Re: Problem with SSL Site

2000-06-05 Thread Einar Indridason
> I was wondering if anyone could shed some light on this: > > I am using the s_client command within OpenSSL utility under Windows NT > which works great > for testing most secure sites. However one site, out of the hundreds I've > tested has > proven problematic. A GET against https://www.genui

Re: Problem with SSL Site

2000-06-02 Thread Andrew W. Gray
>A GET against https://www.genuity.com will not >fetch the same page content that a browser will. It always yeilds a >server error (500) >when attempting to GET the site's root page The server is most likely looking to read the User-Agent HTTP header to do some preproceessing before returning t

Re: Problem with SSL Netscape: ...no common encryption algorithm...??

2000-02-17 Thread Amit Chopra
Hi The browsers send a prioritised list of ciphers to the server for selection, strong first, followed by the weaker ones. The server selects the first cipher that matches. So the server should typically select the strongest possible common cipher. :) Amit. [EMAIL PROTECTED] wrote: > Steve,

Re: Problem with SSL Netscape: ...no common encryption algorithm...??

2000-02-17 Thread jonp
Steve, The server is WN 2.3.3 (see also http://www.wnserver.org). It works with both 'strong' and 'weak' browsers, but I can't figure out if it uses strong encryption where possible (e.g. strong browsers). Jon Dr Stephen Henson wrote: > [EMAIL PROTECTED] wrote: > > > > > > That's right! Now we

Re: Problem with SSL Netscape: ...no common encryption algorithm...??

2000-02-17 Thread jonp
> > After installing a Verisign test certificate; when testing with > > ./openssl s_client -connect www.takeitnow.nl:443 and GET / HTTP/1.0 > > everything seems to work; the HTTP GET is recorded in the server > > logging. But when accessing the server with Netscape (4.5) I get a popup > > box 'Net

Re: Problem with SSL Netscape: ...no common encryption algorithm...??

2000-02-16 Thread jonp
Dear Steve, You're right: I've downloaded a 128bit IEX security upgrade and now it works. But, now we've to find out how to install 'weak' encryption. Thanks again Jon Petersen Dr Stephen Henson wrote: > [EMAIL PROTECTED] wrote: > > > > Hi all, > > > > Our first attempt to install a secure w

Re: Problem with SSL Netscape: ...no common encryption algorithm...??

2000-02-16 Thread Dr Stephen Henson
[EMAIL PROTECTED] wrote: > > Hi all, > > Our first attempt to install a secure webserver was not succesfull. We > did install Openssl (0.9.4) and WN webserver (2.3.3) on a Linux box. > > After installing a Verisign test certificate; when testing with > ./openssl s_client -connect www.takeitnow.

Re: Problem with ssl

1999-11-11 Thread Newton Nyante
You using a real cert? Are you using NS? I found that if CN is not real or resolvable by DNS it can give that error. -N - Original Message - From: Roddy Strachan <[EMAIL PROTECTED]> To: SSL List <[EMAIL PROTECTED]> Sent: Wednesday, November 10, 1999 7:21 PM Subject: Problem with ssl

Re: Problem with ssl

1999-11-11 Thread Ben Laurie
Roddy Strachan wrote: > > Hi, > I managed to get a certificate up and running, but whilst running > with apache-ssl, i get : > > [Thu Nov 11 11:18:50 1999] [debug] apache_ssl.c(355): Random input > /dev/urandom(1024) -> 1112 > [Thu Nov 11 11:18:50 1999] [debug] apache_ssl.c(928): Generat

RE: Problem with SSL and Apache

1999-04-28 Thread Ian Pollard
I tested a non-forking minimal test server (no verify client certs, but server supplies cert on request, encrypted session) with many consecutive secure client sessions using OpenSSL-0.9.2b on Solaris 2.6 through Rational Purify and it came through with NO memory leaks or other nasty errors. This

Re: Problem with SSL and Apache

1999-04-28 Thread Bodo Moeller
On Wed, Apr 28, 1999 at 09:28:18AM -0700, Mike Davis wrote: > I'm using curl 5.6.2beta [...] with OpenSSL 0.9.2b, to access an > Apache server (Stronghold/2.4.1 Apache/1.3.3) on Solaris 2.6. After > I've made a thousand or so requests via SSL, the Apache httpsd > daemons start crashing with a se