Bill Price wrote:
>
> Pardon my dumb question: can you expand on or give a reference regarding
> your "point to note." What temporary RSA key are you referring to: a
> temporary PK RSA or RSA (CORP) symmetric ciphers (RC 2/4) (I presume the
> former)? What is "naughty"? Thanks.
>
Some SSLv3 exp
John Farrell wrote:
>
> Yes, I noticed the existence of SSLRequireSSL, but eschewed it because the
> documentation suggests that it has a granularity of: directory, whereas I
> believe there should be a way to specify SSL _only_ for even a specific
> file, which may be in a directory that is not
Yes, I noticed the existence of SSLRequireSSL, but eschewed it because the
documentation suggests that it has a granularity of: directory, whereas I
believe there should be a way to specify SSL _only_ for even a specific
file, which may be in a directory that is not SSL _only_ ...
Further, in
I've never used the directive, but according to ./https -h
and http://www.apache-ssl.org/docs.html#SSLRequireSSL
the actual directive appears to be SSLRequireSSL.
Brian
"Boyce, Nick" wrote:
>
> >> So, I added this to my apache.conf
> >
> >
> > SSLRequire ( true )
> >
> >
> [snip]
> > The pro
Pardon my dumb question: can you expand on or give a reference regarding
your "point to note." What temporary RSA key are you referring to: a
temporary PK RSA or RSA (CORP) symmetric ciphers (RC 2/4) (I presume the
former)? What is "naughty"? Thanks.
Bill Price
> -Original Message-
> Fro
I'm trying to use 'openssl verify' to verify a certificate chain for
which I have (and trust) the root CA certificate.
Verify just returns 'OK' whenever there's any self-signed certificate
anywhere in the certificate chain. I can't figure out how to specify
that my root CA certificate is the on
Hi there,
I have some troubles with ie, when i set the directive to the apache
directory:
SSLRequireSSL
SSLRequireCipher RC4-MD5
Fortified netscape sees the page perfectly, but ie does not! it says that
this site has a 40 bit cert, and then u dont have permission...and other
foolish M$ errors
>> So, I added this to my apache.conf
>
>
> SSLRequire ( true )
>
>
[snip]
> The problem is, after adding that configuration line, I can still go to
> /secure with my browser, and it doesn't start a SSL session. I don't
> understand this at all - it seems really easy ... sslREQUIRE leads me
Steve,
Many thanks for your informed (as usual!) reply. Indeed we
are using Xenroll.
Since we store the Client CertReqs, we just thought it would
be neat to be able to re-issue the client certs on the spot in
case we needed to replace the root CA cert.
As I said, this stuff works with NS Commu
> Serge Batov wrote:
> This function fails on attempt to load key with 0x reading ;(
> Something wrong? I guess in new version PEM_ASN1_read has additional
> parameter and nobody knows about contents.
Serge,
if you're developing on win32 you'll want to make sure that your
application and
Hi all,
I have a strange problem with loading keys with
PEM_ASN1_read function. The sample code is as in sign.c sample looks
like:
EVP_PKEY * ReadPublicKey_internal(const char *certfile)
{ FILE *fp = fopen (certfile, "r");
X509 *x509; EVP_PKEY
*pkey; if (!fp)
Hello folks,
Anybody knows how to obtain only the public key
from a request (PKCS#10) using OpenSSL command-line tool??
I've used the following options to obtain the request:
openssl req -new
Thanks in advance
Chelo Malagon
--
Chelo Malagon Poyato E-mail: [EMAIL PROTECTED]
RedIRIS/CSIC
One reason could be the directory where the server executes the
script. Best is to change the directory explicitely before
you start the script.
Meike Aulbach schrieb:
>
> On Fri, Oct 22, 1999 at 05:53:53PM +0800, chchar wrote:
> >The problem is, when I run this Perl script, I can't produce
Thanks to some help from this list, and others, I got apache+openssl/etc up
and running (I know it is up and running, because when I do
httpS://mysite/some.page, it starts a SSL session, I get the little lock on
my browser, etc.)
So, I added this to my apache.conf
SSLRequire ( true )
(yes
14 matches
Mail list logo
