Re: [Pound Mailing List] BEAST attack patch for Pound 2.6 cannot get certificate

2012-09-24 Thread Francoise Dehinbo
- From: Andreas Hilboll [mailto:li...@hilboll.de] Sent: Thursday, September 20, 2012 3:11 PM To: pound@apsis.ch Subject: Re: [Pound Mailing List] BEAST attack patch for Pound 2.6 cannot get certificate Is it possible that your Perl application tries to enforce HTTPS? If so, HTTPS would go

Re: [Pound Mailing List] BEAST attack patch for Pound 2.6 cannot get certificate

2012-09-20 Thread Francoise Dehinbo
@apsis.chmailto:pound@apsis.ch Subject: Re: [Pound Mailing List] BEAST attack patch for Pound 2.6 cannot get certificate Hi Francoise, Your more thank welcome. On a side note you may also like the DisableSSLv2 Patch which can be found here: http://www.apsis.ch/pound/pound_list/archive/2012/2012-01

Re: [Pound Mailing List] BEAST attack patch for Pound 2.6 cannot get certificate

2012-09-20 Thread Francoise Dehinbo
@apsis.chmailto:pound@apsis.ch pound@apsis.chmailto:pound@apsis.ch Subject: Re: [Pound Mailing List] BEAST attack patch for Pound 2.6 cannot get certificate Hi Francoise, I'm going to take a guess here but your pound.cfg should look something like this for a basic redirection from HTTP to HTTPS (well

Re: [Pound Mailing List] BEAST attack patch for Pound 2.6 cannot get certificate

2012-09-20 Thread Scott McKeown
@apsis.chmailto:pound@apsis.ch pound@apsis.chmailto: pound@apsis.ch Date: Thursday, 20 September 2012 10:54 To: pound@apsis.chmailto:pound@apsis.ch pound@apsis.chmailto: pound@apsis.ch Subject: Re: [Pound Mailing List] BEAST attack patch for Pound 2.6 cannot get certificate Hi Francoise, I'm going to take

Re: [Pound Mailing List] BEAST attack patch for Pound 2.6 cannot get certificate

2012-09-20 Thread Francoise Dehinbo
@apsis.chmailto:pound@apsis.ch pound@apsis.chmailto:pound@apsis.ch Subject: Re: [Pound Mailing List] BEAST attack patch for Pound 2.6 cannot get certificate Hi Francoise, OK think I've got it now. Try something like this: Usernobody Group nobody LogLevel 1 ListenHTTPS Address xxx.xxx.xxx.xxx Port

Re: [Pound Mailing List] BEAST attack patch for Pound 2.6 cannot get certificate

2012-09-20 Thread Francoise Dehinbo
@apsis.chmailto:pound@apsis.ch Subject: Re: [Pound Mailing List] BEAST attack patch for Pound 2.6 cannot get certificate Hi Francoise, OK think I've got it now. Try something like this: Usernobody Group nobody LogLevel 1 ListenHTTPS Address xxx.xxx.xxx.xxx Port443 Cert/etc/pound

Re: [Pound Mailing List] BEAST attack patch for Pound 2.6 cannot get certificate

2012-09-20 Thread Scott McKeown
-To: pound@apsis.chmailto:pound@apsis.ch pound@apsis.chmailto: pound@apsis.ch Date: Thursday, 20 September 2012 12:30 To: pound@apsis.chmailto:pound@apsis.ch pound@apsis.chmailto: pound@apsis.ch Subject: Re: [Pound Mailing List] BEAST attack patch for Pound 2.6 cannot get certificate Hi Francoise

Re: [Pound Mailing List] BEAST attack patch for Pound 2.6 cannot get certificate

2012-09-20 Thread Francoise Dehinbo
Date: Thursday, 20 September 2012 12:30 To: pound@apsis.chmailto:pound@apsis.chmailto:pound@apsis.chmailto:pound@apsis.ch pound@apsis.chmailto:pound@apsis.chmailto:pound@apsis.chmailto:pound@apsis.ch Subject: Re: [Pound Mailing List] BEAST attack patch for Pound 2.6 cannot get certificate Hi

Re: [Pound Mailing List] BEAST attack patch for Pound 2.6 cannot get certificate

2012-09-20 Thread Scott McKeown
pound@apsis.chmailto: pound@apsis.ch Date: Thursday, 20 September 2012 13:40 To: pound@apsis.chmailto:pound@apsis.ch pound@apsis.chmailto: pound@apsis.ch Subject: Re: [Pound Mailing List] BEAST attack patch for Pound 2.6 cannot get certificate So your Pound Setup and the Web Site

Re: [Pound Mailing List] BEAST attack patch for Pound 2.6 cannot get certificate

2012-09-20 Thread Francoise Dehinbo
-To: pound@apsis.chmailto:pound@apsis.ch pound@apsis.chmailto:pound@apsis.ch Date: Thursday, 20 September 2012 16:30 To: pound@apsis.chmailto:pound@apsis.ch pound@apsis.chmailto:pound@apsis.ch Subject: Re: [Pound Mailing List] BEAST attack patch for Pound 2.6 cannot get certificate Hi Francoise

Re: [Pound Mailing List] BEAST attack patch for Pound 2.6 cannot get certificate

2012-09-20 Thread Andreas Hilboll
@apsis.chmailto:pound@apsis.ch Date: Thursday, 20 September 2012 16:30 To: pound@apsis.chmailto:pound@apsis.ch pound@apsis.chmailto:pound@apsis.ch Subject: Re: [Pound Mailing List] BEAST attack patch for Pound 2.6 cannot get certificate Hi Francoise, Can you show me your current pound.cfg file please

RE: [Pound Mailing List] BEAST attack patch for Pound 2.6 cannot get certificate

2012-09-20 Thread Joe Gooch
-To: pound@apsis.chmailto:pound@apsis.ch pound@apsis.chmailto:pound@apsis.ch Date: Thursday, 20 September 2012 16:30 To: pound@apsis.chmailto:pound@apsis.ch pound@apsis.chmailto:pound@apsis.ch Subject: Re: [Pound Mailing List] BEAST attack patch for Pound 2.6 cannot get certificate Hi

[Pound Mailing List] BEAST attack patch for Pound 2.6 cannot get certificate

2012-09-19 Thread Francoise Dehinbo
Hi All, My OS is debian squeeze which have Pound version 2.5 installed. I downloaded the latest stable version 2.6 from http://www.apsis.ch/pound/Pound-2.6.tgz and applied the BEAST attack patch from https://github.com/goochjj/pound/commit/2f69c71b0314538f2a6218f624bdd2b954e5dbc8.patch After

Re: [Pound Mailing List] BEAST attack patch for Pound 2.6 cannot get certificate

2012-09-19 Thread Scott McKeown
Hi Francoise, This looks more like a Certificate issue than a Pound issue. What type of certificate have you created? I would have another go at creating the PEM file myself and if you have paid for a certificate from a CA you may need the intermediate and root chains. This site is a good