Re: SSL on a hosted site

2005-01-12 Thread L Nehring
Have look at this http://www.schneier.com/paper-pki-ft.txt and some other papers on the that site. I run my own CA because I neither trust nor can I afford Verisign. There's no technical difference in the certs. best regards, Lance http://www.newparticles.com/ Michael Jackson wrote: Can I instal

Re: Server attack ?

2004-09-09 Thread L Nehring
I get these messages across all of my exposed servers. People are knocking on the door to see if they can get in. Sometimes it's an automated scan to gather data to see who is running what version of SSH. (Ref: http://www.openssh.org/usage/index.html) But, I think that the question is bette

Re: Regarding all the spam...

2004-03-04 Thread L Nehring
st Windows exploit virus blast (when are they going to fix their stuff?) I kept getting bombed by AV bounces aimed at openssl-users-l. Not to mention that the list was DOWN during that time as well. A good number of my posts just got timed out by my legitimate SMTP relay. On Mar 2, 2004, at 2:15

Re: Regarding all the spam...

2004-03-02 Thread L Nehring
Have we now crossed the threshold where there are more off-topic messages discussing spam than spam messages themselves? There just doesn't seem to be a real need to take any action at all given the small number of UCE or antivirus bounce messages. r, Lance __

Re: Lost messages

2004-02-18 Thread L Nehring
It's rather suspicious that you can't explain why you need email from this list with headers. Are you trolling for email accounts or preparing for some secret lawsuit? .Perhaps building a list of people who use encryption and therefore are capable of being enemies of the state? I cannot

Re: un-tar'ing not working for me

2004-01-13 Thread L Nehring
The file is gzipped. You'll need to either ungzip it before using tar or use a command like `tar zxvf openssl-0.9.7c.tar.gz.tar` if your tar understands compression. Tar is a old command so options can be specified many different ways. I generally leave out the '-' since it doesn't care. 'z

Re: SSL Config on Tomcat (443 or 8443)

2002-11-13 Thread L Nehring
Oops, I'm not an expert on mbeans, etc. so I'm not wasn't sure what all you needed Here's what we're using for the tomcat-service.xml file. (I've 'd out the private pieces.) The keystore is located in the jboss/server/default/conf/ directory. I would seriously recommend upgrading y

Re: SSL Config on Tomcat (443 or 8443)

2002-11-13 Thread L Nehring
Hari, You'll probably want to edit Tomcat's server.xml and add/modify a couple Connector specifications inside the Service spec, such as the following. (Now, I'm using Tomcat 4.0.6 with JBoss 3.0.4, so for me this file is actually the $JBOSS_HOME/server/default/deploy/tomcat4-service.xml file.)

Re: problem with openssl 0.9.6c (source)

2002-04-24 Thread L Nehring
"ar" is an archive library utility.  The makefile has a target that uses "ar" to build up a library using the object files that you just compiled.   On my Solaris 2.8 installation "ar" is located at "/usr/ccs/bin/ar".  You'll probably need to put "/usr/ccs/bin" in your path before running "make"