Re: Apache's SSL server side keeps crashing

2000-01-25 Thread phil
You know, I'd take the problem-solving attention away from SSL, and look more at other things like chron-jobs. My initial thought was that a cron-job (like log rotations) is causing troubles, especially at the end of the week... Sunday. Isn't that when most Unix distros do their 'weekly crons'?

Re: Building a Corporate CA

2000-01-25 Thread Leland V. Lammert
At 05:00 AM 1/24/00 , you wrote: >I've been quite unsucessfull in finding documentation about setting up a >corporate CA. > >Does anyone have some pointers for me? > >Thanks, > >A. www.openca.org (and mirrors) Leland V. Lammert

Re: Apache SSL side keeps thunkin out...help?

2000-01-25 Thread Aaron Gelner
Dear List, I apologize for teh repeats. Apparently there was something wrong with Majordomo? *Grin* I sent 3 to the list, they never got sent out, with delay apparently, they have all made it. Anyhow, to clear a few things up. We are running RedHat 6.1, Apache 1.3.9+mod_ssl, and OpenSSL 0.9.4

Re: SSLv4?

2000-01-25 Thread EKR
Raj Mathur <[EMAIL PROTECTED]> writes: > Hmm, interesting question! I have with me a tender specification > which asks for a web server with SSLv4 support, and I assumed that > SSLv4 is the logical successor to v3 (which is when I sent out the > mail). However, on searching the web I find no ref

Re: apache's ssl side fails to be stable

2000-01-25 Thread Ben Laurie
Michael R Gettes wrote: > > I am seeing something similar. Apache 1.3.9 with openssl 0.9.4 > on solaris 2.6. Everything seems ok and periodically, what I will > assume to be under some reasonable load, I find that I have many > httpd processes running (I believe it is my max) and apache > is no

Re: Apache SSL side keeps thunkin out...help?

2000-01-25 Thread Andrzej Baginski
On Mon, 24 Jan 2000, Aaron Gelner wrote: > Dear List, > > Since our initial date of receiving our SSL cert CA'd by Thawte, every > Sunday, Apache seemingly faults out on the Secured Socket Layer side, > thus causing not a connection refused to port 443, instead, a connection > reset error. We'v

Linking problem building 0.9.4 debug?

2000-01-25 Thread Grebelsky, Konstantin
I am trying to build a debug dlls using 32all.bat but getting linking problems below.. What is wrong? Does anybody know? Should I be using 32all.bat at all? If not what are the steps that are needed. For the regular build I am following the steps in install.w32 .\crypto\objects\obj_dat.h

SSL I m stuck

2000-01-25 Thread mderiviere
I installed SSL everything seems to be all right but no because it doesn t work. What's wrong? I have developped SSL with Windows 2000 and generating all my certificats maybe one of my step is wrong. Certainly it's because my server certificat that I generate thanks to the wizard 2000 is not cor

x509.c and BIO

2000-01-25 Thread Robert X Weeks
Is there a function for reading a x509 PEM cert from an environment var or from a const char * instead of a stream? I have been tracing the x509 code as I want to produce a stand alone program to list out the CN and a few components from the certificate. In the x509.c code you do a BIO_set_fp(cer

Re: SSLv4?

2000-01-25 Thread Geoff Thorpe
On Tue, 25 Jan 2000, Raj Mathur wrote: > Hmm, interesting question! I have with me a tender specification > which asks for a web server with SSLv4 support, and I assumed that > SSLv4 is the logical successor to v3 (which is when I sent out the > mail). However, on searching the web I find no re

Re: SSL my last hope...

2000-01-25 Thread amanda
On Tue, 25 Jan 2000 [EMAIL PROTECTED] wrote: > Hi, my name is Marion > I try to develop a SSL > I live in France and I have to generate a key in 40 bits Didn't France remove that 40-bit restriction a year ago? http://cwis.kub.nl/~frw/people/koops/cls2.htm#fr A. ___

Re: apache's ssl side fails to be stable

2000-01-25 Thread Michael R Gettes
I am seeing something similar. Apache 1.3.9 with openssl 0.9.4 on solaris 2.6. Everything seems ok and periodically, what I will assume to be under some reasonable load, I find that I have many httpd processes running (I believe it is my max) and apache is no longer responding to SSL requests.

use IIS 5

2000-01-25 Thread mderiviere
I generated my CA, server certificat and client certificat what about the mapping that I have to initialize for my client certificat? Marion __ OpenSSL Project http://www.openssl.org User Suppo

Re: How to add a cipher option

2000-01-25 Thread Dr Stephen Henson
Amit sahai wrote: > > Hi all , > Just wondering how to add a cipher like "ECC" ( Elliptic Curve > Cryptosystem ) > is added to SSL layer's allowed list of cryptographic algorithms . This > "Cipher " is very useful for smart cards which require less computation > . > What is the genera

SSL my last hope...

2000-01-25 Thread mderiviere
Hi, my name is Marion I try to develop a SSL I live in France and I have to generate a key in 40 bits This is the different steps to implement SSL 1. I changed the file openssl.cnf openssl.cnf** # # OpenSSL example configuration file.

something wrong with SSL

2000-01-25 Thread mderiviere
Hello, I use opnessl to generate a CA I use the Wizard Microsoft of Windows 2000 to generate a server certificat Then I generate client certificat signed by the CA Everything seems to be OK When I write https.. a dialog box appears with all my client certificat but when I click on the good one t

Re: DSA Certs & CA

2000-01-25 Thread Andrew Cooke
Sorry. I said something stupid. You are right. Somehow I assumed that you were also giving the client a certificate and key (these are needed if you tell the server to do client authentication). Andrew Skye Poier wrote: > > OK this is a source of some of my confusion. I thought the client o

Re: SSLv4?

2000-01-25 Thread Raj Mathur
Hmm, interesting question! I have with me a tender specification which asks for a web server with SSLv4 support, and I assumed that SSLv4 is the logical successor to v3 (which is when I sent out the mail). However, on searching the web I find no reference to v4, so I conclude that either it does