Re: Netscape ask always certificat

2003-10-30 Thread Mads Toftum
On Thu, Oct 30, 2003 at 11:40:52AM +0100, xavier jeannin wrote: [SNIP] > --- > drop connection and then reconnect > CONNECTED(0003) > --- > New, TLSv1/SSLv3, Cipher is EDH-RSA-DES-CBC3-SHA > SSL-Session: >Protocol : TLSv1 >Cipher: EDH-RSA-DES-CBC3-SHA >Session-ID: >Session

Re: Netscape ask always certificat

2003-10-30 Thread xavier jeannin
Ok Sorry I correct my mistake so now I  can connect  with SSL Client and get my HTML Page. Thank you it is a powerful tools to debug (redirect, etc) I send to you the response I get, I am not capable to analyse the SSL sequence. Is it a normal sequence ? Seeing this can we deduce the sessi

Re: Netscape ask always certificat

2003-10-30 Thread Mads Toftum
On Thu, Oct 30, 2003 at 09:24:04AM +0100, xavier jeannin wrote: > 24359:error:14094413:SSL routines:SSL3_READ_BYTES:sslv3 alert > unsupported certificate:s3_pkt.c:1031:SSL alert number 43 > 24359:error:1409E0E5:SSL routines:SSL3_WRITE_BYTES:ssl handshake > failure:s3_pkt.c:514: > > I am sorry bu

Re: Netscape ask always certificat

2003-10-30 Thread xavier jeannin
Hi Thanks Mads for your answer : I should write Netscape still ask the cert at each page  instead of "it does not work". I mad the test you suggest, here is the result [EMAIL PROTECTED] jeannin]# openssl s_client -host intranet.stic.cnrs.fr -port 443 -cert /usr/local/apache/conf/ssl.crt/intr

Re: Netscape ask always certificat

2003-10-29 Thread Matt Stevenson
Hi, Try using the status module ExtendedStatus On SetHandler server-status That gives some info about ssl sessions near the bottom. Currently I'm using client certs and firebird with ask every time set. This results in a prompt every 300 seconds as the session times out. Which version of

Re: Netscape ask always certificat

2003-10-29 Thread Mads Toftum
On Wed, Oct 29, 2003 at 05:15:13PM +0100, xavier jeannin wrote: > I have developped Web application, that uses X509 certificat. Netscape > ask at each time (page) the certificat. As my users have several > certificates they do not use the option "Select Automaticly" in > netscape, I have to say

Netscape ask always certificat

2003-10-29 Thread xavier jeannin
Hello I have looked for information in Archive about my problem. I don't find answer to my problem, sorry in advance to ask a question about a very known problem. I have developped Web application, that uses X509 certificat. Netscape ask at each time (page) the certificat. As my users have sev