Re: Mac users bypass SSL

2004-09-27 Thread kloomis
At 11:55 AM 9/27/2004 -0700, you wrote: Assuming that your server is not listening for non-SSL connections, your clients are getting SSL connections whether they get prompted to accept your server's cert or not.  The server is listening only to port 443 connections. Feel free to prove me wrong b

Re: Mac users bypass SSL

2004-09-27 Thread Paul L. Allen
kloomis wrote: At 08:36 AM 9/27/2004 -0400, you wrote: Ken - Missing from your description of the problem with Apache is: which operating system are you using? Once you provide specific information, more help can be provided to you. Janet: Thanks for your reply. I am using Redhat 9.0

RE: Mac users bypass SSL

2004-09-25 Thread Goehring, Chuck, RCI - San Diego
cted and eliminate the   Hope this helps you out.  There is a lot to it. Chuck    -Original Message- From: kloomis [mailto:[EMAIL PROTECTED]] Sent: Friday, September 24, 2004 6:44 PM To: [EMAIL PROTECTED] Subject

RE: Mac users bypass SSL

2004-09-25 Thread kloomis
e2/htdocs/subarea" to the directory you want protected and eliminate the     Hope this helps you out.  There is a lot to it.   Chuck       -Original Message- From: kloomis [mailto:[EMAIL PROTECTED]] Sent: Friday, September 24, 2004 6:44 PM To: [EMAIL PROTECTED] Subject: Re: Mac use

RE: Mac users bypass SSL

2004-09-25 Thread Goehring, Chuck, RCI - San Diego
See SSLRequireSSL Directive at http://httpd.apache.org/docs-2.0/mod/mod_ssl.html#sslrequiressl Description: Deny access when SSL is not used for the HTTP request   This was not in my earlier reply, so I may have a misconfiguration myself.  The combination of the "Listen 443" w

Re: Mac users bypass SSL

2004-09-24 Thread kloomis
At 03:54 PM 9/24/2004 -0700, you wrote: kloomis wrote: At 11:31 PM 9/23/2004 -0700, you wrote: kloomis wrote: Hello: I am using SSL with Apache 2.0 to run a "secure" website.  The problem I have is that Mac users using Internet Explorer open the site without encryption.  They access it via an http

Re: Mac users bypass SSL

2004-09-24 Thread David Schwartz
kloomis wrote: At 11:31 PM 9/23/2004 -0700, you wrote: kloomis wrote: Hello: I am using SSL with Apache 2.0 to run a "secure" website. The problem I have is that Mac users using Internet Explorer open the site without encryption. They access it via an https:\\ address but they don't get aske

RE: Mac users bypass SSL

2004-09-24 Thread Goehring, Chuck, RCI - San Diego
Ken,   Unfortunately, it can be a lengthy process but better than it was with Apache 1.x.  There are docs with the source distribution of Apache.  You will probably need to build it to get a version with ssl enabled.  Below are a few of the things you will need in your http.conf or an includ

RE: Mac users bypass SSL

2004-09-24 Thread kloomis
At 06:57 AM 9/24/2004 -0700, you wrote: Ken, If your server is set up correctly, it won't communicate in any mode other than ssl using the port you assigned.  How the browser behaves is controlled by the plethora of setting in the browser and the browser brand.  On the public web, it may not alwa

Re: Mac users bypass SSL

2004-09-24 Thread kloomis
At 11:31 PM 9/23/2004 -0700, you wrote: kloomis wrote: Hello: I am using SSL with Apache 2.0 to run a "secure" website.  The problem I have is that Mac users using Internet Explorer open the site without encryption.  They access it via an https:\\ address but they don't get asked to accept a secur

Re: Mac users bypass SSL

2004-09-24 Thread David Schwartz
Peter O Sigurdson wrote: One reason I can think of is that if you wanted to PREVENT anyone WITHOUT the certificate from accessing your site. That is, you could mail out diskettes with the cert file to use as a perimeter defense. No, I meant a technical reason. You can argue that your computer sh

RE: Mac users bypass SSL

2004-09-24 Thread Goehring, Chuck, RCI - San Diego
Ken, If your server is set up correctly, it won't communicate in any mode other than ssl using the port you assigned. How the browser behaves is controlled by the plethora of setting in the browser and the browser brand. On the public web, it may not always be a browser that connects. Crawler

Re: Mac users bypass SSL

2004-09-24 Thread Peter O Sigurdson
:31 AM Please respond to openssl-users                 To:        [EMAIL PROTECTED]         cc:                 Subject:        Re: Mac users bypass SSL         kloomis wrote: > Hello: > > I am using SSL with Apache 2.0 to run a "secure" website.  The problem I > have is t