SSLRequireSSL within LimitExcept

2010-02-19 Thread Tobias Hensel
by adding SSLRequireSSL within LimitExcept. I added the following to my svn-config DAV svn SVNPath /svn/svnpath AuthType Basic AuthName "Subversion Repository" AuthUserFile authfile Require valid-user SSLRequireSSL When I access the svn via https it works, but when I ac

Re: SSLRequireSSL Ineffective

2009-03-14 Thread Lee Hughes
Some more info -- if I add this same Directory section to httpd.conf it works fine and forces https access. It's like the line Include conf/extra/httpd-ssl.conf in httpd.conf has no effect -- why would that be? Thanks- Lee

SSLRequireSSL Ineffective

2009-03-14 Thread Lee Hughes
Hi, I have https working with Apache 2.2.11, but SSLRequireSSL seems to have no effect -- I can still browse docs in the htdocs directory with straight http or https. Here's the section I added to httpd-ssl.conf, which is Included from httpd.conf. No .htaccess files exist. SSLRequi

SSLEngine optional and SSLRequireSSL ?

2007-02-16 Thread Rémi Denis-Courmont
Hello, It seems that SSLRequireSSL prevents TLS Upgrade from working at all, or I got something wrong. Still, I have not been able to find out how to force TLS Upgrade on a SSLEngine optional... If I use SSLRequireSSL, Apache will properly return 426 whenever a client performs an

environment variables and SSLRequireSSL problem

2002-10-06 Thread Ondrej Kraus
Hello, I have problem with environment variables and directive SSLRequireSSL. SSL works, but I cannot test this in php script(_SERVER['HTTPS']) and SSLRequireSSL directive denies my access to directory, which is accessed via SSL. Thank you for any idea. Ondrej Kraus related in

Re: SSLRequireSSL Circumvention

2002-06-13 Thread Cliff Woolley
f I wanted to > > put it back in? > > Ah, forgot to respond to this part. If you want that, then you would > obviously have to use 'satisfy any'. And in that case, you can't use > SSLRequireSSL. You can use a RewriteRule to get the same effect. I just discovered

RE: SSLRequireSSL Circumvention

2002-06-04 Thread Han,Donghoon
Just remove the 'satisfy any' line and try it again. This worked on my server. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of [EMAIL PROTECTED] Sent: Wednesday, June 05, 2002 9:52 AM To: Cliff Woolley Cc: [EMAIL PROTECTED] Subject: Re: SSL

Re: SSLRequireSSL Circumvention

2002-06-04 Thread phil
Yeah, I zapped the 'satisfy any' and 'deny from all' which made the server act as expected. I think your explaination of the behavior is correct. I'm still not understanding how this action is understandable from the documentation for SSLRequireSSL, nor the fact

Re: SSLRequireSSL Circumvention

2002-06-04 Thread Cliff Woolley
ted to > put it back in? Ah, forgot to respond to this part. If you want that, then you would obviously have to use 'satisfy any'. And in that case, you can't use SSLRequireSSL. You can use a RewriteRule to get the same effect. It probably wouldn

Re: SSLRequireSSL Circumvention

2002-06-04 Thread Cliff Woolley
On Tue, 4 Jun 2002 [EMAIL PROTECTED] wrote: > SSLRequireSSL > DirectoryIndex index.wp2 > AddHandler cgi-script .cgi > Options +ExecCGI > deny from all > AuthType Basic > AuthUserFile /yadda/yadda/path/to/site/root/admin/.htpasswd > AuthName "Administrative Pages&qu

SSLRequireSSL Circumvention

2002-06-04 Thread phil
I seem to have accidentally circumvented the SSLRequireSSL directive. Here's what my .htaccess file looks like: SSLRequireSSL DirectoryIndex index.wp2 AddHandler cgi-script .cgi Options +ExecCGI deny from all AuthType Basic AuthUserFile /yadda/yadda/path/to/site/root/admin/.htpasswd Aut

Re: Invalid command 'SSLRequireSSL'

2001-06-04 Thread Firas
TED]> Sent: Thursday, May 31, 2001 8:58 AM Subject: RE: Invalid command 'SSLRequireSSL' > Are you using mod_ssl as static or dynamic module? > > > >> --enable-shared=ssl > > I don't believe you want this, if... > > > >> --enable-module=ssl \ >

RE: Invalid command 'SSLRequireSSL'

2001-05-31 Thread McCaffity, Ray
-Original Message- From: Firas [mailto:[EMAIL PROTECTED]] Sent: Wednesday, May 30, 2001 7:15 PM To: [EMAIL PROTECTED] Subject: Re: Invalid command 'SSLRequireSSL' Thanks for the advice Tobias, unfortunately that didn't work either. Something is seriously broken with mod_ssl

Re: Invalid command 'SSLRequireSSL'

2001-05-30 Thread Almut Behrens
ured 2.8.2 ... So, just assuming this were the case, then it could still be that you get the error message for the SSLRequireSSL directive, because mod_ssl is not loaded (as has already been pointed out). As far as I can tell from your original post, you configured mod_ssl as a DSO module, meaning tha

Re: Invalid command 'SSLRequireSSL'

2001-05-30 Thread Firas
ay 30, 2001 12:01 PM Subject: Re: Invalid command 'SSLRequireSSL' > Hiho there... > > I got the same error inside the httpd.conf file so i tried SSLRequire > inside a .htaccess file in the directory to be secured...that worked.. > > Hope that helps... > > - tobia

Re: Invalid command 'SSLRequireSSL'

2001-05-30 Thread ]R[Target
t; - Original Message - > From: "BERWART Thierry" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Wednesday, May 30, 2001 7:46 AM > Subject: RE: Invalid command 'SSLRequireSSL' > > >> >> Hello, >> >> The &qu

Re: Invalid command 'SSLRequireSSL'

2001-05-30 Thread Firas
I actually got the right certificate, so i'm sure that ssl over http was enabled This is really strange. - Original Message - From: "Owen Boyle" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, May 30, 2001 10:17 AM Subject: Re: Invalid command 

Re: Invalid command 'SSLRequireSSL'

2001-05-30 Thread Owen Boyle
Firas wrote: > You were right the module isn't loaded, but how come I can access the server > throught https ?? I guess you actually defined a non-SSL virtualhost on port 443 and so the traffic was really plain HTTP... (did you get all the certificate dialogue?) > That's strange, I checked apach

Re: Invalid command 'SSLRequireSSL'

2001-05-30 Thread Firas
MAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, May 30, 2001 8:09 AM Subject: Re: Invalid command 'SSLRequireSSL' > Firas wrote: > > > > Syntax error on line 1267 of /usr/local/apache/conf/httpd.conf: > > Invalid command 'SSLRequireSSL',

Re: Invalid command 'SSLRequireSSL'

2001-05-30 Thread Owen Boyle
BERWART Thierry wrote: > > Hello, > > The "SSLRequireSSL" command doesn't exist !! Has it been superseded? It's in the docs http://www.modssl.org/docs/2.8/ssl_reference.html#ToC22 Rgds, Owen Boyle ___

Re: Invalid command 'SSLRequireSSL'

2001-05-30 Thread Firas
to access the secure server at all right ? - Firas - Original Message - From: "BERWART Thierry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, May 30, 2001 7:46 AM Subject: RE: Invalid command 'SSLRequireSSL' > > Hello, &

Re: Invalid command 'SSLRequireSSL'

2001-05-30 Thread Owen Boyle
Firas wrote: > > Syntax error on line 1267 of /usr/local/apache/conf/httpd.conf: > Invalid command 'SSLRequireSSL', perhaps mis-spelled or defined by a module > not included in the server configuration This usually means that mod_ssl is not in apache... Try $ ./httpd -l

RE: Invalid command 'SSLRequireSSL'

2001-05-30 Thread BERWART Thierry
Hello, The "SSLRequireSSL" command doesn't exist !! try : SSLRequire true Thierry -Message d'origine- De : Firas [mailto:[EMAIL PROTECTED]] Envoyé : mercredi 30 mai 2001 12:00 A : [EMAIL PROTECTED] Objet : Invalid command

Invalid command 'SSLRequireSSL'

2001-05-30 Thread Firas
Hi everyone, I'm trying to use SSLRequireSSL to protect a directory but I keep getting the following error on apachectl configtest : Syntax error on line 1267 of /usr/local/apache/conf/httpd.conf: Invalid command 'SSLRequireSSL', perhaps mis-spelled or defined by a module not

SSLRequireSSL and +FakeBasicAuth

2001-05-24 Thread Madalina Baltatu
Hello all! Sorry if you've already seen this mail, I'm reposting it because I haven't. I'm new to mod_ssl, so I apologize if I ask too dumb questions... I have apache + mod_ssl and I would need to use groups of DNs for authorization purposes. I saw the example in Chapter 5 (HowTo) of the tutori

SSLRequireSSL and +FakeBasicAuth

2001-05-23 Thread Madalina Baltatu
Hello all! I'm new to mod_ssl, so I'm sorry if I ask too dumb questions... I would need to use groups of DNs for authorization purposes. I saw the example in Chapter 5 (HowTo) of the tutorial at http://www.modssl.org/docs/2.8/ssl_howto.html which uses the SSLOption +FakeBasicAuth that does a basi

SSLRequireSSL and +FakeBasicAuth

2001-05-20 Thread Madalina Baltatu
Hello all! I'm new to mod_ssl, so I'm sorry if I ask too dumb questions... I would need to use groups of DNs for authorization purposes. I saw the example in Chapter 5 (HowTo) of the tutorial at http://www.modssl.org/docs/2.8/ssl_howto.html which uses the SSLOption +FakeBasicAuth that does a bas

Re: SSLRequireSSL and deny

2001-03-30 Thread Ralf S. Engelschall
On Wed, Mar 28, 2001, [EMAIL PROTECTED] wrote: > Wondering if anybody came across this problem before. > Say I have > > > ServerName pikachutest > DocumentRoot /home/httpd/devel/TonyC/ > > > SSLRequireSSL >

SSLRequireSSL and deny

2001-03-29 Thread sam
Hi, Wondering if anybody came across this problem before. Say I have ServerName pikachutest DocumentRoot /home/httpd/devel/TonyC/ SSLRequireSSL order deny,allow deny from all That is I am trying to ensure

RE: SSLRequireSSL

2001-03-09 Thread Brett W. McCoy
On Fri, 9 Mar 2001, Chong, Arthur wrote: > In the scenario you implemented with "Tomcat and JSPs and servlets and > all..." > do you actually support different virtual hosts with specific directories > that are secure using the "redirects from non-secure area to secure > area"...? > > How would y

RE: SSLRequireSSL

2001-03-09 Thread Chong, Arthur
you handle different certificates for the different virtual domains? Is that do-able too? Thanks for the insight! -Arthur. -Original Message- From: Brett W. McCoy [mailto:[EMAIL PROTECTED]] Sent: Friday, March 09, 2001 8:57 AM To: '[EMAIL PROTECTED]' Subject: RE: SSLRequireS

Re: SSLRequireSSL

2001-03-09 Thread Owen Boyle
"Chong, Arthur" wrote: > > Pardon my *stupidity* but when you say _default_:443 > you really mean whatever the IP addresss is or > virtual domain name lime "www.mydomain.com" - right? Yes. It's just to make the instructions generic and not specific to any particular installation. Rgds, Owen Bo

RE: SSLRequireSSL

2001-03-09 Thread Brett W. McCoy
On Fri, 9 Mar 2001, Chong, Arthur wrote: > Pardon my *stupidity* but when you say _default_:443 > you really mean whatever the IP addresss is or > virtual domain name lime "www.mydomain.com" - right? > > > ... > > SSLRequireSSL > ... > &

RE: SSLRequireSSL

2001-03-09 Thread Chong, Arthur
Pardon my *stupidity* but when you say _default_:443 you really mean whatever the IP addresss is or virtual domain name lime "www.mydomain.com" - right? ... SSLRequireSSL ... -Original Message- From: Owen Boyle [mailto:[EMAIL PROTECTED]] Sent: Friday

Re: SSLRequireSSL

2001-03-09 Thread Brett W . McCoy
On 2001.03.09 03:28 Owen Boyle wrote: > There are many ways to control access and the override rules can get a > bit complicated. I suspect your SSLRequireSSL is being overridden by a > later directive in the non-SSL Vhosts or in a .htaccess file... Nope, that wasn't the case

Re: SSLRequireSSL

2001-03-09 Thread Owen Boyle
"Brett W. McCoy" wrote: > > Maybe I am missing something about the use of SSLRequireSSL, but I am > trying to control access to a directory so that only connections using SSL > to that directory can be made. But no matter what directory I use that > directive in, non-

RE: SSLRequireSSL

2001-03-08 Thread Brett W . McCoy
We are basically just kinda slapping SSL on top and migrating stuff over from JServ to Tomcat as well, and probably later reorganizing things more once the first hurdle is done. I think the misunderstanding about how SSLRequireSSL works was my initial problem. The documentation states that it d

RE: SSLRequireSSL

2001-03-08 Thread Chong, Arthur
directories under the virtual host directory... Hope I'm not confusing you! Thanks for your responses! -Arthur. -Original Message- From: Brett W. McCoy [mailto:[EMAIL PROTECTED]] Sent: Thursday, March 08, 2001 3:53 PM To: [EMAIL PROTECTED] Subject: SSLRequireSSL Maybe I am missing some

SSLRequireSSL

2001-03-08 Thread Brett W. McCoy
Maybe I am missing something about the use of SSLRequireSSL, but I am trying to control access to a directory so that only connections using SSL to that directory can be made. But no matter what directory I use that directive in, non-SSL connections can still connect to anything in that

Re: SSLRequireSSL

2000-10-02 Thread Mads Toftum
on Mon, Oct 02, 2000 at 11:47:54PM +0200 [EMAIL PROTECTED] wrote: > Has the version of Apache (I use Apache 1.3.3) something to do with it? Yes. Directive names has changed since then - do yourself a favor and upgrade to 1.3.12+2.6.6. BTW: Please don't post to this list in html! vh Mads Toftu

SSLRequireSSL

2000-10-02 Thread Enrique Mochales Estany
Hi all, I'm running a main host in port 80 and a virtual host for SSL. I want the secure directory to be accessed only through SSL, so I defined the following in the httpd.conf: SSLRequireSSL As far as I know, this directives are correctly written; however, I get a syntax error when I

Re: [MODSSL-USERS] SSLRequireSSL error

2000-02-26 Thread Eli Marmor
> > > apachectl -ssl configtest > > > apachectl -ssl start > > > apachectl -ssl graceful > > > > Is there anything wrong with the flag "startssl"? > > Yes. You can't "restart" or "graceful" with "startssl". That was > my problem... trying to "restart" an SSL server. Oops... My fault... I didn

Re: [MODSSL-USERS] SSLRequireSSL error

2000-02-26 Thread Patrick Robinson
> > You have to enable the mod_ssl stuff. Use: httpd -DSSL -t > > > > I have posted a patch to this list some time ago which > > adds a -ssl option to apachectl. This allows you to > > SSL-ify any apachectl command by using: > > > > apachectl -ssl configtest > > apachectl -ssl start > > apachect

Re: [MODSSL-USERS] SSLRequireSSL error

2000-02-26 Thread Patrick Robinson
Nate Carlson wrote: > > On Fri, 25 Feb 2000, Patrick Robinson wrote: [...] > > I get a syntax error from "httpd -t" (or "apachectl configtest") when > > I use SSLRequireSSL inside a , like this: > > > > > > SSLRequireSSL > > [

Re: SSLRequireSSL error

2000-02-26 Thread Eli Marmor
> You have to enable the mod_ssl stuff. Use: httpd -DSSL -t > > I have posted a patch to this list some time ago which > adds a -ssl option to apachectl. This allows you to > SSL-ify any apachectl command by using: > > apachectl -ssl configtest > apachectl -ssl start > apachectl -ssl graceful I

Re: SSLRequireSSL error

2000-02-26 Thread Stefan H. Holek
On Fri, 25 Feb 2000, Patrick Robinson wrote: > I get a syntax error from "httpd -t" (or "apachectl configtest") when > I use SSLRequireSSL inside a , like this: > You have to enable the mod_ssl stuff. Use: httpd -DSSL -t I have posted a patch to this list so

Re: SSLRequireSSL error

2000-02-25 Thread Nate Carlson
On Fri, 25 Feb 2000, Patrick Robinson wrote: > Hi folks, > > I asked this question a couple of weeks ago, but got no responses, > so I thought I might try again: > > I get a syntax error from "httpd -t" (or "apachectl configtest") when >

SSLRequireSSL error

2000-02-25 Thread Patrick Robinson
Hi folks, I asked this question a couple of weeks ago, but got no responses, so I thought I might try again: I get a syntax error from "httpd -t" (or "apachectl configtest") when I use SSLRequireSSL inside a , like this: SSLRequireSSL ServerName my.server.n

SSLRequireSSL problems

2000-02-14 Thread Patrick Robinson
I'm getting a syntax error from "httpd -t" when I use SSLRequireSSL inside a , like this: SSLRequireSSL ServerName my.server.name DocumentRoot /some/secure/directory SSLEngine on SSLCertificateFile /usr/local/apache/conf/ssl.crt/server.crt SSLCertific

Re: SSLRequireSSL Alternatives

1999-10-28 Thread Mats Dufberg
On Wed, 27 Oct 1999, Nate Carlson wrote: > Anyone know of an easy way to get all non-ssl requests for a certain > directory to be redirected to SSL? Eg, if I have a page that should > require ssl located at both http://www.example.com/requiressl and at > https://www.example.com/requiressl, how co

Re: SSLRequireSSL Alternatives

1999-10-27 Thread Nate Carlson
On Wed, 27 Oct 1999, Charles P. Wright wrote: > Redirect / https://sitename.com > Redirect /service https://sitename.com/service > > http://www.apache.org/docs/mod/mod_alias.html#redirect > Works perfectly, exactly what I was looking for. Guess I had a brain freeze. Danka! -- Nate Carlson <[

Re: SSLRequireSSL Alternatives

1999-10-27 Thread Charles P. Wright
On Wed, 27 Oct 1999, Nate Carlson wrote: > Anyone know of an easy way to get all non-ssl requests for a certain > directory to be redirected to SSL? Eg, if I have a page that should > require ssl located at both http://www.example.com/requiressl and at > https://www.example.com/requiressl, how cou

SSLRequireSSL Alternatives

1999-10-27 Thread Nate Carlson
Anyone know of an easy way to get all non-ssl requests for a certain directory to be redirected to SSL? Eg, if I have a page that should require ssl located at both http://www.example.com/requiressl and at https://www.example.com/requiressl, how could I force a request to the http site to redirect

Re: SSLRequireSSL

1999-08-06 Thread Cliff Woolley
Alias /sslonly/ /usr/local/apache/sslonly AllowOverride None Options None SSLRequireSSL Give this a try... hope this helps. -Cliff Cliff Woolley Central Systems Software Administrator Washington and Lee University http://www.wlu.edu/~jwoolley/ Work: (540) 463-8089 Pager:

Re: SSLRequireSSL

1999-08-05 Thread Cliff Woolley
directory secure ( where I put my secure form ) and I want to start secure mod just when go in secure directory I put this in httpd.conf AllowOverride None Options None Order allow, deny Allow from all SSLRequireSSL __

SSLRequireSSL

1999-08-05 Thread Ovidiu Asiminei
None   Order allow, deny   Allow from all       SSLRequireSSL   But I think made a mistake because not work   If someone knows a fix that would be much appriciated.   Regards   Ovidiu

RE: securing a directory with SSLRequireSSL

1999-06-09 Thread Cantrell, mark
try using mod_rewrite, you'll probably have to run configure again, but that should do what you want --mark -Original Message- From: Stéphane THIBAUDEAU To: [EMAIL PROTECTED] Sent: 6/9/99 10:00 AM Subject: securing a directory with SSLRequireSSL Hi, I'm using RedHat 5

securing a directory with SSLRequireSSL

1999-06-09 Thread Stéphane THIBAUDEAU
y_project/public_html/intranet/unsecure_area" using HTTP (I don't mind if it's possible to access it with HTTPS or not). To do that, I wrote a ".htaccess" file in "secure_area" with only SSLRequireSSL and I declared 2 virtual hosts as you can see below: SSLCACertifi

Re: R: R: R: SSLRequire/SSLRequireSSL

1999-06-03 Thread Ralf S. Engelschall
On Thu, Jun 03, 1999, Andrea e Luca Giacobazzi wrote: > [...] > P.S. To include my patch in mod_ssl I have to build everything just in one > routine hook? How can I make a new module ssl_ocsp_ldap.c and .h with all my > hooks and definitions ? This depends how clean your patch currently is. Whe

R: R: R: SSLRequire/SSLRequireSSL

1999-06-02 Thread Andrea e Luca Giacobazzi
>Ah, ok. I'm relieved to hear that. Your OCSP patches perhaps return OK in an >auth handler or manipulate something related to Apache's Satisfy directive? > I did really worked with SSLRequire and my new env var SSL_OCSP_LDAP_RESPONSE ! Modifying ssl_engine_vars an Vaugham did. > >Err.. Netscape'

Re: R: R: SSLRequire/SSLRequireSSL

1999-06-01 Thread Ralf S. Engelschall
On Tue, Jun 01, 1999, Andrea e Luca Giacobazzi wrote: > >Ok, +StructRequire is only possible with 2.3.x, so it's clear that it > doesn't > >work for 2.2.8. I've also looked at your httpd.conf: it's mainly the Apache > >default config and looks ok. So either we've found a very subtle bug in > >mo

R: R: SSLRequire/SSLRequireSSL

1999-06-01 Thread Andrea e Luca Giacobazzi
CLIENT_... env vars, like: SSLVerifyClient require SSLVerifyDepth 10 SSLOptions +FakeBasicAuth +ExportCertData +CompatEnvVars SSLRequire %{SSL_CLIENT_S_DN_Email} eq "e-mail on cert" SSLRequireSSL So I think the problem is in my patch ocsp cert status lookup with ldap, that I sent to th

Re: R: SSLRequire/SSLRequireSSL

1999-05-29 Thread Ralf S. Engelschall
On Sat, May 29, 1999, Andrea e Luca Giacobazzi wrote: > >Which mod_ssl version are you using? > >Can you present the whole httpd.conf, too? > > Mod_ssl I use is -2.2.8-1.3.6. > I send the whole file httpd.conf. > I'll try as soon as possible in Apache without ocsp patch. > SSLOptions +StrictRequi

R: SSLRequire/SSLRequireSSL

1999-05-29 Thread Andrea e Luca Giacobazzi
> >Which mod_ssl version are you using? >Can you present the whole httpd.conf, too? > Mod_ssl I use is -2.2.8-1.3.6. I send the whole file httpd.conf. I'll try as soon as possible in Apache without ocsp patch. SSLOptions +StrictRequire is not accetped. Thanks Andrea httpd.conf.tar.gz

Re: SSLRequire/SSLRequireSSL

1999-05-28 Thread Ralf S. Engelschall
On Fri, May 28, 1999, Andrea e Luca Giacobazzi wrote: > SSLRequireSSL doesn't work properly on my server because, with that follow > configuration directives, I can access secure_area also without SSL, from > the port 2000 with http. > Also SSLRequire with SSL_CLIENT_CN doesn&#

Re: SSLRequire/SSLRequireSSL

1999-05-28 Thread Ralf S. Engelschall
On Fri, May 28, 1999, Andrea e Luca Giacobazzi wrote: > SSLRequireSSL doesn't work properly on my server because, with that follow > configuration directives, I can access secure_area also without SSL, from > the port 2000 with http. > Also SSLRequire with SSL_CLIENT_CN doesn&#

SSLRequire/SSLRequireSSL

1999-05-28 Thread Andrea e Luca Giacobazzi
SSLRequireSSL doesn't work properly on my server because, with that follow configuration directives, I can access secure_area also without SSL, from the port 2000 with http. Also SSLRequire with SSL_CLIENT_CN doesn't work, the access is ever forbidden. Any idea ? Thanks in advan

Re: [BugDB] SSLRequireSSL and AuthType Basic (PR#154)

1999-04-09 Thread Steffen Dettmer
Hi, if "satisfy" any really means: satisfy "from" or "user" or "ssl" then I think the function of satisfy should be changed that it not override SSLRequireSSL (if possible) in next mod_ssl version... (Since the manual tells: "When this directive is

Re: [BugDB] SSLRequireSSL and AuthType Basic (PR#154)

1999-04-09 Thread Holger Reif
It seems that the First Basic auth is checked and then SSLRequireSSL... Thus first Apache determines that BA is needed and askes for it immediatly. I guess nothing you can change... [EMAIL PROTECTED] schrieb: > > Full_Name: Peter Perkins > Version: 2.2.7 > OS: irix 5.3 >

[BugDB] SSLRequireSSL and AuthType Basic (PR#154)

1999-04-08 Thread bugdb-mod-ssl
Full_Name: Peter Perkins Version: 2.2.7 OS: irix 5.3 Submission from: falstaff.ucsd.edu (199.105.13.29) using Apache/1.3.6 (Unix) mod_ssl/2.2.7 OpenSSL/0.9.2b, i find that: SSLRequireSSL ErrorDocument 403 /error.html AllowOverride None Options IncludesNOEXEC ExecCGI

Re^2: [BugDB] configtest rejects SSLRequireSSL (PR#126)

1999-03-18 Thread Steffen Dettmer
> > When using configtest, I get this error: > > "configtest"? What's this? Apache/bin/apachectrl configtest --> does: "httpd -t" tests the configuration files for syntax errors. oki, Steffen __ Apache Interface to SSLeay (m

Re: [BugDB] configtest rejects SSLRequireSSL (PR#126)

1999-03-18 Thread bugdb-mod-ssl
on line 845 of /usr/local/etc/apache/httpd.conf: > Invalid command 'SSLRequireSSL', perhaps mis-spelled or defined > by a module not included in the server configuration > > > SetHandler server-status > SSLRequireSSL <-- this is l

[BugDB] configtest rejects SSLRequireSSL (PR#126)

1999-03-18 Thread bugdb-mod-ssl
Full_Name: Fred Condo Version: 2.2.3 OS: FreeBSD 3.1-R Submission from: pm3dyn90.dip.csuchico.edu (132.241.249.90) When using configtest, I get this error: Syntax error on line 845 of /usr/local/etc/apache/httpd.conf: Invalid command 'SSLRequireSSL', perhaps mis-spelled or defined b

RE: Effects of SSLRequireSSL in Netscape and IE

1999-03-04 Thread John Imrie
> Dear all: > > I have set up the following in my access.conf file to deny access to my > web server from any non-secure connection: > > > SSLRequireSSL > > > When using Netscape Navigator I get a permissions denied error when I try > to go to

Effects of SSLRequireSSL in Netscape and IE

1999-03-03 Thread Nik Ingle
Dear all: I have set up the following in my access.conf file to deny access to my web server from any non-secure connection: SSLRequireSSL When using Netscape Navigator I get a permissions denied error when I try to go to http://webserver.com (as I hoped). However, In IE, I am able to

RE: SSLRequireSSL

1999-03-02 Thread John Imrie
> Dear all: > > this has me stumped. > > I want to require SSL for any connection to a specific server. I thought > I could do this by simpley including > > > > > SSLRequireSSL > > > in httpd.conf. > > However, I can still get the i

SSLRequireSSL

1999-03-02 Thread Nik Ingle
Dear all: this has me stumped. I want to require SSL for any connection to a specific server. I thought I could do this by simpley including SSLRequireSSL in httpd.conf. However, I can still get the index when not secure, i.e. comming in via http://machine_name. What am I missing

Re: [BugDB] SSLRequireSSL -> RequireSSL (PR#59)

1998-12-02 Thread bugdb-mod-ssl
On Wed, Dec 02, 1998, [EMAIL PROTECTED] wrote: > Full_Name: Frank Richter > Version: 2.1.0_1.3.3 > OS: Solaris 2.6 > Submission from: stipe.hrz.tu-chemnitz.de (134.109.132.39) > > Using > SSLRequireSSL > in .htaccess brings this error: > Invalid command 'SSLSSL

[BugDB] SSLRequireSSL -> RequireSSL (PR#59)

1998-12-02 Thread bugdb-mod-ssl
Full_Name: Frank Richter Version: 2.1.0_1.3.3 OS: Solaris 2.6 Submission from: stipe.hrz.tu-chemnitz.de (134.109.132.39) Using SSLRequireSSL in .htaccess brings this error: Invalid command 'SSLSSLRequireSSL', perhaps mis-spelled or defined by a module not included in the server con

Re: SSLRequireSSL

1998-11-26 Thread Ralf S. Engelschall
On Thu, Nov 26, 1998, Ernst Heiri wrote: > I just tryed to configure in the general part of the configuration > (not inside a virtual server). > > # the SSL part of the document-tree > > SSLRequireSSL > > > Starting apache with SSL results in the configuratio

SSLRequireSSL

1998-11-26 Thread Ernst Heiri
I just tryed to configure in the general part of the configuration (not inside a virtual server). # the SSL part of the document-tree SSLRequireSSL Starting apache with SSL results in the configuration error: $ ./apachectl startssl Syntax error on line 89 of /etc/httpd/httpd_80/conf

Re: [BugDB] SSLRequireSSL in .htaccess (PR#44)

1998-11-09 Thread Kevin West
I *think* all you need to allow SSLRequireSSL in .htaccess is AllowOverride FileInfo. On Mon, 9 Nov 1998 [EMAIL PROTECTED] wrote: > Full_Name: Mark Wagner > Version: 2.0.15 > OS: Linux > Submission from: cdsl55.sttl.uswest.net (209.180.204.55) > > > I want to use SLRequi

Re: [BugDB] SSLRequireSSL in .htaccess (PR#44)

1998-11-09 Thread bugdb-mod-ssl
te capability to access.conf > make a directory require SSL without opening AllowOverride wide? Ops, the "not applicable" is a bug. It should read "FileInfo", i.e. you only need "AllowOverride FileInfo" to let SSLRequireSSL be used in .htaccess files. Documenation

[BugDB] SSLRequireSSL in .htaccess (PR#44)

1998-11-09 Thread bugdb-mod-ssl
Full_Name: Mark Wagner Version: 2.0.15 OS: Linux Submission from: cdsl55.sttl.uswest.net (209.180.204.55) I want to use SLRequireSSL in an .htaccess file. Since the override for this directive is "not applicable" it seems as though AllowOverride must be set to All for this directory in access.c

Re: SSLRequireSSL

1998-10-29 Thread Kevin West
On Thu, 29 Oct 1998, Ralf S. Engelschall wrote: > > Seems like you have FileInfo not allowed for this .htaccess file. Look for > the AllowOverride directives in your server configuration. An "AllowOverride > +FileInfo" is required for SSLRequireSSL to be useable in .ht

Re: SSLRequireSSL

1998-10-29 Thread Ralf S. Engelschall
On Thu, Oct 29, 1998, Kevin West wrote: > I've been trying to get SSLRequireSSL to work from .htaccess, so I can > make certain directories require ssl. Nothing I do seems to work, and if > I try to access a dir with SSLRequireSSL in the .htaccess, I get this > error: > >

SSLRequireSSL

1998-10-29 Thread Kevin West
I've been trying to get SSLRequireSSL to work from .htaccess, so I can make certain directories require ssl. Nothing I do seems to work, and if I try to access a dir with SSLRequireSSL in the .htaccess, I get this error: Internal Server Error The server encountered an internal err