC2 ciphers?

2001-09-04 Thread Alex Pircher
Maybe you've compiled openssl with the 'no-idea'-flag, as I did, because IDEA is patended in USA, Europe, ... Greetings, Alex --- Rajidhar Etta <[EMAIL PROTECTED]> schrieb: > Hi all, > We have the following platform ( Oracle HTTP server: part of Oracle iAS > 9i) > --->Apache/1.3.12 (Unix)

How can I enable IDEA and RC2 ciphers ?

2001-09-03 Thread Rajidhar Etta
Hi all, We have the following platform ( Oracle HTTP server: part of Oracle iAS 9i) --->Apache/1.3.12 (Unix) ApacheJServ/1.1 mod_ssl/2.6.4 OpenSSL/0.9.5a And in httpd.conf, I've used the following directive so that only medium and high encryption is enabled ( 128 bit or more ) ---> SSLCipherS

How Can I enable IDEA and RC2 ciphers?

2001-09-03 Thread Rajidhar Etta
Hi all, We have the following platform ( Oracle HTTP server: part of Oracle iAS 9i) --->Apache/1.3.12 (Unix) ApacheJServ/1.1 mod_ssl/2.6.4 OpenSSL/0.9.5a And in httpd.conf, I've used the following directive so that only medium and high encryption is enabled ( 128 bit or more ) ---> SSLCi

How can I get the file server.key containing private key?

2001-03-16 Thread Zou Bin
Dear Dir, I have a problem with using MOD_SSL in APACHE server. I created a keystore and certificate request with the keytool of Java, and received from Verisign the correct reply to our certificate request, that is, I have had the server.crt file or a real digital certificate. To use a digit

How can I get the fingerprint of the certificate issuer

2001-01-23 Thread Tim Tassonis
Hi all I want to write a cgi-bin program and be able reliably distinguish client's certificates. If I only allow user certificates from one CA, I could simply use SSL_CLIENT_M_SERIAL, SSL_CLIENT_V_START, SSL_CLIENT_V_START and SSL_CLIENT_VERIFY=SUCCESS in order to identify and check the certific

How can I setup this proxy

2000-09-20 Thread ApacheSSL
nt to keep a directory "keep" on proxy.mycompany.com, how can I do that? for example http://proxy.mycompany.com/index.html refer to server.mycompany... but http://proxy../keep/index.html doesn't get from server.mycompany.com and get the page from proxy.mycompnay.com Thanks in adva

Re: How can I secure private keys?

2000-08-30 Thread Mads Toftum
On Wed, Aug 30, 2000 at 10:40:01AM -0500, [EMAIL PROTECTED] wrote: > > I could probably burn the keys on to a CD and use that when I reboot. The > rest of the time, I could store the CD in a secure location. > And if you're really paranoid you could unplug your network cable, start apache with

Re: How can I secure private keys?

2000-08-30 Thread [EMAIL PROTECTED]
I agree, NFS would be a bad idea. I could probably burn the keys on to a CD and use that when I reboot. The rest of the time, I could store the CD in a secure location. I have also been reading about how it is relatively easy to scan through memory (assuming you have root permission) and loca

Re: How can I secure private keys?

2000-08-30 Thread Mads Toftum
On Wed, Aug 30, 2000 at 09:53:04AM -0500, [EMAIL PROTECTED] wrote: > Does anyone have any information about how to secure the private keys for > my websites? If someone manages to hack my webserver, I don't want them to > be able to access my private keys. They will still be loaded in memory a

How can I secure private keys?

2000-08-30 Thread [EMAIL PROTECTED]
Does anyone have any information about how to secure the private keys for my websites? If someone manages to hack my webserver, I don't want them to be able to access my private keys. I would like to store the private keys on a separate high-security system and have mod_ssl read them via a ne

Re: FAQ "How can I get rid of the pass-phrase dialog at Apache ?"

2000-07-12 Thread Mads Toftum
On Wed, Jul 12, 2000 at 12:52:04PM -0400, Silesky Marketing Inc, Support wrote: > Hello, > > I found the answer for that question in the FAQ, and it says : > > "If you point your server at this file it will not prompt you for a > pass-phrase" > > But, what does it mean to "point your server at

FAQ "How can I get rid of the pass-phrase dialog at Apache ?"

2000-07-12 Thread Silesky Marketing Inc, Support
Hello, I found the answer for that question in the FAQ, and it says : "If you point your server at this file it will not prompt you for a pass-phrase" But, what does it mean to "point your server at this file" ? (we managed to create the "file") Thank you vey much, Laurent

Re: How can I create certificates and keys using *.bat files? Please help.

2000-06-13 Thread Paul
--- Derek DeMoro <[EMAIL PROTECTED]> wrote: > I need to be able to create keys and certificates using *.bat files? > How can I do that? Are you using OpenSSL? It has a command-line interface that can be executed from a *.bat; check out http://www.openssl.org/docs/apps/genrs

How can I create certificates and keys using *.bat files? Please help.

2000-06-12 Thread Derek DeMoro
I need to be able to create keys and certificates using *.bat files?  How can I do that?   Derke   Derek DeMoroChief Technical OfficerBallotDirect(650) 799-8490

How can I tag the CA certificate in the browser database?

2000-06-09 Thread Tran Ngoc Thuan An
" And when I opened Netscape Comunicator and connected to my SSL-aware Apache server (use https://servername), I'v got this message: " Netscape is unable to locate the server servername" 2.Moreover, with IE how can I load the CA certificate? I configed my SSL-aware Apache s

Re: How can I...

1999-12-10 Thread Tim (not representing his employer's opinions)
Winged Wolf wrote: > > I'm going to go out on a limb here and point everyone at Bruce Schneier's > paper: > > http://www.counterpane.com/pki-risks.html Yup, read it. I never was really much into trusting Verisign, Thawte, etc; however when YOU run the henhouse (eg. roll your own CA in-house, a

Re: How can I...

1999-12-09 Thread Winged Wolf
I'm going to go out on a limb here and point everyone at Bruce Schneier's paper: http://www.counterpane.com/pki-risks.html "Ten Risks of PKI: What You're Not Being Told About Public Key Infrastructure", by C. Ellison and B. Schneier. Essentially, it contends that there's no one 'guarding the he

Re: How can I...

1999-12-09 Thread Tim (not representing his employer's opinions)
Kenneth Mutka wrote: > > ... run mod_ssl without having Certificates? I just want the crypto from the > package, nothing else. > Is that possible? > If not, what should I choose instead? You can write your own client and server with the openssl package. However, the notion of a valid certificat

Re: How can I...

1999-12-09 Thread Jeffrey Altman
> > >>> Kenneth Mutka <[EMAIL PROTECTED]> 12/08/99 07:55AM >>> > >... run mod_ssl without having Certificates? I just want the crypto > from the > >package, nothing else. > >Is that possible? > >If not, what should I choose instead? > > That's not possible for *any* Public-Key cryptography syste

How Can I : Single Sign-on ?

1999-12-08 Thread Jean-Luc Rochat
Hi, I configured mod_ssl for requiring a user certificate in a location. Every time I access an URL in this location I am asked for a certificate (good !) Every sublevel asks again for a certificate , all the time :-( Is there a way to create an "authenticated user session" after the first han

Re: How can I...

1999-12-08 Thread Simon Weijgers
On Wed, 8 Dec 1999, Cliff Woolley wrote: > >>> Simon Weijgers <[EMAIL PROTECTED]> 12/08/99 10:18AM >>> > > >You can infact, but you'll have to recompile OpenSSL with Anonymous > DH > >(diffie-helman) enabled. > > Ahh, true enough. I stand corrected. I was only talking about > RSA-style encryp

Re: How can I...

1999-12-08 Thread Cliff Woolley
>>> Simon Weijgers <[EMAIL PROTECTED]> 12/08/99 10:18AM >>> >You can infact, but you'll have to recompile OpenSSL with Anonymous DH >(diffie-helman) enabled. Ahh, true enough. I stand corrected. I was only talking about RSA-style encryption, not even thinking about ADH. I never use ADH (becau

Re: How can I...

1999-12-08 Thread Cliff Woolley
>>> Kenneth Mutka <[EMAIL PROTECTED]> 12/08/99 07:55AM >>> >... run mod_ssl without having Certificates? I just want the crypto from the >package, nothing else. >Is that possible? >If not, what should I choose instead? That's not possible for *any* Public-Key cryptography system unless the clien

Re: How can I...

1999-12-08 Thread Simon Weijgers
On Wed, 8 Dec 1999, Kenneth Mutka wrote: > ... run mod_ssl without having Certificates? I just want the crypto from the > package, nothing else. > Is that possible? > If not, what should I choose instead? You can infact, but you'll have to recompile OpenSSL with Anonymous DH (diffie-helman) enab

How can I...

1999-12-08 Thread Kenneth Mutka
... run mod_ssl without having Certificates? I just want the crypto from the package, nothing else. Is that possible? If not, what should I choose instead? Regards, Kenneth __ Apache Interface to OpenSSL (mod_ssl)

[BugDB] How can I ... (PR#220)

1999-07-28 Thread modssl-bugdb
Full_Name: Schwartz Jean-Etienne Version: 2.3.9-1.3.6 OS: all supported OS Submission from: caubit-p.fraz.bull.fr (129.181.13.93) I am actually writing a module whitch try to implement a full Single-SignOn. Synopsys: 1) A user authenticate against a security server and, depending of the conf