RE: Antw: RE: Apache 2.0.40 - Loaded mod_ssl successfully on w2k?

2002-09-03 Thread Lakey, Jeremy # IHTUL
Microsoft, VC6 Sp3 -Original Message- From: Paul Bleimeyer [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 03, 2002 12:22 PM To: [EMAIL PROTECTED] Subject: RE: Antw: RE: Apache 2.0.40 - Loaded mod_ssl successfully on w2k? Whose compiler did you use? -Original Message

RE: Antw: RE: Apache 2.0.40 - Loaded mod_ssl successfully onw2k?

2002-09-03 Thread Andre Schild
[EMAIL PROTECTED] Microsoft, VC6 Sp3 Dito. André -Original Message- From: Paul Bleimeyer [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 03, 2002 12:22 PM To: [EMAIL PROTECTED] Subject: RE: Antw: RE: Apache 2.0.40 - Loaded mod_ssl successfully on w2k? Whose compiler did you

Re: [ANNOUNCE] mod_ssl 2.8.10

2002-08-30 Thread Martin Kraemer
Zum Thema Security und so: Ich habe gesehen, dass seit 67 Tagen keine Datei im mod_ssl Repository (so, wie es per rsync geliefert wird) mehr modifiziert wurde. Ist das aus Sicherheitsgruenden, oder hat sich das Repository tatsaechlich nicht veraendert? Gruss, Martin -- [EMAIL PROTECTED

Re: problems with mod_ssl install...

2002-08-25 Thread danielm
/http.conf-dist' that should help you with what to add. danielm wrote: Hi listmembers, I am needing some help to get mod ssl up and running, if you'd be so kind... My system is freebsd, and I've been going from the INSTALL file included with mod_ssl(2.8.8). Everything installed fine, I

mod_ssl php. PHP not working on https pages

2002-08-16 Thread webmaster
Hi good modssl people, I'm having an issue where Apache won't handle .php files on https pages. http works fine, and parses php properly. Apache seems to ignore the "AddType application/x-httpd-php .php" directive on https sites. both php and mod_ssl are running as DSO's. Runn

Help with mod_ssl mod_auth_mysql

2002-08-13 Thread TCrop
I want to secure a directory running under https section of my website by forcing a user/passwd challenge. Is it possible to use .htaccess and mod_auth_mysql with mod_ssl so that the login is secure? I can get a .htaccess to work with a .htpasswd but have NOT been able to get .htaccess

RE: Apache 1.3.26 + mod_ssl 2.8.10 dumps core

2002-08-08 Thread MATHIHALLI,MADHUSUDAN (HP-Cupertino,ex1)
Sorry for this blast-o-gram. I realized that the patch that I'd posted was totally a wrong one - and did not achieve what it was meant for :-(. For those interested, here's something which is pretty close to what I'd intented). Thanks -Madhu diff -ru mod_ssl-2.8.10-1.3.26/pkg.sslmod

[PATCH - Apache 1.3] Apache 1.3.26 + mod_ssl 2.8.10 dumps core

2002-08-04 Thread a . moon
to help. All the best Alex __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED]

Re: Stop mod_ssl from writing errors to the general Apache error logfile

2002-08-03 Thread Randy Harmon
: Stop mod_ssl from writing errors to the general Apache error logfile [Bert Cortin:] [clip: [error] mod_ssl: SSL handshake interrupted by system is sullying my ErrorLog against my wishes] I dont what no ErrorLog at all but just no SSL errors in my ErrorLog (even inside the virtual host!). I

[BugDB] mod_ssl assumes SSL_BASE to be /usr/local/ssl if the directory exists (PR#739)

2002-08-01 Thread modssl-bugdb
Full_Name: CJ Version: mod_ssl-2.8.10-1.3.26 OS: FreeBSD 4.6-STABLE Submission from: (NULL) (216.17.129.22) In the file pkg.sslmod/libssl.module there is the following code: if [ .$SSL_BASE = . ]; then if [ -d /usr/local/ssl ]; then SSL_BASE=/usr/local/ssl

Regarding mod_ssl version which suits apache 2.0.39

2002-08-01 Thread Venkat Reddy Valluri
Hi, Can you please let me know where exactly i can get the suitable mod_ssl version which suits for apache 2.0.39, I tried to find out in www.modssl.org, but found out only the mod_ssl_2.8.10-1.3.26 which suits for apache 1.3.26, Any help greatly apprecited Thks Venkata Reddy V

Re: Regarding mod_ssl version which suits apache 2.0.39

2002-08-01 Thread Mads Toftum
On Wed, Jul 31, 2002 at 02:14:21PM -0400, Venkat Reddy Valluri wrote: Hi, Can you please let me know where exactly i can get the suitable mod_ssl version which suits for apache 2.0.39, I tried to find out in www.modssl.org, but found out only the mod_ssl_2.8.10-1.3.26 which suits

Re: Regarding mod_ssl version which suits apache 2.0.39

2002-08-01 Thread R. DuFresne
none are required, it's built into the 2.0.x code. Thanks, Ron DuFresne On Wed, 31 Jul 2002, Venkat Reddy Valluri wrote: Hi, Can you please let me know where exactly i can get the suitable mod_ssl version which suits for apache 2.0.39, I tried to find out in www.modssl.org, but found

openssl0.9.6e ok with mod_ssl 2.8.10?

2002-07-31 Thread Rainer Jung
Hi, will there be a new version of mod_ssl for the security fixed openssl 0.9.6e and openssl-engine 0.9.6e or is it safe to use mod_ssl 2.8.10. If there will be a new version: is there an expected release date/time? Thanks for any answers! Rainer Jung kippdata informationstechnologie GmbH

Re: openssl0.9.6e ok with mod_ssl 2.8.10?

2002-07-31 Thread Lutz Jaenicke
On Wed, Jul 31, 2002 at 11:40:42AM +0200, Rainer Jung wrote: Hi, will there be a new version of mod_ssl for the security fixed openssl 0.9.6e and openssl-engine 0.9.6e or is it safe to use mod_ssl 2.8.10. It should be safe to use mod_ssl 2.8.10. The API of openssl did not change when

RE: openssl0.9.6e ok with mod_ssl 2.8.10?

2002-07-31 Thread Courtin Bert
. DuFresne [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 31, 2002 2:14 PM To: Rainer Jung Cc: [EMAIL PROTECTED] Subject: Re: openssl0.9.6e ok with mod_ssl 2.8.10? If I read the advisories correctly, the problem was related to opsnssl code. so, recompiling apache/mod-ssl with the new or patched

using rewrite with mod_ssl

2002-07-30 Thread Peter Choe
i have successfully limited access to a dirctory using mod_ssl. meaning that the files in that directory will only show when it uses ssl protocol. but when it doesn't uses ssl protocol but just, http://hostname/manual, it gives me a page can't be displayed message. i thought

Re: using rewrite with mod_ssl

2002-07-30 Thread Peter Viertel
/.*) https://%{SERVER_NAME}/$1 [L,R] Peter Choe wrote: i have successfully limited access to a dirctory using mod_ssl. meaning that the files in that directory will only show when it uses ssl protocol. but when it doesn't uses ssl protocol but just, http://hostname/manual, it gives me

mod_ssl newbie

2002-07-30 Thread Henning, Brian
Hello, I am new to the ssl world. Right now I am running w2k with apache 1.3.23 web server. I downloaded the mod_ssl package from the website. I changed the port on my apache web server to 443. On a high level what do i need to do to create a secure web server? I guess my real problem is i don't

Re: mod_ssl newbie

2002-07-30 Thread Daniel Lopez
wrote: Hello, I am new to the ssl world. Right now I am running w2k with apache 1.3.23 web server. I downloaded the mod_ssl package from the website. I changed the port on my apache web server to 443. On a high level what do i need to do to create a secure web server? I guess my real problem

Re: mod_ssl newbie

2002-07-30 Thread Peter Choe
, I am new to the ssl world. Right now I am running w2k with apache 1.3.23 web server. I downloaded the mod_ssl package from the website. I changed the port on my apache web server to 443. On a high level what do i need to do to create a secure web server? I guess my real problem is i don't know what

Re: mod_ssl newbie

2002-07-30 Thread R. DuFresne
to the ssl world. Right now I am running w2k with apache 1.3.23 web server. I downloaded the mod_ssl package from the website. I changed the port on my apache web server to 443. On a high level what do i need to do to create a secure web server? I guess my real problem is i don't know what ssl

mod_ssl and mod_jk

2002-07-30 Thread Peter Choe
i am trying to get mod_jk to work with mod_ssl. i am able to compile mod_jk. but when i try to start apache and i have mod_jk and mod_ssl enable, i get a message saying that apache cannot start. if i have one or the other, apache can start. is this a known problem? how i can fix

RE: Apache Mod_SSL Cannot load /modules/mod_ssl.so

2002-07-29 Thread Noah White
] Subject: Re: Apache Mod_SSL Cannot load /modules/mod_ssl.so Hopefully I'm not duplicating someone else's response, but I think your answer can be found by searching the archives. It looks like you didn't copy the openssl dlls into your c:\winnt\system32 directory. You need: libeay32.dll

Re: Apache Mod_SSL Cannot load /modules/mod_ssl.so

2002-07-28 Thread David W
: Hello ervebody, I´ve got the following problem: I´ve installed a apache_1.3.23 with OpenSSL, mod_ssl and mod_jk with WIN 2000 everything works fine when the LoadModule for mod_ssl is commented out. After including the LoadModule line, i get the following Syntax Error: Syntax error

Re: Apache Mod_SSL Cannot load /modules/mod_ssl.so

2002-07-28 Thread a . moon
to help. All the best Alex __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED]

Apache Mod_SSL Cannot load /modules/mod_ssl.so

2002-07-25 Thread Oliver Enders
Hello ervebody, I´ve got the following problem: I´ve installed a apache_1.3.23 with OpenSSL, mod_ssl and mod_jkwith WIN 2000 everything works fine when the LoadModule for mod_ssl is commented out. After including the LoadModule line, i get the following Syntax Error: Syntax error on line

Re: Compiling apache with mod_perl + mod_ssl on HP-UX 10.2; link problem

2002-07-22 Thread Lutz Jaenicke
__ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED]

apache dso and Mod_ssl

2002-07-22 Thread arcean
I know i ask a connex question but ... is there a way to get a compiled-Mod_ssl that works on DSO compiled apache (without EAPI) ??? because i still don't find websphere module sources and i need to have Websphere and SSL on a unique instance (because : i do authenticate client by certificat

mod_ssl security mailing list ...

2002-07-22 Thread Dario Bahena Tapia
Hi ... I want to be warned about mod_ssl security issues, I couldn't find an exact match in the mailing list names ... which one do you recommend me? Thanks in advance. saludos dario estepario ... __ Apache Interface

LoadModule mod_ssl.so fails with win 2000, apache 1.3.26, mod_ssl 2.8.10, openssl 0.9.6d

2002-07-18 Thread RUSHTON,NIGEL (HP-UnitedKingdom,ex2)
-Mod_SSL_2.8.10-OpenSSL_0.9.6d-Wi n32.zip I have checked that the mod_ssl.so file is present, and not read only. The same symptoms were reported by Danalien [mailto:[EMAIL PROTECTED]] on apache 1.3.24 + mod_ssl 2.8.8, also with Windows 2000. Any suggestions? Nigel Rushton

Re: Mod_SSL for Windows 2000/NT/XP

2002-07-17 Thread arcean
to find that mod_ssl was present in the modules directory. But I couldn't find any openssl.exe and, from what I gather, I need this www.openssl.org/download/win32 ?? :) executable/toolkit to generate a key pair and CSR? I'm a bit new to web server security and have just had responsibility

Failure to load mod_ssl under NT/apache 2.0

2002-07-17 Thread Alex Moon
Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED]

RE: Failure to load mod_ssl under NT/apache 2.0

2002-07-17 Thread arcean
greatfully received as I cannot see what I have done wrong, Alex Technical Manager Online Learning Support Unit Middlesex University Business School [EMAIL PROTECTED] 020 8411 5092 __ Apache Interface to OpenSSL (mod_ssl

Re: Failure to load mod_ssl under NT/apache 2.0

2002-07-17 Thread hunter
Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED] __ D O T E A S Y - Join the web hosting revolution

Re: Failure to load mod_ssl under NT/apache 2.0

2002-07-17 Thread arcean
. __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED] __ D O T E A S Y

Re: Mod_SSL for Windows 2000/NT/XP

2002-07-17 Thread Brendan Lloyd
Guillaume wrote:: I guess this is what you're looking for: http://www.modssl.org/contrib/Apache_1.3.26-Mod_SSL_2.8.10-OpenSSL_0.9.6d-Win32.zip Brendan replied: I'm somewhat confused. I downloaded and uncompressed the above archive, uncompressed and was delighted to find that mod_ssl

Re: Failure to load mod_ssl under NT/apache 2.0

2002-07-17 Thread Brendan Lloyd
) if the above does not help? Good luck! Brendan __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager

Re: Failure to load mod_ssl under NT/apache 2.0

2002-07-17 Thread hunter
. __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED

Re: Failure to load mod_ssl under NT/apache 2.0

2002-07-17 Thread hunter
\mod_proxy_http.lib and object .\Release\mod_proxy_http.exp cd ..\.. cd modules\ssl NMAKE -nologo -f mod_ssl.mak CFG=mod_ssl - Win32 Release RECURSE=0 .\Release\mod_ssl.so if not exist .\Release/ mkdir .\Release tempfile.bat tempfile.bat

Re: Mod_SSL for Windows 2000/NT/XP

2002-07-16 Thread Alex Moon
is with regards to OpenSSL/mod_ssl? I've read in some places that Apache 2.0 supports/includes these, but then when I went to download the Windows binary distribution it had the suffix no_ssl? Source distributions of Apache 2.0 include mod_ssl. Binary distributions are a different story, but only

Re: Mod_SSL for Windows 2000/NT/XP

2002-07-16 Thread Cliff Woolley
__ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED]

mod_ssl mod_auth_radius

2002-07-16 Thread Andries, Bert
Apache_1.3.26 + mod_ssl-2.8.10 + openssl-0.9.6d ( as in http://www.modssl.org/example with added mod_proxy and mod_auth_radius found at: https://www.gnarst.net/authradius/ Proxy Ssl seems to work fine, but the combination with radius authentication fails. The https://www.gnarst.net/authradius

Re: Mod_SSL for Windows 2000/NT/XP

2002-07-16 Thread Guillaume Filion
At 00:50 -0400 16/07/02, Cliff Woolley wrote: On Tue, 16 Jul 2002, Brendan Lloyd wrote: And last but not least: can anyone clarify what the state of Apache 2.0 is with regards to OpenSSL/mod_ssl? I've read in some places that Apache 2.0 supports/includes these, but then when I went

Re: Mod_SSL for Windows 2000/NT/XP

2002-07-16 Thread Brendan Lloyd
I wrote: My situation is like Ike's: I too need to install mod_ssl and Open_SSL (ie. require secure web transaction capabilities) [on a Windows machine] is there a site from which I can download precompiled versions of (or an installation Wizard for) the above? Guillaume replied: I guess

Re: Mod_SSL for Windows 2000/NT/XP

2002-07-16 Thread Brendan Lloyd
Brendan wrote: I downloaded and uncompressed the above archive, uncompressed and was delighted to find that mod_ssl was present in the modules directory. But I couldn't find any openssl.exe and, from what I gather, I need this executable/toolkit to generate a key pair and CSR? I'm

Re: CCT issues with netscape and mod_ssl Urgent - On our productionsystem.

2002-07-15 Thread Christopher Welsh
there on MSIE browsers. cd apache_1.3.26 cd ../../mod_ssl gunzip mod_ssl-2.8.10-1.3.26.tar.gz tar -vxf mod_ssl-2.8.10-1.3.26.tar cd mod_ssl-2.8.10-1.3.26 make clean less INSTALL # Read the INSTALL file cd ../../openssl/openssl-0.9.6b make clean # Used gcc. Gcc supports

Mod_SSL for Windows 2000/NT/XP

2002-07-15 Thread Brendan Lloyd
Hi all, I am a new member to this group. I have a question which was asked on 2002-06-07 by Ike Ikonne (for which I could not locate any answer in the list archives) so please forgive me for the repetition... My situation is like Ike's: I too need to install mod_ssl and Open_SSL (ie. require

Re: Mod_SSL for Windows 2000/NT/XP

2002-07-15 Thread Guillaume Filion
mod_ssl and Open_SSL (ie. require secure web transaction capabilities), with questions as follows: * How can I build OpenSSL and mod_ssl on NT or 2000 (ie. do I have to buy compiler software)? Yes you can, but you'll need to buy MS Visual C++ to compile Apache. Instructions are available

Re: Mod_SSL for Windows 2000/NT/XP

2002-07-15 Thread Brendan Lloyd
Guillaume wrote: Yes you can, but you'll need to buy MS Visual C++ to compile Apache. Instructions are available at: http://httpd.apache.org/docs/windows.html http://www.modssl.org/source/exp/mod_ssl/pkg.mod_ssl/INSTALL.Win32 I note that the modssl install instructions are out of date

Re: Mod_SSL for Windows 2000/NT/XP

2002-07-15 Thread Cliff Woolley
On Tue, 16 Jul 2002, Brendan Lloyd wrote: And last but not least: can anyone clarify what the state of Apache 2.0 is with regards to OpenSSL/mod_ssl? I've read in some places that Apache 2.0 supports/includes these, but then when I went to download the Windows binary distribution it had

Re: URGENT: need mod_ssl rpm to work with RedHat's apache_1.3.22 rpm on RH6.2

2002-07-14 Thread Sander Steffann
which has 'ssl' in its name. Maybe you still have an old version of libssl.so on your system. This could also explain the crashes you see. Good luck, Sander. __ Apache Interface to OpenSSL (mod_ssl

Re: URGENT: need mod_ssl rpm to work with RedHat's apache_1.3.22 rpm on RH6.2

2002-07-14 Thread Shaun T. Erickson
__ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED]

Apache 1.3.26+mod_ssl 2.8.9 + vhost problem

2002-07-14 Thread Deim Agoston
Hello! I've got problems using $SUBJECT together. System is: - Debian Woody, security upgraded Apache and mod_ssl - related packeges: ii apache 1.3.26-0woody1 Versatile, high-performance HTTP server ii apache-common 1.3.26-0woody1 Support files for all Apache webservers ii libapache

Re: Apache 1.3.26+mod_ssl 2.8.9 + vhost problem

2002-07-14 Thread Deim Agoston
SSLCertificateFile conf/ssl.crt/server.crt SSLLog /var/log/apache/ssl_log SSLLogLevel warn /VirtualHost Bye, Ago __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List

CCT issues with netscape and mod_ssl Urgent - On our production system.

2002-07-14 Thread Christopher Welsh
not recognize. Can anyone help? I need to resolve this quickly. I'm sure this was not happening before I upgraded to 1.3.26 with x.x.10 mod_ssl when the security alert came out. Perhaps I missed something when I performed a make install over the top of the old version. -- Christopher Welsh

URGENT: need mod_ssl rpm to work with RedHat's apache_1.3.22 rpm on RH6.2

2002-07-13 Thread Shaun T. Erickson
I upgraded a 6.2 Red Hat system, from apache 1.2.12 to 1.3.22, using their rpms. In the process, the ssl module disappeared, and I cannot find a new one. Since the apache is installed from an rpm, there is no way for me to build the module from the mod_ssl-2.8.5-1.3.22.tar.gz source file I

Re: URGENT: need mod_ssl rpm to work with RedHat's apache_1.3.22 rpm on RH6.2

2002-07-13 Thread Shaun T. Erickson
__ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED]

Re: URGENT: need mod_ssl rpm to work with RedHat's apache_1.3.22 rpm on RH6.2

2002-07-13 Thread Shaun T. Erickson
where that file came from, to see if there is an updated version I should be migrating the ssl settings to ... -ste __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List

Re: URGENT: need mod_ssl rpm to work with RedHat's apache_1.3.22rpm on RH6.2

2002-07-13 Thread Cliff Woolley
for information on how to generate a backtrace for us. Thanks, --Cliff __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager

mod_ssl issue, https is not working

2002-07-12 Thread Payal Suratwala
I have installed Apache-V2.39-compiled with mod_ssl module. I have installed OpenSSL-V-0.9.6c and php4.2.2 on my server. I have created the RSA certificate and Private key and moved them in to the path described in the ssl.conf file. When I do ./apachectl startssl, the ssl starts but when

RE: mod_ssl issue, https is not working

2002-07-12 Thread Ashmore, Samuel R
- From: Payal Suratwala [mailto:[EMAIL PROTECTED]] Sent: Thursday, July 11, 2002 2:55 PM To: [EMAIL PROTECTED] Subject: mod_ssl issue, https is not working I have installed Apache-V2.39-compiled with mod_ssl module. I have installed OpenSSL-V-0.9.6c and php4.2.2 on my server. I have created

Re: RE: mod_ssl issue, https is not working

2002-07-12 Thread Shalen
us understand what is happening on your system. -Original Message- From: Payal Suratwala [mailto:[EMAIL PROTECTED]] Sent: Thursday, July 11, 2002 2:55 PM To: [EMAIL PROTECTED] Subject: mod_ssl issue, https is not working I have installed Apache-V2.39-compiled with mod_ssl module. I have

Re: mod_ssl issue, https is not working

2002-07-12 Thread Dwayne Miller
to you can aso attach the httpd.conf or ssl.conf. This might help us understand what is happening on your system. -Original Message- From: Payal Suratwala [mailto:[EMAIL PROTECTED]] Sent: Thursday, July 11, 2002 2:55 PM To: [EMAIL PROTECTED] Subject: mod_ssl issue, https is not working

RE: mod_ssl issue, https is not working

2002-07-12 Thread Boyle Owen
Have you created an SSL virtualhost? As well as installing mod_ssl, you laso have to define a virtual host to make use of it. Also, you have to tell the server to listen to port 443, e.g. Listen 192.168.0.1:443 VirtualHost 192.168.0.1:443 ...etc Rgds, owen Boyle -Original Message

RE: mod_ssl issue, https is not working

2002-07-12 Thread Ashmore, Samuel R
ALthough if you just use the default installs the virtual host is already setup -Original Message- From: Boyle Owen [mailto:[EMAIL PROTECTED]] Sent: Friday, July 12, 2002 8:30 AM To: [EMAIL PROTECTED] Subject: RE: mod_ssl issue, https is not working Have you created an SSL virtualhost

[BugDB] compile fails (OpenBSD 3.0, mod_ssl/Apache 1.3.26) (PR#730)

2002-07-08 Thread modssl-bugdb
Full_Name: Denis Chatelain Version: 2.8.10-1.3.26 OS: OpenBSD 3.0 Submission from: (NULL) (193.252.202.117) Apache fails to compile with the mod_ssl 2.8.10-1.3.26 patch (I might do something wrong somewhere, but it's easier to suspect somebody else :). It looks for openssl and ssleay in bin

Re: Buffer overflow vulnerability in apache2.0.30 mod_ssl

2002-07-06 Thread Arlen Duncan II
the mod_ssl included in the apache2.0.39 is reporting as version 2.8.7 which is vulnerable to buffer overflow. CVE: CAN-2002-0082 Is the mod_ssl with 2.0.39 vulnerable as reported? or is this a false positive? If it is vulnerable, how do I update the mod_ssl as distributed with apache2.0.39

apache+mod_ssl-1.3.26+2.8.9 to 2.8.10

2002-07-03 Thread Jack L. Stone
Hello! Am running FBSD 4.5 with apache+mod_ssl-1.3.26+2.8.9 Just updated Apache1.3.26 (for patch) to above with mod_ssl-2.8.9 and now I see that mod_ssl has a bug fix and now has version 2.8.10 out. I'm having one of those days and cannot see anything about the bug fix for version 10

[BugDB] PRIVATE: problem on mod_ssl-2.8.10-1.3.26 and openssl-0.9.7-pre1.tar.gz (PR#726)

2002-07-01 Thread modssl-bugdb
Full_Name: Dante Picca Version: 2.8.10 OS: Linux RedHat 7.2 Athlon Submission from: (NULL) (195.110.148.66) Hi, I've found a problem compiling mod_ssl-2.8.10-1.3.26 with openssl-0.9.7-pre1.tar.gz I've used the following commands: cd openssl-0.9.7 make make test make install cd ../mod_ssl

Re: [BugDB] PRIVATE: problem on mod_ssl-2.8.10-1.3.26 and openssl-0.9.7-pre1.tar.gz (PR#726)

2002-07-01 Thread Lutz Jaenicke
On Mon, Jul 01, 2002 at 12:52:14PM +0200, [EMAIL PROTECTED] wrote: Full_Name: Dante Picca Version: 2.8.10 OS: Linux RedHat 7.2 Athlon Submission from: (NULL) (195.110.148.66) I've found a problem compiling mod_ssl-2.8.10-1.3.26 with openssl-0.9.7-pre1.tar.gz ... ssl_engine_vars.c:411

Apache mod_ssl hanging browser

2002-06-27 Thread Peter Cronin
Was wondering if anyone can help me? I believe I have mod_ssl loaded correctly and configurd correctly, but I get the following situation when I access my SSL site. - https://secure.aebdemo.com, it just hangs on site, but says host contacted... - this is what the SSL.log says: It looks like

Re: Apache mod_ssl hanging browser

2002-06-27 Thread Geoff Thorpe
Hi, On Thu, 27 Jun 2002, Peter Cronin wrote: Was wondering if anyone can help me? I believe I have mod_ssl loaded correctly and configurd correctly, but I get the following situation when I access my SSL site. - https://secure.aebdemo.com, it just hangs on site, but says host contacted

Cannot startup the mod_ssl

2002-06-26 Thread Eric Lai
Hi, After the installation of the mod_ssl, when I type the following command, [root@localhost bin]# ./apachectl startssl ./apachectl startssl: httpd could not be started Can you tell me the solution. Thanks\ Eric

Re: Cannot startup the mod_ssl

2002-06-26 Thread michael_pacey
the mod_ssl 26/06/2002 10:03

hanging apache processes (1.3.29 + mod_ssl 2.8.9)

2002-06-24 Thread Alex Kotov
We have a strange problem with our Apache+mod_ssl server (Apache/1.3.26 (Unix) mod_perl/1.22 mod_ssl/2.8.9 OpenSSL/0.9.6, on Linux 2.2.19). After a while the server processes become stuck while waiting for the data from a socket. The timeout is set to 300 in httpd.conf, but the processes happily

Re: hanging apache processes (1.3.29 + mod_ssl 2.8.9)

2002-06-24 Thread Cliff Woolley
sure that file descriptor 5 is the connection to the client? What SSLRandomSeed are you using? This sounds like one of those /dev/random not-enough-entropy problems to me. --Cliff __ Apache Interface to OpenSSL (mod_ssl

[ANNOUNCE] mod_ssl 2.8.10

2002-06-24 Thread Ralf S. Engelschall
Another bugfixing round in the maintainance of mod_ssl 2.8 for Apache 1.3. Fetch it and upgrade from: o http://www.modssl.org/source/ o ftp://ftp.modssl.org/source/ Yours, Ralf S. Engelschall [EMAIL PROTECTED

Re: hanging apache processes (1.3.29 + mod_ssl 2.8.9)

2002-06-24 Thread Alex Kotov
that file descriptor 5 is the connection to the client? What SSLRandomSeed are you using? This sounds like one of those /dev/random not-enough-entropy problems to me. --Cliff __ Apache Interface to OpenSSL (mod_ssl

Re: hanging apache processes (1.3.29 + mod_ssl 2.8.9)

2002-06-24 Thread Andy Osborne
__ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED

Re: hanging apache processes (1.3.29 + mod_ssl 2.8.9)

2002-06-24 Thread Alex Kotov
by the server trying to read 11 bytes from the client, and this is where mod_ssl may wait for a long time without checking for a timeout. Could someone point me to the place in the code where this read happens? I would hate to switch to stronghold :( Thanks, - Alex On Mon, 24 Jun 2002, Andy Osborne

Re: hanging apache processes (1.3.29 + mod_ssl 2.8.9)

2002-06-24 Thread Peter Viertel
MSIE 6.0; Windows NT 5.0; DigExt)" as User-Agent. Unfortunately, changing tcp keepalive setting is not an option for us. I don't know all the intricacies of SSL handshake, but it looks like it starts by the server trying to read 11 bytes from the client, and this is where mod_ssl may wait for a

[BugDB] Buffer overflow in mod_ssl (patch enclosed) (PR#724)

2002-06-23 Thread modssl-bugdb
Full_Name: Frank Denis - Jedi/Sector One Version: 2.8.8 (OpenBSD-current) OS: OpenBSD Submission from: (NULL) (212.198.0.93) There's an easy to exploit (through .htaccess files) buffer overflow in mod_ssl. The EAPI's rewrite parser hook skips spaces without checking whether the pointer went

Re: Apache 1.3.26/mod_ssl-2.8.9-1.3.26 segfault

2002-06-21 Thread gkuchta
, 20 Jun 2002 [EMAIL PROTECTED] wrote: Per the recently announced vulnerability in versions of apache 1.3.26, I decided to be a happy little prole and update all of my webservices. Unpacking clean source for apache, mod_ssl and mod_perl-1.26, I upgraded the packages like I always do

Two certificates in apache and mod_ssl

2002-06-21 Thread Kirchner Stefan
Hello, I defined two virtual hosts in apache + mod_ssl with two different server certificates. I tried to access the https connection and I got for both virtual hosts the certificate of the first virtual host. How do I have to configure it to get the right certificate of each virtual host

RE: Two certificates in apache and mod_ssl

2002-06-21 Thread Brian F. Vaughan
Message- From: Kirchner Stefan [mailto:[EMAIL PROTECTED]] Sent: Friday, June 21, 2002 10:34 AM To: '[EMAIL PROTECTED]' Subject: Two certificates in apache and mod_ssl Hello, I defined two virtual hosts in apache + mod_ssl with two different server certificates. I tried to access the https

Re: Two certificates in apache and mod_ssl

2002-06-21 Thread Sean M Alderman
Are you using IP Based virtual hosting? I don't think you can have multiple certificates on a since IP on the same port. On Fri, 2002-06-21 at 10:34, Kirchner Stefan wrote: Hello, I defined two virtual hosts in apache + mod_ssl with two different server certificates. I tried to access

[ANNOUNCE] mod_ssl 2.8.9 for Apache 1.3.26

2002-06-20 Thread Ralf S. Engelschall
On demand by the release of Apache 1.3.26 I've made available mod_ssl 2.8.9. The details are appended below. Fetch it from: o http://www.modssl.org/source/ o ftp://ftp.modssl.org/source/ Yours, Ralf S. Engelschall

Compile fails while building mod_ssl - ?? bison - lex.ssl_expr_yy.c(1753)

2002-06-20 Thread hunter
Could someone help me figure out why my compile fails... This is the first time I have tried to compile with mod_ssl - that is with openssl in srclib. The code builds fine otherwise. Compile errors... echo/nologo /MD /W3 /O2 /I ../../include /I ../../srclib/apr/include /I ../../srclib/apr

Re: Apache 1.3.26 and mod_ssl

2002-06-20 Thread Manuel . Bernhardt
Hello there, I've patched the Apache 1.3.26 sources with mod_ssl 2.8.8 and --force Option and it works I've apply the patch for 1.3.26 sh-2.03# patch -p0 modssl-2.8.8-1.3.26-fixup.patch Looks like a unified context diff. The next patch looks like a unified context diff

mod_ssl-2.8.9-1.3.26

2002-06-20 Thread Henning Sittler
Title: mod_ssl-2.8.9-1.3.26 mod_ssl-2.8.9-1.3.26 is available for download on modssl.org This should be what most people are looking for in regards to Apache 1.3.26 !! Henning Sittler www.inscriber.com

Apache 1.3.26/mod_ssl-2.8.9-1.3.26 segfault

2002-06-20 Thread gkuchta
Hi, Per the recently announced vulnerability in versions of apache 1.3.26, I decided to be a happy little prole and update all of my webservices. Unpacking clean source for apache, mod_ssl and mod_perl-1.26, I upgraded the packages like I always do: apply mod_ssl to apache, apply mod_perl

Re: Apache 1.3.26/mod_ssl-2.8.9-1.3.26 segfault

2002-06-20 Thread Cliff Woolley
On Thu, 20 Jun 2002 [EMAIL PROTECTED] wrote: Per the recently announced vulnerability in versions of apache 1.3.26, I decided to be a happy little prole and update all of my webservices. Unpacking clean source for apache, mod_ssl and mod_perl-1.26, I upgraded the packages like I always do

Re: Apache 1.3.26 and mod_ssl

2002-06-19 Thread Udo Schweigert
h... wonder why I didn't notice those before? Sigh. Anyway, attached is a patch (totally untested!) which *should* replace the missing part of the mod_ssl patch. So after you've run ./configure --force, apply this patch by going to the apache_1.3.26/ directory and running patch -p0 modssl

Re: Apache 1.3.26 and mod_ssl

2002-06-19 Thread Ralf S. Engelschall
On Tue, Jun 18, 2002, Matthew Ruzicka wrote: Pardon my possible ignorance here, but has anyone come up with any good work arounds for getting mod_ssl to work with the (patched) Apache 1.3.26 since 2.8.8-1.3.24 only wants to work with 1.3.24? I assume a new version of mod_ssl will be on its

Apache 1.3.26 and mod_ssl

2002-06-18 Thread Matthew Ruzicka
Pardon my possible ignorance here, but has anyone come up with any good work arounds for getting mod_ssl to work with the (patched) Apache 1.3.26 since 2.8.8-1.3.24 only wants to work with 1.3.24? I assume a new version of mod_ssl will be on its way shortly, but was looking for something

Re: Apache 1.3.26 and mod_ssl

2002-06-18 Thread Cliff Woolley
On Tue, 18 Jun 2002, Matthew Ruzicka wrote: Pardon my possible ignorance here, but has anyone come up with any good work arounds for getting mod_ssl to work with the (patched) Apache 1.3.26 since 2.8.8-1.3.24 only wants to work with 1.3.24? I'm looking

Re: Apache 1.3.26 and mod_ssl

2002-06-18 Thread Cliff Woolley
On Tue, 18 Jun 2002, Matthew Ruzicka wrote: Pardon my possible ignorance here, but has anyone come up with any good work arounds for getting mod_ssl to work with the (patched) Apache 1.3.26 since 2.8.8-1.3.24 only wants to work with 1.3.24? I assume a new version of mod_ssl will be on its

Re: Apache 1.3.26 and mod_ssl

2002-06-18 Thread James Bromberger
for getting mod_ssl to work with the (patched) Apache 1.3.26 since 2.8.8-1.3.24 only wants to work with 1.3.24? I'm looking into it. __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing

mod_ssl maintainership

2002-06-18 Thread Tim Tassonis
Hi It seem like due to his various other commitments, RSE is not really active on mod_ssl anymore. Is there a plan to transfer maintainership of mod_ssl to somebody else? Bye Tim __ Apache Interface to OpenSSL (mod_ssl

<    1   2   3   4   5   6   7   8   9   10   >