Re: Certificate question

1999-11-22 Thread Michael Robinson
Geoff Thorpe <[EMAIL PROTECTED]> writes: >Modern operating systems generally make memory >scanning a lot more difficult in a process that has setuid()'d from root >to something else. Apache's setuid prevents core-dumping. Ok, forget gcore. Use ptrace. From the FreeBSD ptrace docs: "This requ

Re: Certificate question

1999-11-22 Thread Geoff Thorpe
Hi, On Mon, 22 Nov 1999, Michael Robinson wrote: > Everyone says that, but I've never seen anyone elucidate on the so-called > "obvious" reasons. > > The key file is protected by root-read-only permissions. Only someone with > root access can read the file. If someone has root access, they ca

Re: Certificate question

1999-11-22 Thread Ben Laurie
Michael Robinson wrote: > > Patrik Carlsson <[EMAIL PROTECTED]> writes: > >You could remove your key passphrase - but it's not recommended for obvious > >security reasons! > > Everyone says that, but I've never seen anyone elucidate on the so-called > "obvious" reasons. > > The key file is prot

Re: Certificate question

1999-11-21 Thread Michael Robinson
Patrik Carlsson <[EMAIL PROTECTED]> writes: >You could remove your key passphrase - but it's not recommended for obvious >security reasons! Everyone says that, but I've never seen anyone elucidate on the so-called "obvious" reasons. The key file is protected by root-read-only permissions. Only

Re: Certificate question

1999-11-21 Thread Patrik Carlsson
You could remove your key passphrase - but it's not recommended for obvious security reasons! Use e.g. "openssl rsa -in ". For other suggestions, checkout the mail list archives. Patrik logrus wrote: > hi > i've just subscribed to the list after successfuly installing mod_ssl, openssl etc,

Re: Certificate question

1999-11-21 Thread logrus
hi i've just subscribed to the list after successfuly installing mod_ssl, openssl etc, & compiling & running my newly configured apache httpd without fault. my apologies, if i'm asking a redundant question, or maybe missed something in the docs. the only thing is that the daemon requests the

Re: Certificate question

1999-01-17 Thread Ben Laurie
Paul Khavkine wrote: > > As far as i know RHat is still using SSLeay. > If it is it should work fine. Even if they weren't, a cert is a cert - the only thing that might give trouble is file formats. Cheers, Ben. -- http://www.apache-ssl.org/ben.html "My grandfather once told me that there ar

Re: Certificate question

1999-01-16 Thread Paul Khavkine
As far as i know RHat is still using SSLeay. If it is it should work fine. On Thu, 18 Nov 1999, you wrote: > Hi all, > > I need a second (and third and fourth?) opinion on some information I got > from Thawte. > > I told them I was currently using Apache+mod_ssl, and would be switching > to R