[EMAIL PROTECTED] SSL Proxy

2008-11-04 Thread Florian Lindner
Hello, I have an SSL certificate of www.example.org. Now I want to proxy another domain (which is a v-host on the same server) through the beforementioned SSL domain. My first try was: (in the doc root .htaccess) RewriteCond %{HTTP_HOST} ^.*ssl\.example\.org$ RewriteRule ^(.*)$

RE: [EMAIL PROTECTED] SSl question

2008-10-01 Thread manning allan
, 2008 2:36 PM To: users@httpd.apache.org Subject: RE: [EMAIL PROTECTED] SSl question Where is the list archives, I have searched the documentation (2.2) and can find how to create virtual hosts (which I have already done) but not how to add https to a virtual host, can you direct me to the archives

RE: [EMAIL PROTECTED] SSl question

2008-10-01 Thread Jorge Medina
Just configure SSL inside the VirtualHost as you would do for the whole server. From: manning allan [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 01, 2008 8:08 AM To: users@httpd.apache.org Subject: RE: [EMAIL PROTECTED] SSl question Forgive me

Re: [EMAIL PROTECTED] SSl question

2008-10-01 Thread Justin Pasher
manning allan wrote: Forgive me for being stupid, but I cannot find in the documentation, nor can I find the list archives. I know I am rather new to this, and I do not want to be spoon fed, but a little direction would be helpful. I have successfully added virtual hosts to my Windows

[EMAIL PROTECTED] SSl question

2008-09-30 Thread manning allan
I have apache set up on my home PC. I handle many domains, many of which are websites located on Tripod or Geocities, and I am just effectively forwarding the name to the current location. I have edited my http.conf to direct the various domain names to various folders in my httdocs folder, where

Re: [EMAIL PROTECTED] SSl question

2008-09-30 Thread Nilesh Govindrajan
On Tuesday 30 September 2008 09:04:55 pm manning allan wrote: I have apache set up on my home PC. I handle many domains, many of which are websites located on Tripod or Geocities, and I am just effectively forwarding the name to the current location. I have edited my http.conf to direct the

Re: [EMAIL PROTECTED] SSl question

2008-09-30 Thread J. Greenlees
Nilesh Govindrajan wrote: On Tuesday 30 September 2008 09:04:55 pm manning allan wrote: I have apache set up on my home PC. I handle many domains, many of which are websites located on Tripod or Geocities, and I am just effectively forwarding the name to the current location. I have edited

RE: [EMAIL PROTECTED] SSl question

2008-09-30 Thread manning allan
, September 30, 2008 1:01 PM To: users@httpd.apache.org Subject: Re: [EMAIL PROTECTED] SSl question Nilesh Govindrajan wrote: On Tuesday 30 September 2008 09:04:55 pm manning allan wrote: I have apache set up on my home PC. I handle many domains, many of which are websites located on Tripod

Re: [EMAIL PROTECTED] SSl question

2008-09-30 Thread J. Greenlees
manning allan wrote: OK, but I want to make it so that if I input http:// into the address bar, it tells me I have to use https:// I also would like to be able to use http:// for the other domains I use. Do I have to make a fancy entry into the httpd.conf file? yup. the virtual host you

RE: [EMAIL PROTECTED] SSl question

2008-09-30 Thread manning allan
Toronto St. Palmerston, Ont., N0G 2P0 (519) 417-2249 Direct Line (519) 343-2800 Ext.2249 (519) 343-3200 Fax TG VoIP 676-2249 -Original Message- From: J. Greenlees [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 30, 2008 1:36 PM To: users@httpd.apache.org Subject: Re: [EMAIL PROTECTED

[EMAIL PROTECTED] SSL: CA-Certificate is not sent to browser with SSLCACertificatePath

2008-09-29 Thread Dennis Birkholz
Hello, I have a strange problem using SSL with apache 2.2.9 on Gentoo-Linux (mod_ssl 2.2.9 and OpenSSL 0.9.8g): I have two servers running with exactly the same apache and openssl binaries. On one server i can use the SSLCACertificatePath directive to let apache send the CA chain to the browser

[EMAIL PROTECTED] SSL Certificate Issue

2008-08-14 Thread Gaurav Pruthi
Dear All, Recently i bought a ssl certificate. Mistakenly i gave cn=www.domain.com in the CSR provided. Now the issue is that when i open my website in browser having URL: https://www.domain.com there is no issue but when i am opening it without prepending www i.e. https://domain.com an error is

Re: [EMAIL PROTECTED] SSL Certificate Issue

2008-08-14 Thread Eric Covener
On Thu, Aug 14, 2008 at 9:59 AM, Gaurav Pruthi [EMAIL PROTECTED] wrote: Dear All, Recently i bought a ssl certificate. Mistakenly i gave cn=www.domain.com in the CSR provided. Now the issue is that when i open my website in browser having URL: https://www.domain.com there is no issue but when

Re: [EMAIL PROTECTED] SSL Certificate Issue

2008-08-14 Thread André Warnier
Eric Covener wrote: On Thu, Aug 14, 2008 at 9:59 AM, Gaurav Pruthi [EMAIL PROTECTED] wrote: Dear All, Recently i bought a ssl certificate. Mistakenly i gave cn=www.domain.com in the CSR provided. Now the issue is that when i open my website in browser having URL: https://www.domain.com there

Re: [EMAIL PROTECTED] SSL Certificate Issue

2008-08-14 Thread Eric Covener
On Thu, Aug 14, 2008 at 5:04 PM, André Warnier [EMAIL PROTECTED] wrote: Is there any way out that whenever anyone opens https://domain.com it redirects to https://www.domain.com Question to Eric : Would it not be possible to define 2 Virtual Hosts, one for domain.com and one for

[EMAIL PROTECTED] SSL tunneling on Apache

2008-07-18 Thread Alan Honczar
Hi all, My system is frontended by Apache, that handles the SSL requests. I am now facing the need to handle non-http requests (ISO-8583). We have internal reasons to not change the incoming environment. My question is: Is possible to configure Apache as one ssl tunnel for non-http messages?

[EMAIL PROTECTED] SSL hardware accelerator

2008-06-25 Thread Jose Adriano Baltieri
Hello ! I'm using Apache on W2K with OpenSSL and , we're looking for a SSL accelerator card (hardware). Does anyone here uses some product to suggest us ? Something affordable ? Thanks in advance ! -- Obrigado, --

Re: [EMAIL PROTECTED] SSL Cert signed by Intermediary CAs cause delays?

2008-06-21 Thread Chad Morland
On Sun, Jun 8, 2008 at 6:47 PM, Ali, Saqib [EMAIL PROTECTED] wrote: Do SSL Cert signed by Intermediary CAs cause additional delays compared to SSL certs signed by root CAs? Whether the certificate is signed directly by a root CA or is a 'chained SSL certificate' has no impact on the request

[EMAIL PROTECTED] SSL Cert signed by Intermediary CAs cause delays?

2008-06-08 Thread Ali, Saqib
Do SSL Cert signed by Intermediary CAs cause additional delays compared to SSL certs signed by root CAs? We have an application that makes excessive amount of SSL calls, and from the time we installed a SSL cert signed by an Intermediary CA the applications is extremely slow. Any thoughts?

[EMAIL PROTECTED] SSL not working. Please help

2008-06-05 Thread BipinDas-BlueLabs
Hi everybody I do have a webserver running on Fedora4 with Apache 2.2.6. I had setup an htaccess for the webroot to prevent the outside access. Because its in a development stage. Its working fine. Now I need to setup a self signed certificate for the Server (SSL). I had created and

Re: [EMAIL PROTECTED] SSL not working. Please help

2008-06-05 Thread Krist van Besien
On Thu, Jun 5, 2008 at 11:09 AM, BipinDas-BlueLabs [EMAIL PROTECTED] wrote: [Thu Jun 05 02:28:12 2008] [error] Init: Unable to read pass phrase [Hint: key introduced or changed before restart?] The private key of your webserver appears to be protected by a pass phrase. You need to either

[EMAIL PROTECTED] SSL error building 2.2.8

2008-06-05 Thread Gene LeDuc
Hi All, I'm not sure whether this list is the best one for asking about build issues. If not, please point me to the one I should ask this question on. I'm upgrading several packages on a Solaris 9 server. The first ones I did were openssl-0.9.8h (from 0.9.8d) and openssh-5.0p1. Since

Re: [EMAIL PROTECTED] SSL not working. Please help

2008-06-05 Thread BipinDas-BlueLabs
Krist, Thanks for your update. But I had already removed the Passphrase, but still not working. And the SSLport 443 is listening in the server. while I calling https,browser went hangup. At the same time I can access Port 80. Thanks BipinDas Krist van Besien wrote: On Thu, Jun 5, 2008 at

[EMAIL PROTECTED] SSL offloading problem load-balancer(ssl)---Apache-2.0.59(non-ssl)---tomcat

2008-04-22 Thread Subbu kattamuri
Hi, SSL is terminated on the load balancer and apache HTTP 2.0.59 is running http only and not https. Application (running on tomcat), perhaps due to the use of absolute URLs when writing HTML, is not letting the content in general to work properly. We have mixed protocol references (https and

[EMAIL PROTECTED] SSL and Basic Authentication

2008-04-15 Thread Shakti
Hi, I am new to the apache and need help with ssl authentication. I have compiled apache2 on Mac OS X. Configured it with basic authentication and that worked fine. I enabled ssl and that worked fine. Then I generated certificates for the server and clients, installed certificates in

Re: [EMAIL PROTECTED] SSL and Basic Authentication

2008-04-15 Thread Joshua Slive
On Tue, Apr 15, 2008 at 1:56 PM, Shakti [EMAIL PROTECTED] wrote: Hi, I am new to the apache and need help with ssl authentication. I have compiled apache2 on Mac OS X. Configured it with basic authentication and that worked fine. I enabled ssl and that worked fine. Then I generated

Re: [EMAIL PROTECTED] SSL and Basic Authentication

2008-04-15 Thread Shakti
Joshua Slive wrote: On Tue, Apr 15, 2008 at 1:56 PM, Shakti [EMAIL PROTECTED] wrote: Hi, I am new to the apache and need help with ssl authentication. I have compiled apache2 on Mac OS X. Configured it with basic authentication and that worked fine. I enabled ssl and that worked fine. Then

Re: [EMAIL PROTECTED] SSL and Basic Authentication

2008-04-15 Thread Joshua Slive
On Tue, Apr 15, 2008 at 3:57 PM, Shakti [EMAIL PROTECTED] wrote: [Tue Apr 15 13:21:31 2008] [info] Faking HTTP Basic Auth header: Authorization: Basic

Re: [EMAIL PROTECTED] SSL and Basic Authentication

2008-04-15 Thread Shakti
Joshua Slive wrote: On Tue, Apr 15, 2008 at 3:57 PM, Shakti [EMAIL PROTECTED] wrote: [Tue Apr 15 13:21:31 2008] [info] Faking HTTP Basic Auth header: Authorization: Basic

Re: [EMAIL PROTECTED] SSL LDAP Connections on Win32

2008-02-28 Thread Eric Covener
On Wed, Feb 27, 2008 at 9:52 PM, Harry Holt [EMAIL PROTECTED] wrote: TLS accept failure error=-1 Are you able to connect to a secure ldap host with 'ldp.exe' or any other MS-based tool? Have you taken any measures to add the issuer of your LDAP servers certificate to the registry-based list

Re: [EMAIL PROTECTED] SSL LDAP Connections on Win32

2008-02-28 Thread Harry Holt
On Thu, Feb 28, 2008 at 7:29 AM, Eric Covener [EMAIL PROTECTED] wrote: On Wed, Feb 27, 2008 at 9:52 PM, Harry Holt [EMAIL PROTECTED] wrote: TLS accept failure error=-1 Are you able to connect to a secure ldap host with 'ldp.exe' or any other MS-based tool? Have you taken any measures

Re: [EMAIL PROTECTED] SSL LDAP Connections on Win32

2008-02-28 Thread Eric Covener
On Thu, Feb 28, 2008 at 8:30 AM, Harry Holt [EMAIL PROTECTED] wrote: I'd start a bug report, but I have a feeling that *somebody* knows it doesn't work, and knows why... I wouldn't bank on that, wrt ldap-on-windows. My hunch is still the certificate chain that Apache ultimately uses -- an

Re: [EMAIL PROTECTED] SSL LDAP Connections on Win32

2008-02-28 Thread Harry Holt
Yes. I've used the Novell LDAP tool, JXplorer, and other tools for testing (as well as my own Java, .NET, and the Novell CAPI and everything works fine exception that Apache module. Not immediately clear to me how many of those use the same win32 ldap library (depends.exe would know

Re: [EMAIL PROTECTED] SSL LDAP Connections on Win32

2008-02-28 Thread Harry Holt
On Thu, Feb 28, 2008 at 10:46 AM, Eric Covener [EMAIL PROTECTED] wrote: On Thu, Feb 28, 2008 at 8:30 AM, Harry Holt [EMAIL PROTECTED] wrote: I'd start a bug report, but I have a feeling that *somebody* knows it doesn't work, and knows why... I wouldn't bank on that, wrt ldap-on-windows.

Re: [EMAIL PROTECTED] SSL LDAP Connections on Win32

2008-02-27 Thread Harry Holt
I have tried this same configuration on Windows Server 2003, as well as Windows XP workstation. The results are essentially the same, but the error is different: [warn] [client 127.0.0.1] [3312] auth_ldap authenticate: user lizard authentication failed; URI / [LDAP: ldap_simple_bind_s()

[EMAIL PROTECTED] SSL LDAP Connections on Win32

2008-02-26 Thread Harry Holt
Okay, apparently, with the binary distribution of Apache 2.2 for Win32, it is not possible to initialize an SSL connection to an LDAP server using mod_ldap and mod_authnz_ldap. During startup I get: [info] LDAP: SSL support unavailable: LDAP: CA certificates cannot be set using this method, as

Re: [EMAIL PROTECTED] SSL LDAP Connections on Win32

2008-02-26 Thread Harry Holt
Ok, it's pretty basic: ServerRoot C:/Program Files/Apache Software Foundation/Apache2.2 Listen 80 LoadModule actions_module modules/mod_actions.so LoadModule alias_module modules/mod_alias.so LoadModule asis_module modules/mod_asis.so LoadModule auth_basic_module modules/mod_auth_basic.so

[EMAIL PROTECTED] SSL Apache Scalability

2007-11-29 Thread Tony Anecito
Hi All, I have heard a strange story about how using 1 port for Apache SSL is not a good idea for performance. I heard if you have three sites usign the same SSL port it could really slow down performance as compared to putting those sites on separate ports for SSL. Should not each site have

Re: [EMAIL PROTECTED] SSL Apache Scalability

2007-11-29 Thread Dragon
Tony Anecito wrote: Hi All, I have heard a strange story about how using 1 port for Apache SSL is not a good idea for performance. I heard if you have three sites usign the same SSL port it could really slow down performance as compared to putting those sites on separate ports for SSL. Should

Re: [EMAIL PROTECTED] SSL Apache Scalability

2007-11-29 Thread Sander Temme
On Nov 29, 2007, at 1:58 PM, Tony Anecito wrote: I have heard a strange story about how using 1 port for Apache SSL is not a good idea for performance. I Sounds like something for Mythbusters! heard if you have three sites usign the same SSL port it could really slow down performance as

Re: [EMAIL PROTECTED] SSL Apache Scalability

2007-11-29 Thread Tony Anecito
Thanks. I will sendthese email feedbacks to the person who mentioned it to me and make sure I heard it right. Many Thanks! -Tony --- Sander Temme [EMAIL PROTECTED] wrote: On Nov 29, 2007, at 1:58 PM, Tony Anecito wrote: I have heard a strange story about how using 1 port for Apache

[EMAIL PROTECTED] SSL Reverse Proxy

2007-11-27 Thread Al Sparks
Running Apache 1.3 with lots of virtual names. I'm trying to reverse proxy to a SSL web server. Ultimately, I want to access the proxy server with: https://www.main-name.com/blah/ which will go to: https://www.internal-server/blah/ Are there some examples out

Re: [EMAIL PROTECTED] SSL Reverse Proxy

2007-11-27 Thread Christian Folini
On Tue, Nov 27, 2007 at 07:39:33PM -0800, Al Sparks wrote: Running Apache 1.3 with lots of virtual names. ... Are there some examples out there? I only see non-SSL examples. There is not much of a change with Apache 1.3. With 2.0/2.2 there is the sslproxyengine that has to be enabled and

[EMAIL PROTECTED] SSL key mismatch error but keys match

2007-10-29 Thread Lindsay Hausner
A client of ours just renewed his ssl certificate. When we installed the new cert, apache gave the old: saero44 ~ tail /usr/local/apache/logs/error_log [Fri Oct 26 14:27:36 2007] [error] ApacheSSLSetCertStuff failed [Fri Oct 26 14:28:11 2007] [crit] unable to set private key [Fri Oct 26 14:28:11

[EMAIL PROTECTED] SSL Key mismatch error but keys match

2007-10-26 Thread Lindsay Hausner
A client of ours just renewed his cert. When we installed the new cert, apache gave the old: saero44 ~ tail /usr/local/apache/logs/error_log [Fri Oct 26 14:27:36 2007] [error] ApacheSSLSetCertStuff failed [Fri Oct 26 14:28:11 2007] [crit] unable to set private key [Fri Oct 26 14:28:11 2007]

RE: [EMAIL PROTECTED] SSL pass phrase

2007-10-17 Thread Lindsay Hausner
Many Unixes (such as FreeBSD) allow you to chmod 000 a file and root can still access and modify it. It works on my box anyway. -- Aaron Dalton http://perlkonig.com You can also use the '-nodes' switch when generating the private key. This however, leaves it unencrypted so you must be

[EMAIL PROTECTED] SSL pass phrase

2007-10-16 Thread Tony Heal
I am using apache v 1.3.34-4.1 and openssl on Debian and I have set up SSL, Although I can restart apache using the init script without issue I get prompted for a pass phrase if I stop and start apache. This is a problem if I have a power loss as apache will wait in the background until it

Re: [EMAIL PROTECTED] SSL pass phrase

2007-10-16 Thread Ajai Khattri
On Tue, 16 Oct 2007, Tony Heal wrote: I am using apache v 1.3.34-4.1 and openssl on Debian and I have set up SSL, Although I can restart apache using the init script without issue I get prompted for a pass phrase if I stop and start apache. This is a problem if I have a power loss as

Re: [EMAIL PROTECTED] SSL pass phrase

2007-10-16 Thread Zakai Kinan
use this. openssl rsa -in private.key.org -out private.key. Replace private.key with your key. ZK --- Ajai Khattri [EMAIL PROTECTED] wrote: On Tue, 16 Oct 2007, Tony Heal wrote: I am using apache v 1.3.34-4.1 and openssl on Debian and I have set up SSL, Although I can restart apache

Re: [EMAIL PROTECTED] SSL pass phrase

2007-10-16 Thread Scott Courtney
On Tuesday 16 October 2007 13:11, Tony Heal wrote: This is a problem if I have a power loss as apache will wait in the background until it receives a pass phrase. Is there a way around this without regenerating the server.key? Yes, there is. The openssl command line utility won't let you

Re: [EMAIL PROTECTED] SSL pass phrase

2007-10-16 Thread Scott Courtney
On Tuesday 16 October 2007 14:40, Scott Courtney wrote: $ openssl -in foo.temp -out foo.key Sorry -- that should be: $ openssl rsa -in foo.temp -out foo.key Scott -- - Scott D. COURTNEY, Principal Engineer

Re: [EMAIL PROTECTED] SSL pass phrase

2007-10-16 Thread Aaron Dalton
On Tue, 16 Oct 2007, Tony Heal wrote: I am using apache v 1.3.34-4.1 and openssl on Debian and I have set up SSL, Although I can restart apache using the init script without issue I get prompted for a pass phrase if I stop and start apache. This is a problem if I have a power loss as apache

Re: [EMAIL PROTECTED] SSL pass phrase

2007-10-16 Thread Michael McGlothlin
Possibly you could rewrite the start scripts so that they wait to be prompted for the password and then auto-fill the password. -- Michael McGlothlin Southwest Plumbing Supply - The official User-To-User support forum of the

Re: [EMAIL PROTECTED] SSL pass phrase

2007-10-16 Thread William A. Rowe, Jr.
Aaron Dalton wrote: AFAIK there is no way around this. If you do not want Apache to wait for a pass phrase, you have to strip the private key of encryption. This of course has multiple security problems, but I'm afraid those are your only options that I am aware of. $ openssl rsa -in

Re: [EMAIL PROTECTED] SSL pass phrase

2007-10-16 Thread Dimitri Yioulos
On Tuesday 16 October 2007 2:58 pm, Aaron Dalton wrote: On Tue, 16 Oct 2007, Tony Heal wrote: I am using apache v 1.3.34-4.1 and openssl on Debian and I have set up SSL, Although I can restart apache using the init script without issue I get prompted for a pass phrase if I stop and start

Re: [EMAIL PROTECTED] SSL pass phrase

2007-10-16 Thread Aaron Dalton
On Tue, 16 Oct 2007, William A. Rowe, Jr. wrote: Aaron Dalton wrote: AFAIK there is no way around this. If you do not want Apache to wait for a pass phrase, you have to strip the private key of encryption. This of course has multiple security problems, but I'm afraid those are your only

Re: [EMAIL PROTECTED] SSL server IP/port conflict

2007-09-26 Thread Johan BOYÉ
seems to add an dedicated IP for the SSL stuff :-/ Take care see you soon -Message d'origine- De : Matus UHLAR - fantomas [mailto:[EMAIL PROTECTED] Envoyé : dimanche 23 septembre 2007 17:58 À : users@httpd.apache.org Objet : Re: [EMAIL PROTECTED] SSL server IP/port conflict

RE: [EMAIL PROTECTED] SSL server IP/port conflict

2007-09-25 Thread Rachel Anderson-Barrios
Objet : Re: [EMAIL PROTECTED] SSL server IP/port conflict On 21.09.07 16:33, Axel-Stéphane SMORGRAV wrote: HTTPS and NameVirtualHost do not go well together. NVH is based on the Host header. However Apache cannot read the Host header before the SSL session has been established

RE: [EMAIL PROTECTED] SSL server IP/port conflict

2007-09-24 Thread johan.boye
: Re: [EMAIL PROTECTED] SSL server IP/port conflict On 21.09.07 16:33, Axel-Stéphane SMORGRAV wrote: HTTPS and NameVirtualHost do not go well together. NVH is based on the Host header. However Apache cannot read the Host header before the SSL session has been established. But in order

Re: [EMAIL PROTECTED] SSL server IP/port conflict

2007-09-23 Thread Matus UHLAR - fantomas
On 21.09.07 16:33, Axel-Stéphane SMORGRAV wrote: HTTPS and NameVirtualHost do not go well together. NVH is based on the Host header. However Apache cannot read the Host header before the SSL session has been established. But in order to establish the SSL session, Apache needs to know what

[EMAIL PROTECTED] SSL server IP/port conflict

2007-09-21 Thread johan.boye
Hello, I have this error after setup 2 virtualhost based on the same IP : [Wed Sep 19 16:55:33 2007] [warn] Init: SSL server IP/port conflict: name1.foo.local:443 (/etc/apache2/sites-enabled/name1_https:1) vs. name2.foo.local:443 (/etc/apache2/sites-enabled/name2_https:1) I don't really

Re: [EMAIL PROTECTED] SSL server IP/port conflict

2007-09-21 Thread J.M. Castroagudin
Perhaps this can help you: http://httpd.apache.org/docs/2.0/ssl/ssl_faq.html#vhosts There are some limitations about SSL and name-based virtualhosts. It was a shok for me when I read that... [EMAIL PROTECTED] escribió: Hello, I have this error after setup 2 virtualhost based on the same

RE: [EMAIL PROTECTED] SSL server IP/port conflict

2007-09-21 Thread Axel-Stéphane SMORGRAV
to use. This is catch 20... Add another IP to the server. -ascs -Message d'origine- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Envoyé : vendredi 21 septembre 2007 13:13 À : users@httpd.apache.org Objet : [EMAIL PROTECTED] SSL server IP/port conflict Hello, I have this error

[EMAIL PROTECTED] SSL Library Error with mod_ssl

2007-09-11 Thread Aaron Smith
Continuing with trying to get Apache running on my HP-UX system, hoping someone can lend some thoughts. I recompiled apache 2.0.55 for about the 100th time, this time setting -enable-ssl=shared instead of compiling it in statically. Running apache in Debug mode results in: [Tue Sep 11

[EMAIL PROTECTED] SSl problem using Includes

2007-08-10 Thread Kyle Wilcox
I'm trying to allow SSI from my apache server. The Apache docs say to include the following: Options +Includes Options Indexes FollowSymLinks AddType text/html .shtml AddOutputFilter INCLUDES .shtml And that will cause Apache to parse the .shtml files being served for SSI to execute.

Re: [EMAIL PROTECTED] SSl problem using Includes

2007-08-10 Thread Joshua Slive
On 8/10/07, Kyle Wilcox [EMAIL PROTECTED] wrote: I'm trying to allow SSI from my apache server. The Apache docs say to include the following: Options +Includes Options Indexes FollowSymLinks AddType text/html .shtml AddOutputFilter INCLUDES .shtml Ahhh... No they don't.

Re: [EMAIL PROTECTED] SSL Re-negotiation in conjunction with POST method not supported

2007-08-08 Thread Arsen Hairapetyan
Thanks, Joshua. Could you please also answer to the question implied in my previous message: how can I get the VERSIONS of all compiled-in modules? (I can list them with 'apachectl -l', but I do not get the versions) Best regards, Arsen. On Tue, 7 Aug 2007, Joshua Slive wrote: On 8/7/07,

Re: [EMAIL PROTECTED] SSL Re-negotiation in conjunction with POST method not supported

2007-08-08 Thread Joshua Slive
On 8/8/07, Arsen Hairapetyan [EMAIL PROTECTED] wrote: Thanks, Joshua. Could you please also answer to the question implied in my previous message: how can I get the VERSIONS of all compiled-in modules? (I can list them with 'apachectl -l', but I do not get the versions) Modules included

[EMAIL PROTECTED] SSL Re-negotiation in conjunction with POST method not supported

2007-08-07 Thread Arsen Hairapetyan
Hello, I am getting the following error (copied from error_log) when I try to submit a filled-in form via web interface: [error] SSL Re-negotiation in conjunction with POST method not supported! hint: try SSLOptions

Re: [EMAIL PROTECTED] SSL Re-negotiation in conjunction with POST method not supported

2007-08-07 Thread Joshua Slive
On 8/7/07, Arsen Hairapetyan [EMAIL PROTECTED] wrote: [error] SSL Re-negotiation in conjunction with POST method not supported! hint: try SSLOptions +OptRenegotiate I believe this is the issue discussed in depth here:

Re: [EMAIL PROTECTED] SSL and virtual hosts

2007-06-16 Thread Grant Peel
they get the error that will show up, will be encrypted. -G - Original Message - From: Bill Hernandez To: users@httpd.apache.org Sent: Saturday, June 16, 2007 1:29 AM Subject: Re: [EMAIL PROTECTED] SSL and virtual hosts On Jun 15, 2007, at 8:54 PM, Totte wrote: Hi

[EMAIL PROTECTED] SSL and virtual hosts

2007-06-15 Thread Totte
Hi, As I understand, one can't use several ssl certificates on one IP. However, can I use the same certificate for different virtual hosts? I have the domain zzz.com and I want use ssl for say abc.zzz.com and def.zzz.com and using only one server (one IP as I understand). Is that possible?

Re: [EMAIL PROTECTED] SSL and virtual hosts

2007-06-15 Thread Tom Allison
I think they would complain that they are not certifying the correct domain (all but one) and some browsers may not accept that. I think your choices are rather limited when it comes to https. On Jun 15, 2007, at 9:54 PM, Totte wrote: Hi, As I understand, one can't use several ssl

Re: [EMAIL PROTECTED] SSL and virtual hosts

2007-06-15 Thread Joshua Slive
On 6/15/07, Totte [EMAIL PROTECTED] wrote: Hi, As I understand, one can't use several ssl certificates on one IP. However, can I use the same certificate for different virtual hosts? I have the domain zzz.com and I want use ssl for say abc.zzz.com and def.zzz.com and using only one server (one

Re: [EMAIL PROTECTED] SSL and virtual hosts

2007-06-15 Thread Bill Hernandez
On Jun 15, 2007, at 8:54 PM, Totte wrote: Hi, As I understand, one can't use several ssl certificates on one IP. However, can I use the same certificate for different virtual hosts? I have the domain zzz.com and I want use ssl for say abc.zzz.com and def.zzz.com and using only one server

Re: [EMAIL PROTECTED] ssl on windows server 2003

2007-05-25 Thread Eben
Hello, I upgraded to php 4.4.7, now when I enable the SSLEngine, apache won't even start. This is what I'm getting in the error log: [Fri May 25 12:24:54 2007] [info] Init: Initializing OpenSSL library [Fri May 25 12:24:54 2007] [info] Init: Seeding PRNG with 136 bytes of entropy [Fri May 25

[EMAIL PROTECTED] ssl on windows server 2003

2007-05-09 Thread Eben
I'm trying to get ssl working on a windows 2003 server box, and having some trouble with it. The server currently hosts about 50 sites using name based vhosts. I enabled one site on the box to use SSL via port 443. When I enable the SSLEngine directive for the one site, it works for about

RE: [EMAIL PROTECTED] ssl on windows server 2003

2007-05-09 Thread Ryan Huff
PROTECTED] Sent: Wednesday, May 09, 2007 8:43 AM To: users@httpd.apache.org Subject: [EMAIL PROTECTED] ssl on windows server 2003 I'm trying to get ssl working on a windows 2003 server box, and having some trouble with it. The server currently hosts about 50 sites using name based vhosts. I enabled

[EMAIL PROTECTED] SSL + name-based virtual host

2007-05-09 Thread Liz Kim
Hello, I am an apache newbie so I apologize if my question seems silly.. I am having some problems enabling SSL on our web server. We have one IP address for the server and 3 name-based virtual hosts. = NameVirtualHost OUR_IP_ADDRESS:80 VirtualHost OUR_IP_ADDRESS:80

Re: [EMAIL PROTECTED] SSL + name-based virtual host

2007-05-09 Thread Joshua Slive
On 5/9/07, Liz Kim [EMAIL PROTECTED] wrote: IfModule mod_ssl.c Include conf.d/ssl.conf /IfModule /*..*/ NameVirtualHost OUR_IP_ADDRESS:80 VirtualHost OUR_IP_ADDRESS:443 ServerNameNAME1.com DocumentRoot /var/www/html1 /VirtualHost VirtualHost OUR_IP_ADDRESS:80

Re: [EMAIL PROTECTED] SSL + name-based virtual host

2007-05-09 Thread Liz Kim
It would be ideal to the ssl enabled for NAME1.com only. NAME2.com and NAME3.com would stay as is. I've tried the following but not sure if I've taken your input correctly: = LoadModule ssl_module modules/mod_ssl.so IfDefine SSL Listen 443 AddType

Re: [EMAIL PROTECTED] ssl on windows server 2003

2007-05-09 Thread William A. Rowe, Jr.
Eben wrote: I'm trying to get ssl working on a windows 2003 server box, and having some trouble with it. The server currently hosts about 50 sites using name based vhosts. I enabled one site on the box to use SSL via port 443. When I enable the SSLEngine directive for the one site, it works

Re: [EMAIL PROTECTED] SSL + name-based virtual host

2007-05-09 Thread Joshua Slive
On 5/9/07, Liz Kim [EMAIL PROTECTED] wrote: Apache is failing to restart when I try this. With what error message? What is in the error log? I see nothing obviously wrong with the config, although I would remove all the IfDefine and /IfDefine stuff which only serves to confuse the situation.

Re: [EMAIL PROTECTED] SSL + name-based virtual host

2007-05-09 Thread Liz Kim
When restarting there is no error message being displayed but there is [Wed May 09 13:33:31 2007] [warn] Init: Session Cache is not configured [hint: SSLSessionCache] in the error log... LK On 5/9/07, Joshua Slive [EMAIL PROTECTED] wrote: On 5/9/07, Liz Kim [EMAIL PROTECTED] wrote: Apache

Re: [EMAIL PROTECTED] SSL + name-based virtual host

2007-05-09 Thread Liz Kim
OK just tried getting rid of the IfDefine and /IfDefine and it stopped erroring out. Thank you so much for your help. Now if i do: http://NAME1.com it goes to the same website. And if i do: https://NAME1.com it give me a 403 error. It is not working fully yet but definitely some progress..

Re: [EMAIL PROTECTED] SSL + name-based virtual host

2007-05-09 Thread Joshua Slive
On 5/9/07, Liz Kim [EMAIL PROTECTED] wrote: OK just tried getting rid of the IfDefine and /IfDefine and it stopped erroring out. Thank you so much for your help. Now if i do: http://NAME1.com it goes to the same website. And if i do: https://NAME1.com it give me a 403 error. And again: what is

Re: [EMAIL PROTECTED] SSL + name-based virtual host

2007-05-09 Thread Liz Kim
I had a typo on the document root directory. So it wasn't able to locate the index file. All is working out as we had hoped. Thank you so much for your help Joshua! -- LK On 5/9/07, Joshua Slive [EMAIL PROTECTED] wrote: On 5/9/07, Liz Kim [EMAIL PROTECTED] wrote: OK just tried getting rid of

[EMAIL PROTECTED] SSL Proxy to back end servers

2007-04-30 Thread wi
Hi all I have an Apache instance that is functioning as a reverse proxy for our app server. For standard http, this works fine. However, we'd like to send SSL traffic through the proxy to the back end server. I don't want to decrypt the traffic at the Apache instance, just re-route it to the

Re: [EMAIL PROTECTED] SSL Proxy to back end servers

2007-04-30 Thread Joshua Slive
On 4/30/07, wi [EMAIL PROTECTED] wrote: Hi all I have an Apache instance that is functioning as a reverse proxy for our app server. For standard http, this works fine. However, we'd like to send SSL traffic through the proxy to the back end server. I don't want to decrypt the traffic at the

[EMAIL PROTECTED] SSL-enabled interaction with MySQL

2007-04-24 Thread Naveen Rawat
Hi there, I am relatively newbie to this. 1. Primarily I wanted to know, if it is possible for an apache (--enable-mods-shared=all --enable-ssl=shared --enable-so) module to interact with a SSL-enabled MySQL (--with-openssl=DIR)? 2. If yes, then considering that I have got

[EMAIL PROTECTED] SSL-enabled interaction with MySQL

2007-04-24 Thread Naveen Rawat
Hi there, [I am resending my request as I did not find the earlier sent in the mailing lists :-( ] I am relatively newbie to this. 1. Primarily I wanted to know, if it is possible for an apache (--enable-mods-shared=all --enable-ssl=shared --enable-so) module to interact

Re: [EMAIL PROTECTED] SSL-enabled interaction with MySQL

2007-04-24 Thread Joshua Slive
On 4/24/07, Naveen Rawat [EMAIL PROTECTED] wrote: 1. Primarily I wanted to know, if it is possible for an apache (--enable-mods-shared=all --enable-ssl=shared --enable-so) module to interact with a SSL-enabled MySQL (--with-openssl=DIR)? 2. If yes, then considering that I have got required

RE: [EMAIL PROTECTED] SSL-enabled interaction with MySQL

2007-04-24 Thread Naveen Rawat
Hi Joshua, Thanks for the reply. 1. Primarily I wanted to know, if it is possible for an apache (--enable-mods-shared=all --enable-ssl=shared --enable-so) module to interact with a SSL-enabled MySQL (--with-openssl=DIR)? 2. If yes, then considering that I have got required

[EMAIL PROTECTED] SSL/Apache 2.0.x Question

2007-04-21 Thread Tom Ray [Lists]
I've created a self-signed SSL for a site and while it works great, I'm getting that annoying Not a Trusted Issuer pop up. By looking over the ssl.conf it looked like I could do something in that might stop that error box from coming up. But I'm not overly sure what that is. I'm *guessing*

RE: [EMAIL PROTECTED] SSL name based virtualhosts -- no, not the normal question!

2007-04-10 Thread Gonzalez, Miguel
: RE: [EMAIL PROTECTED] SSL name based virtualhosts -- no, not the normal question! Your first named virtual host will be used for the duration of the connection handshake (because there is no named host yet during the connection). Make sure your first named (default) host has the certs

[EMAIL PROTECTED] SSL name based virtualhosts -- no, not the normal question!

2007-04-09 Thread Michael
Hi everyone, I'm having issues with getting SSL and virtualhosts working with Apache. Now, before you point me at the FAQ, it's not the obvious question. What I'm trying to do is get multiple HTTPS hosts working on the same IP -- but using a wildcard SSL certificate. My config is doing using

Re: [EMAIL PROTECTED] SSL name based virtualhosts -- no, not the normal question!

2007-04-09 Thread William A. Rowe, Jr.
Michael wrote: I was sort of hoping hmmm, they're just warnings, maybe it will be OK, but it appears not -- when I load the page, it gives me a Connection Interrupted or Action Cancelled (pick your browser) and I get this in the error.log: [error] [client 192.168.0.4] Invalid method in

RE: [EMAIL PROTECTED] SSL name based virtualhosts -- no, not the normal question!

2007-04-09 Thread Michael
Your first named virtual host will be used for the duration of the connection handshake (because there is no named host yet during the connection). Make sure your first named (default) host has the certs and SSL On. Move those bogus entries to the bottom, see if that solves things.

RE: [EMAIL PROTECTED] ssl VirtualHost in 1.3.*

2007-04-03 Thread Boyle Owen
-Original Message- From: kalin mintchev [mailto:[EMAIL PROTECTED] Sent: Tuesday, April 03, 2007 7:36 AM To: users@httpd.apache.org Subject: [EMAIL PROTECTED] ssl VirtualHost in 1.3.* hi all.. wondering if i can use more than one ssl VirtualHost in httpd.conf for a 1.3.33. i

[EMAIL PROTECTED] SSL access_log Flooded with GET / from 127.0.0.1 localhost

2007-03-19 Thread imacat
Dear all, Hi. This is imacat from Taiwan. After upgrading to Apache 2.2, the access_log of my SSL virtual host is flooded with numerious these records: ... 127.0.0.1 - - [19/Mar/2007:15:00:18 +0800] GET / 400 663 127.0.0.1 - - [19/Mar/2007:15:00:19 +0800] GET / 400 663

  1   2   3   >