RE: There appears to be a major memory leak in mod_ssl/OpenSSL

2004-01-30 Thread Avery, Ken
Joe, Ken BTW - I am using 2.0.48, I just download the latest and see the problem. -Original Message- From: Joe Orton [mailto:[EMAIL PROTECTED] Sent: Friday, January 30, 2004 11:13 AM To: Avery, Ken Cc: [EMAIL PROTECTED] Subject: Re: There appears to be a major memory leak in mod_ssl

RE: There appears to be a major memory leak in mod_ssl/OpenSSL

2004-01-30 Thread Avery, Ken
memory leak in mod_ssl/OpenSSL On Fri, Jan 30, 2004 at 11:02:06AM -0600, Avery, Ken wrote: I have been tracking this down for a couple of weeks and thought it was in the code my company is developing and it appears that is not the case. In order to eliminate our code from the mix and isolate

Re: mod_ssl kerberos ?

2003-11-11 Thread Mads Toftum
On Mon, Nov 10, 2003 at 12:58:33PM +0100, Daniel Struck wrote: Hello, I want to ask if the following setup is possible: Clients will be authenticated towards apache with x509 certificates (mod_ssl). Would it now be possible to give authenticated clients a kerberos ticket which could

mod_ssl kerberos ?

2003-11-10 Thread Daniel Struck
Hello, I want to ask if the following setup is possible: Clients will be authenticated towards apache with x509 certificates (mod_ssl). Would it now be possible to give authenticated clients a kerberos ticket which could be read out in php/perl? I would like to use this ticket

[ANNOUNCE] mod_ssl 2.8.16 for Apache 1.3.29

2003-11-01 Thread Ralf S. Engelschall
Apache 1.3.29 was released a few days ago. Although mod_ssl 2.8.15 would still work fine with it, as usual, I take this new Apache release as the trigger for releasing a corresponding mod_ssl version -- which is again 100% aligned to Apache 1.3.29 and also includes a few bugfixes which were

mod_ssl/mod_perl: fine in isolation, install woes when together

2003-10-20 Thread Bryn Dyment
I've isolated this pretty well... hope someone has some insight: After a fresh* install of FreeBSD 4.8, I can build Apache alone with mod_ssl, and Apache alone with mod_perl (static). However, I'm getting errors when trying to install both together. Here are my steps: tar -xzf

SIGBUS after upgrading to mod_ssl-2.8.15-1.3.28 and using +OptRenegotiate

2003-10-09 Thread Matt Stevenson
__ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED]

[Fwd: mod_ssl compile problems]

2003-08-26 Thread Trevor Morrison
---BeginMessage--- Hi, I am trying to compile in mod_ssl 2.8.15 into the apache1.3.28 source and using openssl-1.9.7a-2 installed from an RH RPM and I am getting the following error: ranlib libstandard.a === src/modules/standard === src/modules/ssl gcc -c -I../.. -I/usr/lib/perl5/5.8.0/i386

Re: mod_ssl compile problems

2003-08-26 Thread Trevor Morrison
Message- From: Trevor Morrison [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 20, 2003 10:16 PM To: [EMAIL PROTECTED] Subject: mod_ssl compile problems Hi, I am trying to compile in mod_ssl 2.8.15 into the apache1.3.28 source and using openssl-1.9.7a-2 installed from an RH RPM and I am getting

Re: [Fwd: mod_ssl compile problems]

2003-08-26 Thread Joe Orton
I am trying to compile in mod_ssl 2.8.15 into the apache1.3.28 source and using openssl-1.9.7a-2 installed from an RH RPM and I am getting the following error: ranlib libstandard.a === src/modules/standard === src/modules/ssl gcc -c -I../.. -I/usr/lib/perl5/5.8.0/i386-linux-thread-multi

RE: [Fwd: mod_ssl compile problems]

2003-08-26 Thread Dave Paris
of course, this is assuming the kerberos libs have been installed. :-) -dsp -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Joe Orton Sent: Tuesday, August 26, 2003 4:27 PM To: Trevor Morrison Cc: [EMAIL PROTECTED] Subject: Re: [Fwd: mod_ssl compile problems

CRL updating with mod_ssl

2003-08-19 Thread Roberto Hoyle
updated is by restarting the server. Is this supposed to be the case? I'm confused that it works sometimes and doesn't work on others. Right now, I'm running 1.3.19 with mod_ssl 2.8.1 (yes, I know that they are old, but I am not able to update them for support reasons...). We have

RE: CRL updating with mod_ssl

2003-08-19 Thread Dave Paris
Your actual message issue notwithstanding, the versions you're running are not just old, they've got security flaws and vulnerabilities well documented at both CERT, apache.org, and openssl.org. http://www.cert.org/advisories/CA-2002-27.html (Linux, Apache, OpenSSL, mod_ssl) http://www.cert.org

Re: Any tools to test https+mod_ssl ???

2003-08-14 Thread Kiyoshi Watanabe
Hi I think that the following may help you. openssl s_client -connect localhost:443 -state -debug Please Refer to the FAQ in detail (www.modssl.org) -Kiyoshi Kiyoshi Watanabe Hi All. Further to my earlier comments that httpd + mod_ssl seems to be ignored by Netscape 7.1 After logging

Browser specific OpenSSL mod_ssl problem !

2003-08-08 Thread Arthur Chan
an anchor e.g. A HREF=https://my.secure.dom;ClickMe/A Set up : Apache2 httpd + mod_ssl + Tomcat + Oracle. Tomcat holds java servlets. Apache server has applets communicating with servlets. What works : Everything works just fine using W98+MSIE5 or W98+Netscape6.2 or Linux+Mozilla. What doesn't

Any tools to test https+mod_ssl ???

2003-08-05 Thread Arthur Chan
Hi All. Further to my earlier comments that httpd + mod_ssl seems to be ignored by Netscape 7.1 After logging-in and accepting the certificate, 7.1's liitle lock remains open and says I am transmitting in clear text. Yet Netscape 6.2, MSIE5 and Mozilla all accepted the certificate and they say

crash in mod_ssl 2.8.15

2003-08-04 Thread Dmitri Dmitrienko
crash report: environment: mod_ssl 2.8.15, apache 1.3.28 platform: win32, win XP sp 1 compiler MS VC 6 sp 5 client IE 6 client Mozilla 1.3 steps to reproduce: using IE 6 or Mozilla 1.3 open HTTP/SSL connectio to localhost. get there any plain html page with some gifs and press refresh many

Re: Apache2: mod_rewrite and mod_ssl interaction changed?

2003-07-29 Thread James Collier
- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of James Collier Sent: Monday, July 28, 2003 4:18 AM To: [EMAIL PROTECTED] Subject: Re: Apache2: mod_rewrite and mod_ssl interaction changed? Joe Orton wrote: On Mon, Jul 28, 2003 at 10:09:49PM +1200, James Collier wrote: I am

Apache2: mod_rewrite and mod_ssl interaction changed?

2003-07-28 Thread James Collier
__ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED]

Re: Apache2: mod_rewrite and mod_ssl interaction changed?

2003-07-28 Thread Joe Orton
this problem... the mod_ssl fixup handler is running to late to be useful like this in 2.0: you should be able to fix it as below: Index: mod_ssl.c === RCS file: /store/cvs/root/httpd-2.0/modules/ssl/mod_ssl.c,v retrieving revision 1.86 diff -u

Re: Apache2: mod_rewrite and mod_ssl interaction changed?

2003-07-28 Thread James Collier
... the mod_ssl fixup handler is running to late to be useful like this in 2.0: you should be able to fix it as below: Index: mod_ssl.c === RCS file: /store/cvs/root/httpd-2.0/modules/ssl/mod_ssl.c,v retrieving revision 1.86 diff -u -r1.86

Re: Apache2: mod_rewrite and mod_ssl interaction changed?

2003-07-28 Thread Himanshu Soni
Try this to access the SSl server variables: %{LA-U:ENV:SSL_CLIENT_S_DN} -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of James Collier Sent: Monday, July 28, 2003 4:18 AM To: [EMAIL PROTECTED] Subject: Re: Apache2: mod_rewrite and mod_ssl

Re: [ANNOUNCE] mod_ssl 2.8.15 for Apache 1.3.28

2003-07-21 Thread Igor Sysoev
On Fri, 18 Jul 2003, Ralf S. Engelschall wrote: As you've certainly recognized, Apache 1.3.28 was released. I've prepared the companion mod_ssl 2.8.15 which cleanly (without any conflicts) patches into its source tree. 2.8.15 does not fix EAPI shared pool bug introduced in 2.8.13

[ANNOUNCE] mod_ssl 2.8.15 for Apache 1.3.28

2003-07-18 Thread Ralf S. Engelschall
As you've certainly recognized, Apache 1.3.28 was released. I've prepared the companion mod_ssl 2.8.15 which cleanly (without any conflicts) patches into its source tree. As usual, you can find it under: http://www.modssl.org/source/ ftp://ftp.modssl.org/source/ Yours

Re: [ANNOUNCE] mod_ssl 2.8.15 for Apache 1.3.28

2003-07-18 Thread Ihor Bilyy
fix the link - Original Message - From: Ralf S. Engelschall [EMAIL PROTECTED] To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Friday, July 18, 2003 1:20 PM Subject: [ANNOUNCE] mod_ssl 2.8.15 for Apache 1.3.28 As you've certainly recognized, Apache 1.3.28 was released. I've prepared

Re: [ANNOUNCE] mod_ssl 2.8.15 for Apache 1.3.28

2003-07-18 Thread Shaun T. Erickson
Ihor Bilyy wrote: fix the link Where are your manners? Say please next time. -ste __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED

Fwd: Tracking down mod_ssl/OpenSSL bug

2003-07-11 Thread Douglas K. Fischer
- Begin forwarded message - Ralf, I have been doing some code-walking to track down a problem we've been having since last November with Apache child processes getting segmentation faults periodically, and it appears to boil down to something with mod_ssl and/or OpenSSL. I was hoping

Fwd: Tracking down mod_ssl/OpenSSL bug

2003-07-11 Thread a . moon
to help. All the best Alex __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED]

Segfaults in Apache 1.3.27 with mod_ssl

2003-06-24 Thread Carsten Gaebler
dumps suggest that it has something to do with mod_ssl, but since I'm not sure I'll post the backtrace here. My setup is this: Dual P4 Xeon machine Debian Linux 3.0 with kernel 2.4.20-ac2 gcc 2.95.4 Apache 1.3.27 mod_ssl-2.8.14-1.3.27 openssl-0.9.7b A backtrace is attached. I hope that someone can

Possible mod_ssl bug (ssl_io_input_read)

2003-06-06 Thread Barry Brachman
Hi -- I am developing a new Apache 2.0 module and I have encountered what I think to be a bug in mod_ssl. I have been unable to find any reports of a similar problem. I think this is because I am using AP_MODE_SPECULATIVE, which is a bit unusual, so maybe no one else has run into this case yet

Re: Possible mod_ssl bug (ssl_io_input_read)

2003-06-06 Thread Cliff Woolley
On Fri, 6 Jun 2003, Barry Brachman wrote: I am developing a new Apache 2.0 module and I have encountered what I think to be a bug in mod_ssl. I have been unable to find any reports of a similar problem. I think this is because I am using AP_MODE_SPECULATIVE, which is I have forwarded

Re: Possible mod_ssl bug (ssl_io_input_read) (fwd)

2003-06-06 Thread Cliff Woolley
-- Forwarded message -- Date: Fri, 06 Jun 2003 17:59:50 -0700 From: Justin Erenkrantz [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Re: Possible mod_ssl bug (ssl_io_input_read) (fwd) The suggested API change to char_buffer_read is incorrect

Re: mod_ssl/2.8.13 and php AND Problem with 2.8.13 and Solaris 2.6

2003-04-05 Thread Mads Toftum
On Fri, Mar 21, 2003 at 04:18:11AM -0500, Jason Parsons wrote: I'm seeing similar problems after an upgrade to mod_ssl 2.8.13 under Solaris 2.8. [Fri Mar 21 04:10:42 2003] [notice] child pid 4241 exit signal Segmentation Fault (11) [Fri Mar 21 04:10:42 2003] [notice] child pid 4248 exit

Re: mod_ssl/2.8.13 and php AND Problem with 2.8.13 and Solaris 2.6

2003-04-04 Thread Jason Parsons
I'm seeing similar problems after an upgrade to mod_ssl 2.8.13 under Solaris 2.8. [Fri Mar 21 04:10:42 2003] [notice] child pid 4241 exit signal Segmentation Fault (11) [Fri Mar 21 04:10:42 2003] [notice] child pid 4248 exit signal Segmentation Fault (11) [Fri Mar 21 04:10:42 2003] [notice

RE: APache 2.x + Mod_ssl : Ive a problem!

2003-03-31 Thread John . Airey
Did you install the mod_ssl package too? Did you know that Red Hat renamed the package from apache to httpd (for some kind of consistency I guess, although confusing to those who know about it already). - John Airey, BSc (Jt Hons), CNA, RHCE Internet systems support officer, ITCSD, Royal

Verifying OpenSSL Version in mod_ssl

2003-03-31 Thread Ken Schweigert
I've been getting this error ever since I upgraded to mod_ssl-2.8.14-1.3.27: [Fri Mar 28 16:44:47 2003] [error] mod_ssl: Cannot store SSL session to DBM file `/usr/local/apache/logs/ssl_scache' (System error follows) [Fri Mar 28 16:44:47 2003] [error] System: Invalid argument (errno: 22) When

where is the mod_ssl bug database?

2003-03-24 Thread Gaetan Hache
Hello ! Where can I find the mod_ssl bug database? The link http://www.modssl.org/support/bugdb/ doesn't seem to work. In fact, what I'm looking for is more info on the bugs 534 569 and the patch in http://www.mail-archive.com/[EMAIL PROTECTED]/msg12051.html. Did the patch was applied

RE: mod_ssl/2.8.13 and php AND Problem with 2.8.13 and Solaris 2.6

2003-03-21 Thread Boyle Owen
Can we bring these threads together? It would seem we have: Burkhard: Apache/1.3.27 mod_gzip/1.3.26.1a PHP/4.3.1 mod_ssl/2.8.13 OpenSSL/0.9.7a QUESTION: What OS? And: Jazz: mod_ssl 2.8.13, OpenSSL 0.9.6i with apache 1.3.27 ... on Solaris 2.6/Sparc QUESTION: using PHP? Both

Re: mod_ssl/2.8.13 and php

2003-03-21 Thread Ralf S. Engelschall
: ssl_engine_vars.c === RCS file: /e/modssl/cvs/mod_ssl/pkg.apache/src/modules/ssl/ssl_engine_vars.c,v retrieving revision 1.51 retrieving revision 1.53 diff -u -d -u -3 -r1.51 -r1.53 --- ssl_engine_vars.c 29 Jun 2002 07:42:51 - 1.51

Re: mod_ssl/2.8.13 and php

2003-03-21 Thread Joe Orton
); +} } That isn't safe, SSL_get_certificate doesn't increase the refcount on the certificate (unlike SSL_peer_get_certificate). Regards, joe __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List

Re: mod_ssl/2.8.13 and php

2003-03-21 Thread Artur Pydo
backtracing for the first time. :) -- Best regards, Artur Pydo. __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager

RE: mod_ssl/2.8.13 and php AND Problem with 2.8.13 and Solaris 2.6

2003-03-21 Thread Jazz
Dear Mr. Owen, Yes, Solaris 2.6/Sparc + Php 4.2.3 + OpenSSL 0.9.6i + Mod_ssl 2.8.13 do crash. Seems that is something with Php I think... but the error logged is different from other reports I've saw in the list. error_log reports: [notice] child pid 19396 exit signal Bus Error (10

Re: mod_ssl/2.8.13 and php

2003-03-21 Thread Ralf S. Engelschall
. Ralf S. Engelschall [EMAIL PROTECTED] www.engelschall.com __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing

[PATCH] Segfaults in 2.8.13 (was: Re: mod_ssl/2.8.13 and php)

2003-03-21 Thread Ralf S. Engelschall
release mod_ssl 2.8.14 with it. Thanks for your help. Index: ssl_engine_kernel.c === RCS file: /e/modssl/cvs/mod_ssl/pkg.apache/src/modules/ssl/ssl_engine_kernel.c,v retrieving revision 1.136 diff -u -d -r1.136 ssl_engine_kernel.c

Re: [PATCH] Segfaults in 2.8.13 (was: Re: mod_ssl/2.8.13 and php)

2003-03-21 Thread Burkhard Ulrich
apply the following patch, retry it and give feedback? I think these two bugfixes should fix the problem now. If yes, I'll release mod_ssl 2.8.14 with it. Thanks for your help. Index: ssl_engine_kernel.c === RCS file: /e/modssl

Re: [PATCH] Segfaults in 2.8.13 (was: Re: mod_ssl/2.8.13 and php)

2003-03-21 Thread Ed Kubaitis
bugfixes should fix the problem now. If yes, I'll release mod_ssl 2.8.14 with it. Thanks for your help. The patch fixed the problem for me (no php, RH 7.3.) -- Ed Kubaitis - [EMAIL PROTECTED] CITES/STS - University of Illinois at Urbana-Champaign Index: ssl_engine_kernel.c

Re: [PATCH] Segfaults in 2.8.13 (was: Re: mod_ssl/2.8.13 and php)

2003-03-21 Thread Artur Pydo
Hi, Ralf S. Engelschall wrote: Ok, can the people who are able to reproduce the segfault problem, please apply the following patch, retry it and give feedback? I think these two bugfixes should fix the problem now. If yes, I'll release mod_ssl 2.8.14 with it. Thanks for your help. That's ok

Re: Re: [PATCH] Segfaults in 2.8.13 (was: Re: mod_ssl/2.8.13 andphp)

2003-03-21 Thread Burkhard Ulrich
: I can see the same segmentation fault : [...] Ok, can the people who are able to reproduce the segfault problem, please apply the following patch, retry it and give feedback? I think these two bugfixes should fix the problem now. If yes, I'll release mod_ssl 2.8.14

[ANNOUNCE] mod_ssl 2.8.14-1.3.27

2003-03-21 Thread Ralf S. Engelschall
Sorry, mod_ssl 2.8.13 introduced two nasty bugs which let the server crash. This is now fixed with mod_ssl 2.8.14 together with one more long-standing crash bug related to the SHMHT session cache. Please upgrade to this latest mod_ssl 2.8 version for Apache 1.3. Thanks. o http://www.modssl.org

Re: [PATCH] Segfaults in 2.8.13 (was: Re: mod_ssl/2.8.13 and php)

2003-03-21 Thread Jazz
Hi All, It is OK with: Solaris 2.6/Sparc Apache 1.3.27 (DSO) Php 4.2.3 OpenSSL 0.9.6i Mod_SSL 2.8.14 Nice weekend for everybody! JAZZ ___ Busca Yahoo! O serviço de busca mais completo da

Re: [ANNOUNCE] mod_ssl 2.8.14-1.3.27

2003-03-21 Thread Götz Babin-Ebell
Hello Ralf, Ralf S. Engelschall wrote: Sorry, mod_ssl 2.8.13 introduced two nasty bugs which let the server crash. This is now fixed with mod_ssl 2.8.14 together with one more long-standing crash bug related to the SHMHT session cache. Please upgrade to this latest mod_ssl 2.8 version for Apache

RE: mod_ssl/2.8.13 and php

2003-03-20 Thread Burkhard Ulrich
I have this Problems with: Apache/1.3.27 mod_gzip/1.3.26.1a PHP/4.3.1 mod_ssl/2.8.13 OpenSSL/0.9.7a Requesting Pages without ssl encryption works fine but requesting this Pages with encryption causes segfault on every request. There are no Problems with 2.8.12 Regards Burkhard On Wed, 19

RE: mod_ssl/2.8.13 and php

2003-03-20 Thread Ed Kubaitis
I see the problem with Apache/1.3.27 mod_ssl/2.8.13 (no other optional Apache modules except mod_rewrite) OpenSSL/0.9.7a Red Hat Linux 7.3 system I tried OpenSSL 0.9.7a both with and without the RSA blinding patch distributed by Ben Laurie and saw the problem both times. I see

RE: mod_ssl/2.8.13 and php

2003-03-20 Thread Artur Pydo
=0xbfbffb04) at http_main.c:5203 #12 0x80622f0 in main (argc=5, argv=0xbfbffb04) at http_main.c:5566 #13 0x804f4b1 in _start () -- Best regards, Artur Pydo. __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User

mod_ssl/2.8.13 and php

2003-03-19 Thread Sophia Petridou
Hello all, SERVER: Apache 1.3.27 + mod_ssl/2.8.13 + PHP/4.3.1 I have just installed mod_ssl/2.8.13 and my server has started without problems. (config command: ./configure --with-apxs=/usr/local/apache/bin/apxs --with-ssl=/usr/local/ssl --with-mm=/usr/local/include) The requests about html

RE: mod_ssl/2.8.13 and php

2003-03-19 Thread Frye, David
PROTECTED] Sent: Wednesday, March 19, 2003 9:39 AM To: [EMAIL PROTECTED] Subject: mod_ssl/2.8.13 and php Hello all, SERVER: Apache 1.3.27 + mod_ssl/2.8.13 + PHP/4.3.1 I have just installed mod_ssl/2.8.13 and my server has started without problems. (config command: ./configure --with-apxs=/usr/local

[ANNOUNCE] mod_ssl 2.8.13

2003-03-18 Thread Ralf S. Engelschall
Another maintainance release of mod_ssl 2.8 for Apache 1.3 delivers to you mod_ssl 2.8.13 for Apache 1.3.27. Changes are listed below. Grab it from the following locations: o http://www.modssl.org/source/ o ftp://ftp.modssl.org/source/ Yours, Ralf S

Re: stop apache/mod_ssl binding to all IP's.

2003-03-18 Thread Terry Kerr
? Listen IP:Port does work, works for me. Do you have the following in your config ? Listen my.ip.address:443 ... NameVirtualHost my.ip.address:443 ... VirtualHost my.ip.address:443 ... /VirtualHost Cheers, Mark On Thu, 6 Mar 2003, Terry Kerr wrote: Hi, I am running apache 1.3.26 and mod_ssl

problem building mod_ssl with apache2.0.44 openssl 0.9.6 solaris9

2003-03-18 Thread Martin . Evans
__ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED]

Apache 1.3.26 + mod_ssl 2.8.10 + OpenSSL 0.9.7a + ubsec engine questions

2003-03-18 Thread Kostadin Galabov
Hi, Currently I'm setting up a Broadcom 5820 accelerator on company's web server. Everything seem to work. I compiled mod_ssl with enabled experimental code, when I start the apache the module for the broadcom card gets used. When I do requests to the apache, the statistic program of broadcom

Apache/mod_ssl not compiling, Solaris 8

2003-03-17 Thread Nathan Coraor
Hi all, I'm attempting to compile Apache 1.3.27 + mod_perl 1.27 + mod_ssl 2.8.12-1.3.27 under Solaris 8, and it's failing when linking. I've got OpenSSL 0.9.7a compiled for 'solaris64-sparcv9-cc'. The output's here: cc -DSOLARIS2=280 -DMOD_SSL=208112 -DMOD_PERL -DUSE_PERL_SSI -I/usr/local

Re: Apache/mod_ssl not compiling, Solaris 8

2003-03-17 Thread Götz Babin-Ebell
Hello Nathan, Nathan Coraor wrote: Hi all, I'm attempting to compile Apache 1.3.27 + mod_perl 1.27 + mod_ssl 2.8.12-1.3.27 under Solaris 8, and it's failing when linking. I've got OpenSSL 0.9.7a compiled for 'solaris64-sparcv9-cc'. The output's here: cc -DSOLARIS2=280 -DMOD_SSL=208112

Re: Apache/mod_ssl not compiling, Solaris 8

2003-03-17 Thread Nathan Coraor
class: ELFCLASS64 ^ You have build the OpenSSL libraries for Sparc 64 bit. But the linker doesn't like them. you build mod_ssl / apache for sparc 32 bit ? Goetz, That's what it looked like to me

Re: Apache/mod_ssl not compiling, Solaris 8

2003-03-17 Thread Götz Babin-Ebell
/libcrypto.a(bn_lib.o): wrong ELF class: ELFCLASS64 ^ You have build the OpenSSL libraries for Sparc 64 bit. But the linker doesn't like them. you build mod_ssl / apache for sparc 32 bit ? That's what it looked like

Timing attack against OpenSSL/mod_SSL

2003-03-13 Thread David Brumley
. We found that we can recover an RSA secret from OpenSSL using anywhere from only 300,000 to 1.4 million queries. We demonstrated our attack was pratical by successfully launching an attack against Apache + mod_SSL and stunnel on the local network. Our results show that timing attacks

mod_ssl/mod_jk failure with client authentication on

2003-03-07 Thread Aaron Stromas
Hi, I apologise for cross-posting - I'm really not sure which component is at fault, looks like mod_ssl but possibly mod_jk. BTW, is there a list (or some other venue) dedicated to mod_jk? My environment is Apache 1.3.22, mod_ssl 2.8.5, OpenSSL 0.9.6b, tomcat 4.0.3. I have a servlet mounted like

Re: mod_ssl/mod_jk failure with client authentication on

2003-03-07 Thread Aaron Stromas
I realised that I included irrelevant log snipet from the SSL log. Please see the correction below. Aaron Stromas said: Hi, I apologise for cross-posting - I'm really not sure which component is at fault, looks like mod_ssl but possibly mod_jk. BTW, is there a list (or some other venue

Re: stop apache/mod_ssl binding to all IP's.

2003-03-06 Thread Mark Boddington
Cheers, Mark On Thu, 6 Mar 2003, Terry Kerr wrote: Hi, I am running apache 1.3.26 and mod_ssl 2.8.9-2.1 on a debian linux system. The system has two IP's, and I only wish for apache to start on ports 80 and 443 on one of those IPs. I am using named based virtual hosting for many sites

Re: stop apache/mod_ssl binding to all IP's.

2003-03-06 Thread R. DuFresne
On Thu, 6 Mar 2003, Terry Kerr wrote: Hi, I am running apache 1.3.26 and mod_ssl 2.8.9-2.1 on a debian linux system. The system has two IP's, and I only wish for apache to start on ports 80 and 443 on one of those IPs. I am using named based virtual hosting for many sites

Re: stop apache/mod_ssl binding to all IP's.

2003-03-06 Thread Terry Kerr
in your config ? Listen my.ip.address:443 ... NameVirtualHost my.ip.address:443 ... VirtualHost my.ip.address:443 ... /VirtualHost Cheers, Mark On Thu, 6 Mar 2003, Terry Kerr wrote: Hi, I am running apache 1.3.26 and mod_ssl 2.8.9-2.1 on a debian linux system. The system has two IP's, and I only

Re: stop apache/mod_ssl binding to all IP's.

2003-03-06 Thread R. DuFresne
1.3.26 and mod_ssl 2.8.9-2.1 on a debian linux system. The system has two IP's, and I only wish for apache to start on ports 80 and 443 on one of those IPs. I am using named based virtual hosting for many sites on the system for http, and have just one virtual host setup for https on port 443

Re: stop apache/mod_ssl binding to all IP's.

2003-03-06 Thread Terry Kerr
am running apache 1.3.26 and mod_ssl 2.8.9-2.1 on a debian linux system. The system has two IP's, and I only wish for apache to start on ports 80 and 443 on one of those IPs. I am using named based virtual hosting for many sites on the system for http, and have just one virtual host setup for https

Shared mod_ssl problems

2003-03-06 Thread Ted Rolle
Justin E hit the nail on the head! I was writing my tale of woe about this problem (it's still below for your edification). As I see it, there's a missing link -- OpenSSL -- which isn't brought in to resolve these call references. If mod_ssl can be smartened up to use the ldconfig mechanism

mod_ssl/openssl error with test certificate?

2003-03-05 Thread Otto L. Miller
modssl-users, OK, I just built an apache + mod_ssl + mod_perl configuration. I built the test certificate and installed it (make certificate make install). But when I 'apachectl startssl' I get the following message: [error] Init: Unable to read server certificate from file /opt/sisapache

Re: mod_ssl/openssl error with test certificate?

2003-03-05 Thread Geoff Thorpe
Thorpe [EMAIL PROTECTED] http://www.geoffthorpe.net/ __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager

Re[2]: mod_ssl/openssl error with test certificate?

2003-03-05 Thread Otto L. Miller
? Cheers, Geoff __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED]

stop apache/mod_ssl binding to all IP's.

2003-03-05 Thread Terry Kerr
Hi, I am running apache 1.3.26 and mod_ssl 2.8.9-2.1 on a debian linux system. The system has two IP's, and I only wish for apache to start on ports 80 and 443 on one of those IPs. I am using named based virtual hosting for many sites on the system for http, and have just one virtual host

(BUG?) mod_ssl/openssl hangs on POST-Request with false Content-Length

2003-02-28 Thread Dimitri Rebrikov
Hi, We have problems with broken POST-Requests that our Partner sends to us over HTTPS. They are using the Software wrote by they own.(Not a Web-Browser). We are using Apache, mod_ssl/openssl, mod_jk, Tomcat und servlets to Process they Requests. The POST-Requests they sends have from time

mod_ssl 2.8.12 + apache 1.3.26

2003-02-28 Thread Ihor Bilyy
Hello All, is there any problem running this combination (subj)? thanks -i- __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated

RE: mod_ssl 2.8.12 + apache 1.3.26

2003-02-28 Thread Jeff Bert
Yes. You should use mod_ssl 2.8.12 and apache 1.3.27 as there is a security issue with apache 1.3.26 Jeff -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ihor Bilyy Sent: Friday, February 28, 2003 10:16 AM To: [EMAIL PROTECTED] Subject: mod_ssl

RE: mod_ssl 2.8.12 + apache 1.3.26

2003-02-28 Thread R. DuFresne
possibly being borked in the process. Thanks, Ron DuFresne On Fri, 28 Feb 2003, Jeff Bert wrote: Yes. You should use mod_ssl 2.8.12 and apache 1.3.27 as there is a security issue with apache 1.3.26 Jeff -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED

Using ssl/mod_ssl on non-apache HTTP server

2003-02-26 Thread Beau E. Cox
Hi - I'm new to ssl/mod_ssl so please forgive me if this post is out in left field. I have a new contract to develop secure TCP/IP communication between many customer sites. I have prototyped a non-secure HTTP server/client system written in Perl. My client likes it - but he demands high- level

RE: Using ssl/mod_ssl on non-apache HTTP server

2003-02-26 Thread Beau E. Cox
Of Beau E. Cox Sent: Tuesday, February 25, 2003 11:34 PM To: [EMAIL PROTECTED] Subject: Using ssl/mod_ssl on non-apache HTTP server Hi - I'm new to ssl/mod_ssl so please forgive me if this post is out in left field. I have a new contract to develop secure TCP/IP communication between

Re: Using ssl/mod_ssl on non-apache HTTP server

2003-02-26 Thread Daniel Lopez
/ then, for the programming side of things, this is a good book: http://www.amazon.com/exec/obidos/tg/detail/-/059600270X As a reference book, I found this one invaluable: http://www.amazon.com/exec/obidos/tg/detail/-/0201615983 Cheers Daniel Hi - I'm new to ssl/mod_ssl so please forgive me if this post is out

Re: Shared mod_ssl problems

2003-02-26 Thread Larry Cotton
-- __ Sign-up for your own FREE Personalized E-mail at Mail.com http://www.mail.com/?sr=signup __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List

Re: Shared mod_ssl problems

2003-02-26 Thread Larry Cotton
-- __ Sign-up for your own FREE Personalized E-mail at Mail.com http://www.mail.com/?sr=signup __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL

Re: Shared mod_ssl problems

2003-02-26 Thread Jirka Vejrazka
(mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED]

RE: Linux Red Hat 7.2 + openSSL 0.9.7 + Apache 1.3.27 + mod_ssl 2.8.1 2 = PROBLEMS!!!

2003-02-26 Thread John . Airey
-Original Message- From: Boyle Owen [mailto:[EMAIL PROTECTED] Sent: 25 February 2003 15:15 To: [EMAIL PROTECTED] Subject: RE: Linux Red Hat 7.2 + openSSL 0.9.7 + Apache 1.3.27 + mod_ssl 2.8.1 2 = PROBLEMS!!! Sensitivity: Confidential Why is apachectl in /usr/sbin/apachectl

Shared mod_ssl problems

2003-02-25 Thread Larry Cotton
Hi I'm attempting to load mod_ssl into apache as a dynamic module. I am using apache 2.0.44 (which comes with its own ssl module) and OpenSSL version 0.9.7a. I'm using red hat linux ver 7.1. uname -r gives the following output : Linux localhost.localdomain 2.2.16-22 #1 Tue Aug 22 16:49:06 EDT

Linux Red Hat 7.2 + openSSL 0.9.7 + Apache 1.3.27 + mod_ssl 2.8.1 2 =PROBLEMS!!!

2003-02-25 Thread Zampognaro Sergio
Title: Linux Red Hat 7.2 + openSSL 0.9.7 + Apache 1.3.27 + mod_ssl 2.8.12 = PROBLEMS!!! Hi, everything is in the subject! I installed everything following this procedure: $ ./config --prefix=/home/aspco1/openSSL $ make $ make test $ make install # extract the packages $ gzip -d -c

RE: Linux Red Hat 7.2 + openSSL 0.9.7 + Apache 1.3.27 + mod_ssl 2.8.1 2 = PROBLEMS!!!

2003-02-25 Thread Boyle Owen
To: [EMAIL PROTECTED] Subject: Linux Red Hat 7.2 + openSSL 0.9.7 + Apache 1.3.27 + mod_ssl 2.8.1 2 = PROBLEMS!!! Importance: High Sensitivity: Confidential Hi, everything is in the subject! I installed everything following this procedure: $ ./config --prefix=/home/aspco1/openSSL $ make $ make test

Re: Shared mod_ssl problems

2003-02-25 Thread Jirka Vejrazka
://www.mail.com/?sr=signup __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED]

mod_ssl for Apache 1.3.26 on IBM AIX 5.1L

2003-02-23 Thread Manoj Kithany
where can I find mod_ssl for Apache 1.3.26 running on IBM AIX 5.1L OS? THANKS! _ MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. http://join.msn.com/?page=features/virus

mod_ssl with Apache reverse proxy

2003-02-23 Thread Judd Brown
I am trying to set up an SSL connection between client, Apache 1.3.19, and NT backend. I want to go SSL to the Proxy, then reverse proxy via SSL to the backend. The ProxyPass is: ProxyPass /mail/ https://webmail.foo.com/mail/ ProxyPassReverse /mail/ https://webmail.foo.com/mail/ The

mass ip virtual host mod_ssl?

2003-02-23 Thread Ray a PowerWeb Tech
is it possible using either mod_rewrite, mod_vhosts_alias or some trick in mod_ssl to have multiple virtual hosts by ip address was thinking something like # get the server name from the Host: header UseCanonicalName Off # this log format can be split per-virtual-host based on the first field

Newbie - Please help! configure mod_ssl for Apache on SCO

2003-02-23 Thread Fitzmaurice, James
Please help! I've been attempting to compile mod_ssl 2.8.9 for apache 1.3.26 and keep running into either environment issues or version problems on SCO OpenServer 5.05 I need to apply a Verisign Cert on our Apache Web Server. I installed OpenSSL and was able to generate a Cert. Now I need

Re: mass ip virtual host mod_ssl?

2003-02-23 Thread Mads Toftum
On Tue, Feb 18, 2003 at 05:09:38PM -0600, Ray a PowerWeb Tech wrote: is it possible using either mod_rewrite, mod_vhosts_alias or some trick in mod_ssl to have multiple virtual hosts by ip address No, that is not possible. vh Mads Toftum -- `Darn it, who spiked my coffee with water

mass ip virtual host mod_ssl?

2003-02-19 Thread Ray a PowerWeb Tech
is it possible using either mod_rewrite, mod_vhosts_alias or some trick in mod_ssl to have multiple virtual hosts by ip address and there keys was thinking something like # get the server name from the Host: header UseCanonicalName Off # this log format can be split per-virtual-host based

Re: mass ip virtual host mod_ssl?

2003-02-19 Thread Cliff Woolley
to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED]

Patches and Enhancements for a SSL-Proxy Based on Apache 2.0 (mod_ssl, mod_proxy, mod_headers)

2003-02-19 Thread Maik Mueller
Hello All, I want to provide updated information to my earlier described scenario using mod_ssl + mod_proxy + mod_headers: Component: Web Browser --- Proxy (mod_proxy) --- Web Server SSL Role: SSL Client --- SSL server | SSL Client --- SSL Server The following discussion

<    1   2   3   4   5   6   7   8   9   10   >