SSL + VirtualHost in Apache 1.3.x

2000-10-13 Thread Poetsch, Michael
Hello Apache user community, does anybody know if it is possible to configure multiple virtual hosts with different SSL certificates? Basically it should be possible to include all SSL related directives in a VirtualHost ... /VirtualHost section? Would that work? Thanks for your answers! Kind

RE : which commerce company are using openssl currently ?

2000-10-13 Thread Yap Hoi Yoong
To Whom it concern, hi, i am currently studying the openssl, and i am curiuos to know about which commerce company are using openssl currently. please reply, and i appreciate with your answer, thanks. regards, hoi yoong __ Do You Yahoo!? Get

RE: SSL + VirtualHost in Apache 1.3.x

2000-10-13 Thread Amol Natu
Hi Michael, Here's an example of how virtual hosts would be implemented with different certs. VirtualHost 'Server IP 1':443 Port 443 SSLEngine on ServerName abc.com DocumentRoot "/usr/local/www/htdocs" SSLCertificateKeyFile /usr/local/www/conf/ssl.key/abc.key SSLCertificateChainFile

Re: Re: Import cert to MS Internet Server

2000-10-13 Thread dserres
What rubbish exactly? Upto the -BEGIN CERTIFICATE- or that too? -- Doug It is OK now, thanks guys. I trimmed the rubbish off the top and bingo. - Original Message - From: "D.Dave" [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 12, 2000 4:30 PM Subject: Re:

Re: Re: Import cert to MS Internet Server

2000-10-13 Thread arehn
"-BEGIN CERTIFICATE-" should always be present. /Andreas [EMAIL PROTECTED] on 2000-10-13 12:09:20 Please respond to [EMAIL PROTECTED] To: [EMAIL PROTECTED] cc:(bcc: Andreas Rehn/Nordic/Viewlocity) Subject: Re: Re: Import cert to MS Internet Server What rubbish

md5-fingerprint

2000-10-13 Thread Peter Opelt
Hallo, how can I get the md5 fingerprint from the file with the Certificate Request ? Thanks, Peter Peter Opelt DB Informatik Dienste GmbH IUX7 - BahnNet Basa: 980 5767 DTAG: 0361 300 5767 ___

Re: SSL + VirtualHost in Apache 1.3.x

2000-10-13 Thread Vadim Fedukovich
On Fri, 13 Oct 2000, Poetsch, Michael wrote: Hello Apache user community, Michael, this is not exactly apache list, anyway: does anybody know if it is possible to configure multiple virtual hosts with different SSL certificates? Basically it should be possible to include all SSL related

Re: SSL + VirtualHost in Apache 1.3.x

2000-10-13 Thread Michael T. Babcock
Vadim Fedukovich wrote: Beware features of IE on processing wildcarded certificates. Different Michael here ... what "features" ?? __ OpenSSL Project http://www.openssl.org User Support

Re: SSL + VirtualHost in Apache 1.3.x

2000-10-13 Thread Edwin Chiu
Not all versions of IE accept wildcard certs. Look at www.thawte.com and www.verisign.com for more details. Basically a warning about the CN of the cert not matching the website name will come up... Edwin "Michael T. Babcock" wrote: Vadim Fedukovich wrote: Beware features of IE on

Re: Load Cert Notification

2000-10-13 Thread Michael Sierchio
Peter Liem wrote: It is noted that Netscape browser doesn't have any reponse after loaded the client certificate, it just loaded the certificate sliently. I wonder is that any method(e.g. Dialog box) to let the netscape browser to notify the user that the certificate has been loaded into

Bug in (possibly) BN or (probably) DH routines

2000-10-13 Thread Lawrence MacIntyre
Hi: I have been having spurious problems with one of my client server programs. It uses a DH Key exchange to generate a blowfish key and encrypts the data using that key. I believe I have isolated the problem to the minimum of code. I'm attaching the test program, Makefile, and a bash script

Re: Checking an SSL connection . . .

2000-10-13 Thread Louis LeBlanc
Thank you Lutz and Steve! I used both your suggestions to get this working. Here is what I ended up doing: ssl_connected = 0; while(!ssl_connected) { res = SSL_connect(ssl_con); ssl_connected = ((res == 1) SSL_is_init_finished(ssl_con)); if (!ssl_connected) {

SSL_peek()?

2000-10-13 Thread Louis LeBlanc
My next roadblock is in making sure that my SSL_peek() calls take nonblocking sockets into account. I understand the way SSL_read and SSL_write work, but what is the best way to make SSL_peek work correctly when the underlying socket is nonblocking? TIA Lou

Question regarding pass phrases in keys and certs.

2000-10-13 Thread Mayo, Brian (FUSA)
I have a question regarding pass phrases in keys and cert. Getting directly to the point, I have a situation where I am dealing with two different server, Weblogic and Netscape (iPlanet). Weblogic requires that a key/cert does not have a pass phrase embedded into it while Netscape requires that

RE: SSL + VirtualHost in Apache 1.3.x

2000-10-13 Thread Norman Mackey
Shouldn't it be possible to configure Apache/OpenSSL to handle name-based virtual hosting using TLS? Apparently ARIN thinks so, since they've adopted a policy of not issuing IPs for virtual hosts anymore. I'm desperately searching for the instructions to do so, assuming it is indeed possible,

Bad record mac?

2000-10-13 Thread Louis LeBlanc
Here's an odd one. I looked in the archives, and didn't find this precise phrase anywhere. During the SSL_connect attempt, the error returned falls through to the default: case. This is the error message: error:140943FC:SSL routines:SSL3_READ_BYTES:sslv3 alert bad record mac Any idea what

Trouble Compiling 0.9.6 on Mac OS X Server

2000-10-13 Thread Aaron Faby
Having trouble compiling 0.9.6 on Mac OS X Server, heres the output: Any suggestions? Thanks in advance! [aaron:~/Projects/ApacheSSL/openssl-0.9.6] afaby$ make making all in crypto... ( echo "#ifndef MK1MF_BUILD"; \ echo " /* auto-generated by crypto/Makefile.ssl for crypto/cversion.c */";

Installation - from a newcomer!

2000-10-13 Thread Ramender Kishore
Hey all, I am new to the field of open-ssl. So kindly help me out with my installation problem. I am trying to install the mod-ssl thing with apache server running on windows 98 machine and I just don't seem to get any kind of hang for it. I have downloaded apache server's tar file and