Re: [users@httpd] Support for http return code 451?

2016-02-09 Thread Yehuda Katz
What do you mean by "support"? If you have an application you can already send that header and an error message explaining it. The RFC says: > Responses using this status code SHOULD include an explanation, in the > response body, of the details of the legal demand: the party making it, the >

[users@httpd] Apache 2.4 Certificate Verification: Error (18): self signed certificate

2016-02-09 Thread Medan Gavril
HI all, I have configured my apache 2.4 to work on https. I generated a self signed certificate for myclient with openssl (ootb config) and  this works fine. However my goal is have add few extensions to the self signed certificate.(principal name) Therefore I added few changes in openssl.cnf

[users@httpd] Support for http return code 451?

2016-02-09 Thread Michael Renner
Moin, are there plans to support the new return code 451 (Unavailable For Legal Reasons)? Thanks -- |Michael Renner E-mail: michael.ren...@gmx.de | |81541 MunichTwitter: @dd0ul| |Germany Don't drink as root! ESC:wq

Re: [users@httpd] How to build Apache with FIPS mode capable?

2016-02-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Rich, On 2/8/16 3:25 PM, cloud force wrote: > Hi All: > > From the mod_ssl doc, it mentioned: "If httpd was compiled against > an SSL library which did not support the FIPS_mode flag, |SSLFIPS > on| will fail." > > How do I compile apache (version

Re: [users@httpd] How to build Apache with FIPS mode capable?

2016-02-09 Thread cloud force
Thanks Christopher. Yes I do have some regulatory requirement to use FIPS and I have built the FIPS capable OpenSSL lib. I tried to add the "SSLFIPS on" parameter to the httpd.conf config file as suggested in the ssl_mod manual page, but the httpd failed to start with errors which seemed to due

Re: [users@httpd] How to build Apache with FIPS mode capable?

2016-02-09 Thread cloud force
Hi Chris, Please see my comments below inline. Thanks, Rich On Tue, Feb 9, 2016 at 2:59 PM, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Rich, > > On 2/9/16 4:09 PM, cloud force wrote: > > Yes I do have* *some regulatory

Re: [users@httpd] How to build Apache with FIPS mode capable?

2016-02-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Rich, On 2/9/16 4:09 PM, cloud force wrote: > Yes I do have* *some regulatory requirement to use FIPS and I have > built the FIPS capable OpenSSL lib. Where is that library located on the disk? > I tried to add the "SSLFIPS on" parameter to the

[users@httpd] Re: Support for http return code 451?

2016-02-09 Thread Jonesy
On Tue, 09 Feb 2016 13:29:21 +0100, Michael Renner wrote: > > are there plans to support the new return code 451 (Unavailable For > Legal Reasons)? Me? Here? No, I have no plans to support the new return code 451. - To