Re: Is it possible to use a global lock in the OpenSSL engine on each mod_ssl call?

2021-11-10 Thread Dr Paul Dale
have apache installed that uses this OpenSSL engine for the HTTPS connection. I was wondering if it is possible to use a global lock with the OpenSSL on mod_ssl call? So that, only one mod_ssl thread cal call the engine at a time? Thanks, Shariful

Is it possible to use a global lock in the OpenSSL engine on each mod_ssl call?

2021-11-10 Thread Shariful Alam
Hello, I understand this is a weird question. I have an OpenSSL engine only for RSA. And I have apache installed that uses this OpenSSL engine for the HTTPS connection. I was wondering if it is possible to use a global lock with the OpenSSL on mod_ssl call? So that, only one mod_ssl thread cal

Re: mod_ssl - client certificates broken after yum update of openssl

2014-06-18 Thread Nelson
On Wed, 6/18/14, Viktor Dukhovni wrote: Subject: Re: mod_ssl - client certificates broken after yum update of openssl To: openssl-users@openssl.org Date: Wednesday, June 18, 2014, 11:08 AM On Wed, Jun 18, 2014 at 07:07:25AM -0700, Nelson wrote

Re: mod_ssl - client certificates broken after yum update of openssl

2014-06-18 Thread Viktor Dukhovni
On Wed, Jun 18, 2014 at 07:07:25AM -0700, Nelson wrote: > Apache was upgraded with openssl as well as mod_ssl. You need to read the documentation, release notes, ... and determine any changes in policy or supported algorithms in the updated release. My best guess is that this release objects

Re: mod_ssl - client certificates broken after yum update of openssl

2014-06-18 Thread Nelson
On Tue, 6/17/14, Viktor Dukhovni wrote: Subject: Re: mod_ssl - client certificates broken after yum update of openssl To: openssl-users@openssl.org Date: Tuesday, June 17, 2014, 10:53 PM On Tue, Jun 17, 2014 at 06:48:28PM -0700, Nelson wrote

Re: mod_ssl - client certificates broken after yum update of openssl

2014-06-17 Thread Viktor Dukhovni
On Tue, Jun 17, 2014 at 06:48:28PM -0700, Nelson wrote: > Perfectly working VM running Amazon Linux with Apache and mod_ssl > configured for client certificates. > > Ran yum update to get the latest openssl (OpenSSL 1.0.1h-fips 5 > Jun 2014)/mod_ssl(2.2.27 )/httpd(2.2.27) securi

mod_ssl - client certificates broken after yum update of openssl

2014-06-17 Thread Nelson
Perfectly working VM running Amazon Linux with Apache and mod_ssl configured for client certificates. Ran yum update to get the latest openssl (OpenSSL 1.0.1h-fips 5 Jun 2014)/mod_ssl(2.2.27 )/httpd(2.2.27) security updates from Amazon's yum repository. Now the client certificate check

Re: Similar issuer dn mod_ssl client authentication issue

2013-05-29 Thread Michele Mase'
Dear openssl group, could you solve this issue regarding mod_ssl? Michele Masè On Thu, May 23, 2013 at 10:11 AM, Michele Mase' wrote: > Okay, openssl works, but mod_ssl doesn't. > Is this a real problem? > Instead try hacking mod_ssl code ... > Could I ask for a bug/impro

Re: Similar issuer dn mod_ssl client authentication issue

2013-05-23 Thread Michele Mase'
Okay, openssl works, but mod_ssl doesn't. Is this a real problem? Instead try hacking mod_ssl code ... Could I ask for a bug/improvement so that mod_ssl could finally work? Michele MAsè On Thu, May 23, 2013 at 1:22 AM, Dave Thompson wrote: > >From: owner-openssl-us...@openssl.org O

RE: Similar issuer dn mod_ssl client authentication issue

2013-05-22 Thread Dave Thompson
>From: owner-openssl-us...@openssl.org On Behalf Of Michele Mase' >Sent: Tuesday, 21 May, 2013 04:16 I was wrong! >"Does it work with client=Firefox using client certs under both CAs? >I would expect at least one to fail. Note that s_server -verify >doesn't *require* client cert, it only *allows

Re: Similar issuer dn mod_ssl client authentication issue

2013-05-21 Thread Michele Mase'
/www.example.com.crt -CApath /some/path -state -verify 10 > > >and testing it with any client (ie firefox) it finally works! > > Does it work with client=Firefox using client certs under both CAs? > I would expect at least one to fail. Note that s_server -verify > doesn't

RE: Similar issuer dn mod_ssl client authentication issue

2013-05-17 Thread Dave Thompson
client cert, it only *allows* it; how did you check Firefox is actually using your client cert(s)? >apache + mod_ssl >No one version worked for me: 2.2.x - 2.4.x (openssl 0.9.8.x - >openssl 1.x) in various linux configurations (centos[56], ubuntu 13.04) Not surprising. This logic hasn&#x

Re: Similar issuer dn mod_ssl client authentication issue

2013-05-17 Thread Michele Mase'
-www -key /some/path/file.key -cert /some/path/www.example.com.crt -CApath /some/path -state -verify 10 and testing it with any client (ie firefox) it finally works! apache + mod_ssl No one version worked for me: 2.2.x - 2.4.x (openssl 0.9.8.x - openssl 1.x) in various linux configurations (centos[5

RE: Similar issuer dn mod_ssl client authentication issue

2013-05-14 Thread Dave Thompson
ng message. >The only way it works is without [requiring client auth] or >Using only one CA in the file (file /path/to/pemfile.pem) As expected, see above. >But I'm still unable to retrieve client cert data; I don't know >if the client is authenticated or not. I do

Similar issuer dn mod_ssl client authentication issue

2013-05-13 Thread Michele Mase'
works, it seems like an uncorrect (or incomplete) mod_ssl openssl's implementation. Addendum: The bundle file contains CA1 and CA2; client certificates signed by CA1 (client1) work, client certificates signed by CA2 (client2) don't work. If I change the order of the two certificates in the /pat

compiling mod_ssl as shared forms mod_ssl.a and not mod_ssl.so

2013-05-09 Thread Cipher
Hi, I am trying to compile httpd 2.4.4 with openssl 1.0.1e. I want mod_ssl to be linked dynamically as mod_ssl.so But after compiling using following config option results in mod_ssl.a . ./configure --prefix=/etc/apache2 --with-ssl=/openssl_cc1 *--enable-so --enable-mods-shared=all* --enable

how to tell the pkcs11 library name to apache2 mod_ssl?

2012-03-07 Thread Magosányi, Árpád
Hi! I try to use a pkcs11 smart card (eToken) to store the web server's private key with apache&mod_ssl. From the strace output it seems that mod_ssl successfully loads the pkcs11 engine. However it does not seem to find the pkcs11 library. Given that I see no attempt to load openssl.cnf

mod_ssl + openssl-0.9.7h

2011-04-01 Thread satish patel
Hey Guys, To fix some vuln.. I am planing to compile mod_ssl-2.8.1 with openssl-0.9.7h but getting following error. Look like version compatibility issue is there work around for this.. ( I can change my mod_ssl-2.8.1 version) make[1]: Entering directory `/home/satish/mod_ssl-2.8.3-1.3.19

Re: Mutual Authentication using Multiple CA's in Apache (mod_ssl) does not work

2010-06-07 Thread Dr. Stephen Henson
On Mon, Jun 07, 2010, Scott Thomas wrote: > Bonjour All Users, > > > My setup has a ROOT CA and 3 level of Sub CA's. I have generated apache web > server and client certificates from every the ROOT and Sub CA's. > > I have configured my APACHE web server for client certificate (mutual) > auth

Mutual Authentication using Multiple CA's in Apache (mod_ssl) does not work

2010-06-07 Thread Scott Thomas
Bonjour All Users, My setup has a ROOT CA and 3 level of Sub CA's. I have generated apache web server and client certificates from every the ROOT and Sub CA's. I have configured my APACHE web server for client certificate (mutual) authentication. I have generated the apache web server certif

fatal, browser-specific "ssl_error_handshake_unexpected_alert" error. openssl, mod_ssl, or apache?

2009-07-06 Thread PGNet Dev
hi, i'm seeing a browser-specific ssl error that i'm not clear is due to openssl, mod_ssl, or apache? or my own config ... ? hoping someone here might spare a look at my info/speculations below & comment. i've installed apache2-2.2.11-10.1 apache2-worke

RE: error while executing make command (fixed) --> next: HTTPS with apache + mod_ssl issue

2009-05-21 Thread Neerav Singh
make command (fixed) --> next: HTTPS with apache + mod_ssl issue > From: owner-openssl-us...@openssl.org On Behalf Of Neerav Singh > Sent: Tuesday, 19 May, 2009 03:37 > I also tried using openssl as below > I generated the key as below >

RE: error while executing make command (fixed) --> next: HTTPS with apache + mod_ssl issue

2009-05-19 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Neerav Singh > Sent: Tuesday, 19 May, 2009 03:37 > I also tried using openssl as below > I generated the key as below > $ openssl genrsa -des3 -out ca.key 1024 > But when I try to generate Certificate it t

Re: error while executing make command (fixed) --> next: HTTPS with apache + mod_ssl issue

2009-05-14 Thread Kyle Hamilton
...and don't forget to read the Apache documentation on mod_ssl. http://docs.apache.org/ is your friend. -Kyle H On Thu, May 14, 2009 at 2:37 PM, Ger Hobbelt wrote: > On Thu, May 14, 2009 at 3:17 PM, Neerav Singh > wrote: >> Hi Ger >> >> Thanks a lot for the invalu

error while executing make command (fixed) --> next: HTTPS with apache + mod_ssl issue

2009-05-14 Thread Ger Hobbelt
xed. > Now I ran into another problem > > > > -  I ran make command(openssl) successfully > > -  Executed Configure for mod_ssl --- ./configure --with-apache… > --with-ssl=../openssl-… > > -  Make certificate(DSA) > > -  Configured apache with follo

Re: How do you get FIPS openssl to work with mod_ssl?

2008-03-21 Thread Steve Marquess
Blasdel, Jerry wrote: > I'm not sure if this will help, but we do the following (this is on > Soalris): > > 1.Build fips caninsters from an opens-ssl-fips source (1.1.1 or > 1.1.2). > 2.Build a version of openssl and during the configure use > -with-fipslibdir=(location of the canisters fr

Re: How do you get FIPS openssl to work with mod_ssl?

2008-03-21 Thread Ed Tred
Thanks JB, Don't suppose you know to get it to work with apache 1.3.X ?? Ed - Original Message From: "Blasdel, Jerry" <[EMAIL PROTECTED]> To: openssl-users@openssl.org Sent: Friday, March 21, 2008 9:56:45 AM Subject: RE: How do you get FIPS openssl to work with m

RE: How do you get FIPS openssl to work with mod_ssl?

2008-03-21 Thread Blasdel, Jerry
bject: How do you get FIPS openssl to work with mod_ssl? Hello, Anyone have any doc's or insight on how you get FIPS openssl to work with Apache Mod_ssl? Or do you just need to rebuild mod_ssl with FIPS openssl? Ed Be a better friend, newshound, and k

How do you get FIPS openssl to work with mod_ssl?

2008-03-21 Thread Ed Tred
Hello, Anyone have any doc's or insight on how you get FIPS openssl to work with Apache Mod_ssl? Or do you just need to rebuild mod_ssl with FIPS openssl? Ed Looking for last minute shopping

Re: Building mod_ssl and Apache 1.3.37 fail on x86_64cpuid.o relocation error]

2007-03-20 Thread jimmy
Gianluca Magalotti wrote: Marek Marcola wrote: Hello, I'm trying to build apache 1.3.37 with ssl support on a Ubuntu 6.1 running on a AMD Turion 64. I've downloaded the following packages: Apache 1.3.37 sources (apache_1.3.37.tar.gz from httpd.apache.org) Mod SSL 2.8.28 (mod_

Re: Building mod_ssl and Apache 1.3.37 fail on x86_64cpuid.o relocation error]

2007-03-20 Thread Gianluca Magalotti
Marek Marcola wrote: Hello, I'm trying to build apache 1.3.37 with ssl support on a Ubuntu 6.1 running on a AMD Turion 64. I've downloaded the following packages: Apache 1.3.37 sources (apache_1.3.37.tar.gz from httpd.apache.org) Mod SSL 2.8.28 (mod_ssl-2.8.28-1.3.37.t

Re: Building mod_ssl and Apache 1.3.37 fail on x86_64cpuid.o relocation error]

2007-03-07 Thread Gianluca Magalotti
Marek Marcola wrote: Hello, I'm trying to build apache 1.3.37 with ssl support on a Ubuntu 6.1 running on a AMD Turion 64. I've downloaded the following packages: Apache 1.3.37 sources (apache_1.3.37.tar.gz from httpd.apache.org) Mod SSL 2.8.28 (mod_ssl-2.8.28-1.3.37.t

Re: Building mod_ssl and Apache 1.3.37 fail on x86_64cpuid.o relocation error]

2007-03-07 Thread Marek Marcola
Hello, > I'm trying to build apache 1.3.37 with ssl support on a Ubuntu 6.1 > running on a AMD Turion 64. > I've downloaded the following packages: > Apache 1.3.37 sources (apache_1.3.37.tar.gz from httpd.apache.org) > Mod SSL 2.8.28 (mod_ssl-2.8.28-1.3.37.tar.gz from w

Building mod_ssl and Apache 1.3.37 fail on x86_64cpuid.o relocation error]

2007-03-07 Thread Gianluca Magalotti
I'm trying to build apache 1.3.37 with ssl support on a Ubuntu 6.1 running on a AMD Turion 64. I've downloaded the following packages: Apache 1.3.37 sources (apache_1.3.37.tar.gz from httpd.apache.org) Mod SSL 2.8.28 (mod_ssl-2.8.28-1.3.37.tar.gz from www.modssl.org) Open SSL 0.9.8

Building mod_ssl and Apache 1.3.37 fail on x86_64cpuid.o relocation error

2007-03-02 Thread Gianluca Magalotti
I'm trying to build apache 1.3.37 with ssl support on a Ubuntu 6.1 running on a AMD Turion 64. I've downloaded the following packages: Apache 1.3.37 sources (apache_1.3.37.tar.gz from httpd.apache.org) Mod SSL 2.8.28 (mod_ssl-2.8.28-1.3.37.tar.gz from www.modssl.org) Open SSL 0.9.8

SHA2 support with mod_ssl

2007-01-22 Thread Erwann ABALEA
Hello, I don't know where to submit this, either to the OpenSSL camp, or the mod_ssl camp, but as Ralf Engelschall also reads this list, I think it's the right way to go. A certificate chain with sha224withRSA can't be used for client authentication, Apache claims that the signa

Re: [Crypt::SSLeay] mod_ssl overrides settings by mod_perl applications?

2006-02-15 Thread Marko Asplund
can tell (they both came with the default Red Hat installation, I think). The Crypt::SSLeay version seems to get invoked whenever mod_ssl is disabled (since setting HTTPS_CA_FILE actually works properly in those cases), and the IO::Socket::SSL version gets invoked whenever mod_ssl is enabled.

RE: [Crypt::SSLeay] mod_ssl overrides settings by mod_perl applications?

2006-02-14 Thread Richard Eggert
lt context in all situations? By the way, to answer your first question, they're both installed properly, as far as I can tell (they both came with the default Red Hat installation, I think). The Crypt::SSLeay version seems to get invoked whenever mod_ssl is disabled (since settin

Re: [Crypt::SSLeay] mod_ssl overrides settings by mod_perl applications?

2006-02-14 Thread Marko Asplund
m for accomplishing the same thing). Could it be that perhaps loading mod_ssl is causing the load of Net::SSL to fail (symbol conflict?), resulting in it falling back to IO::Socket::SSL (which ignores HTTPS_CA_FILE)? do you have both IO::Socket::SSL (+Net::SSLeay) and Crypt::SSLeay properly install

RE: [Crypt::SSLeay] mod_ssl overrides settings by mod_perl applications?

2006-02-13 Thread Richard Eggert
e HTTPS_CA_FILE (but may provide another mechanism for accomplishing the same thing). Could it be that perhaps loading mod_ssl is causing the load of Net::SSL to fail (symbol conflict?), resulting in it falling back to IO::Socket::SSL (which ignores HTTPS_CA_FILE)? Does IO::Socket::SSL provid

RE: [Crypt::SSLeay] mod_ssl overrides settings by mod_perl applications?

2006-02-13 Thread Richard Eggert
goes away if I just disable mod_ssl and connect to the server using regular HTTP (while continuing to use HTTPS to connect to Tomcat within my code). mod_ssl on => HTTPS_CA_FILE ignored (or the code that's executed by whatever reads the variable fails for some reason). mod_ssl off =

Re: [Crypt::SSLeay] mod_ssl overrides settings by mod_perl applications?

2006-02-13 Thread Marko Asplund
Richard Eggert wrote: > ... My best guess at what's happening is that mod_ssl is preloading libssl and configuring it according to its own requirements (and mod_ssl doesn't care about the certificates of other servers), and when my code runs (later) under mod_perl, the variables I

[Crypt::SSLeay] mod_ssl overrides settings by mod_perl applications?

2006-02-13 Thread Richard Eggert
I'm having a problem getting Crypt::SSLeay to authenticate server certificates when running under mod_perl on a web server that has mod_ssl enabled.  I'm not sure if this is a bug with Crypt::SSLeay, mod_ssl, mod_perl, Net::SSLeay, or the underlying OpenSSL libraries, but I'm

RE: make: command not found , while installing mod_ssl

2006-02-01 Thread kadir iscmng
02, 2006 1:16 AM To: openssl-users@openssl.org Subject: RE: make: command not found , while installing mod_ssl All you would need are the two packages at the first two links, and you are there. You don't need the compiler, since these are pre-built installers. Once they are installed, they wi

RE: make: command not found , while installing mod_ssl

2006-02-01 Thread Scott Brown
n the docs... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of kadir iscmng Sent: Monday, January 30, 2006 11:04 PM To: openssl-users@openssl.org Subject: RE: make: command not found , while installing mod_ssl Thanks For your time .., You understand me very goo

RE: make: command not found , while installing mod_ssl

2006-01-30 Thread kadir iscmng
Thanks For your time .., You understand me very good What I m trying to do, As you know I m trying to implement of Apache and mod_ssl on Windows, To do this I m using Cygwin .. But I cant manage to implement Mod_ssl by cygwin ... I downloaded the following packages except C Compiler.. I think

RE: make: command not found , while installing mod_ssl

2006-01-30 Thread Scott Brown
JFYI--- It sounds to me like you are trying to get an implementation of Apache and mod_ssl running on Windows, and you have migrated to Cygwin for lack of luck on the task. Rather than trying to make all this stuff, might I suggest downloading and installing pre-built packages?: http

RE: make: command not found , while installing mod_ssl

2006-01-30 Thread kadir iscmng
Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kyle Hamilton Sent: Monday, January 30, 2006 12:09 PM To: openssl-users@openssl.org Subject: Re: make: command not found , while installing mod_ssl You don't have the C compiler or developer tools installed. Install

Re: make: command not found , while installing mod_ssl

2006-01-29 Thread Kyle Hamilton
You don't have the C compiler or developer tools installed. Install those, and 'make' will be installed, along with gcc. -Kyle H On 1/29/06, kadir iscmng <[EMAIL PROTECTED]> wrote: > > > Hi .. > > I m using Cygwin , While installing mod_ssl I got the

make: command not found , while installing mod_ssl

2006-01-29 Thread kadir iscmng
Hi .. I m using Cygwin , While installing mod_ssl I got the following  error .. “ [EMAIL PROTECTED] ~/mod_ssl-2.8.25-1.3.34 $ ./configure --with-apache=../apache_1.3.34 Configuring mod_ssl/2.8.25 for Apache/1.3.34  + Apache location: ../apache_1.3.34 (Version 1.3.34)  + Auxiliary

RE: how to install MOD_SSL on Windows2003 server .. plz help!

2006-01-21 Thread kadir iscmng
l.org Subject: Re: how to install MOD_SSL on Windows2003 server .. plz help! kadir iscmng wrote: >Hi , >I have download mod_ssl .. >But I cant install this package , is there any solution to install this >package on Win32/win2003 environment ? >>From my understanding, I shoul

Re: how to install MOD_SSL on Windows2003 server .. plz help!

2006-01-19 Thread William A. Rowe, Jr.
kadir iscmng wrote: I downloaded and installed SFU35SEL_EN.exe (Windows Services for UNIX) software I'll just warn you you've wandered deep, deep into uncharted waters :) The native win32 build is the only one most folks support. Some have invested effort and energy into getting 1.3 cygwin ru

RE: how to install MOD_SSL on Windows2003 server .. plz help!

2006-01-19 Thread kadir iscmng
nfigure --with-apache=../apache --with-ssl=/usr/local -- etc Afer pressing Enter .. I shows me followings .. 2.) Configuring mod_ssl/2.8.14 for Apache/1.3.27 .Configure:Error: Cannot find Apache 1.3 source tree under ../apache ./configure:Hint: Please specify location via --with-apache=DIR Memo

RE: how to install MOD_SSL on Windows2003 server .. plz help!

2006-01-18 Thread kadir iscmng
I still cant install my mod_ssl .. IF anyone exists to install MOD_SSL on windows2003 server , plz let me know how it will be done ... I think there should be a shell $ to install mod_ssl on win2003 server .. Plz help me find that shell .. or other solution for this problem thanks

Re: how to install MOD_SSL on Windows2003 server .. plz help!

2006-01-17 Thread Bernhard Froehlich
kadir iscmng wrote: Hi , I have download mod_ssl .. But I cant install this package , is there any solution to install this package on Win32/win2003 environment ? From my understanding, I should use a $ shell to compile PERL and MOD_SSL So From Where I can get this shell ? [...] http

how to install MOD_SSL on Windows2003 server .. plz help!

2006-01-17 Thread kadir iscmng
Hi , I have download mod_ssl .. But I cant install this package , is there any solution to install this package on Win32/win2003 environment ? >From my understanding, I should use a $ shell to compile PERL and MOD_SSL So From Where I can get this shell ? >From the INSTALL.32 file , it su

Building Openssl for use with mod_ssl on x86_64

2005-09-23 Thread Colin Hill
ng this, I found that the RPM fails to package the files in /lib64 and/or /usr/lib64 which is something that needs to be taken up wit the RPM maintainer. I wonder if anyone has been able to get openssl build with -fPIC for use with mod_ssl (apache13x) on Fedora Core 4 x86_64 Best Regards, Col

Dumping SSL Certificates form mod_ssl in apache

2005-07-04 Thread Pj
Hi all, I am writing a module for apache that needs to dump client certificate information from mod_ssl which ultimately uses OpenSSL... Does anyone have any idea how to apply this hook? If this is the wrong forum for this can someone suggest a mailing list? Thanks.. Pj. -- No virus found

Any more work on CRL support in mod_ssl?

2005-05-21 Thread Jason Haar
Hi there We run an internal PKI and one thing I've noticed is that HUP doesn't guarantee the CRL files get re-read. Also our DMZ Apache hosts are now using mod_chroot - and you can't HUP that as most of Apache's configuration is outside the jail - only a full restart will work :-( So I was w

mod_ssl/OpenSSL crashing Safari 1.2.4

2005-04-15 Thread Taj Morton
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi All, I'm having some problems with https and Safari. OpenSSL 0.9.7a, mod_ssl 2.8.22, Apache 1.3.33. Fedora Core 3 + cPanel. The Safari log can be found at http://www.wildgardenseed.com/Taj/Safari-log.txt Any ideas, this has been driving p

Error starting OpenSSL with mod_ssl

2005-01-07 Thread taj
Hi All, I've been struggling setting up SSL on Apache 1.3 + mod_ssl + OpenSSL. Here's the error I get while trying to startssl: [07/Jan/2005 11:25:03 30117] [info] Init: Initializing OpenSSL library [07/Jan/2005 11:25:03 30117] [info] Init: Loading certificate & private key of SS

Fwd: Tracking down mod_ssl/OpenSSL bug

2003-07-18 Thread Douglas K. Fischer
I sent this to Ralf and the mod_ssl user's to see if anyone has any ideas on this. I figured I send it here too, since I'm not sure if it's a mod_ssl issue or an OpenSSL issue. Any info would be greatly appreciated. Many thanks, Doug - Begin forwarded message - Ralf, I

RE: Upgrading to the lastest version, what happends with my Apach e-Mod_SSL?

2003-06-16 Thread John . Airey
lastest version, what happends with my > Apach e-Mod_SSL? > > > Thanks for the anwser, > > I was wondering whether with the same scenario (Redhat 6.2) > this upgrade > could affect to other services installed like SSH or not? An > if yes, is > necesary to update them

RE: Upgrading to the lastest version, what happends with my Apach e-Mod_SSL?

2003-06-12 Thread John . Airey
ed by Red Hat, so continue at your own risk. I believe that you compile openssl as shared to use it with mod_ssl. Others on the list will surely flame me if I get it wrong. I'd be surprised if you get it to compile on version 6.2 anyway. I was finding that the glibc libraries were too far out o

RE: Upgrading to the lastest version, what happends with my Apach e-Mod_SSL?

2003-06-12 Thread Francisco Javier Martinez Martinez
?, The openssl and the apache was compiled, this last with mod_ssl between other modules using APACI format (configure and make). Would you please be so kind of tell me if I had to recompile the apache once the openssl has been compiled? Thanks in advance and regards. At 10:48 12/06/2003 +0100

RE: Upgrading to the lastest version, what happends with my Apache-Mod_SSL?

2003-06-12 Thread John . Airey
need to use patent restricted code there'll be no need. If you haven't built against one of these versions, you'll either need to recompile or use the Red Hat supplied mod_ssl package. Whichever you choose is up to you. - John Airey, BSc (Jt Hons), CNA, RHCE Internet systems support

Upgrading to the lastest version, what happends with my Apache-Mod_SSL?

2003-06-12 Thread Francisco Javier Martinez Martinez
Hello. I want to upgrade the OpenSSL to the 0.9.6j version to get ride of the two last vulnerabilities found in the previous versions of OpenSSL. The system is RedHat 7.x running Apache 1.3.27 with mod_ssl, both compiled with APACI method (configure, make & make install), an my questio

Re: OpenSSL Error (Apache + mod_ssl)

2002-11-16 Thread David Schwartz
On Fri, 15 Nov 2002 22:51:05 +, Manoj Kithany wrote: >Hi: > >My Apache is NOT working.the log file shows: > >[Fri Nov 15 15:35:57 2002] [error] mod_ssl: Init: Failed to generate >temporary 512 bit RSA pr

OpenSSL Error (Apache + mod_ssl)

2002-11-15 Thread Manoj Kithany
Hi: My Apache is NOT working.the log file shows: [Fri Nov 15 15:35:57 2002] [error] mod_ssl: Init: Failed to generate temporary 512 bit RSA private key (OpenSSL library error follows) [Fri Nov 15 15:35:57 2002] [error

Re: Apache + mod_ssl (OpenSSL Error)

2002-11-15 Thread Lutz Jaenicke
On Thu, Nov 14, 2002 at 10:52:00PM +, Manoj Kithany wrote: > > Hi Experts! > > I want to INSTALL and CONFIGURE my APACHE 1.3.27 for SSL. I am using IBM > AIX box. > So, I got mod_ssl from the IBM site and installed it in following way(after > READing I

Apache + mod_ssl (OpenSSL Error)

2002-11-14 Thread Manoj Kithany
Hi Experts! I want to INSTALL and CONFIGURE my APACHE 1.3.27 for SSL. I am using IBM AIX box. So, I got mod_ssl from the IBM site and installed it in following way(after READing INSTALL file for 2 hrs;-( #pwd /opt

Apache + mod_ssl - Install/config

2002-11-14 Thread Manoj Kithany
Hi Experts! I want to INSTALL and CONFIGURE my APACHE 1.3.27 for SSL. SO, I got mod_ssl from the site and installed it using #pwd /opt/freeware/src/packages/SOURCES/mod_ssl-2.8.11-1.3.27

Problem with OpenSSL/mod_ssl

2002-11-02 Thread Christoph Votruba | vienna7
Hello, I have one problem with my box, using Apache 1.3.27/mod_ssl 2.8.11/OpenSSL 0.9.6g. I have found the following in my ssl_engine log, after that "attack" Apache stops to fulfill requests for approx. 1-2 minutes. Regarding some advices against the slapper.worm I also have disa

Problem with client authentication , apache 2 mod_ssl and java client

2002-09-24 Thread Reddy.Thirumal
shake failure exception. javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure My error log for mod_ssl shows: [Tue Sep 24 12:02:17 2002] [error] SSL handshake failed (server esb-reddy:443, client 10.70.52.170) [Tue Sep 24 12:02:17 2002] [error] SSL Library Error: 336105

Re: mod_ssl

2002-08-02 Thread Matthew Hannigan
On Fri, Aug 02, 2002 at 12:47:33AM -0700, Mark D. Baushke wrote: > If you have a 2.0.39 server, then mod_ssl is not needed. Apache 2.0.39 > already has SSL/TLS features integrated into it already. What about mm? The mm advisory came out after apache 2.0.39 came out. Does Apache2 use mm?

Re: mod_ssl

2002-08-02 Thread Mark D. Baushke
"Mark Malewski" <[EMAIL PROTECTED]> asked: > > Is there a version of mod_ssl that will run on the current Apache HTTP > Server 2.0.39? If you have a 2.0.39 server, then mod_ssl is not needed. Apache 2.0.39 already has SSL/TLS features integrated into it already. Se

mod_ssl

2002-08-01 Thread Mark Malewski
Is there a version of mod_ssl that will run on the current Apache HTTP Server 2.0.39?       -> Mark Malewski

Re: Errors by compiling Apapache with mod_ssl

2002-06-21 Thread Lutz Jaenicke
On Fri, Jun 21, 2002 at 03:02:46PM +0200, ?ernoevi? Michal wrote: > I can't compile Apache 1.3.24 with openssl-beta2, mod_ssl and mod_perl, but there is >no error with 0.96d version. Can anybody see some problems? Update to mod_ssl-2.8.9, which is adapted for OpenSSL 0.9.7 use. Yo

Errors by compiling Apapache with mod_ssl

2002-06-21 Thread Černoevič Michal
Hi, I can't compile Apache 1.3.24 with openssl-beta2, mod_ssl and mod_perl, but there is no error with 0.96d version. Can anybody see some problems? Thanks. Michal Cernoevic Linux brnl01.pvt.cz 2.4.9-31 #1 Tue Feb 26 07:11:02 EST 2002 i686 unknown gcc --version 2.96 mod_perl-1.27 m

Apache/mod_ssl PRNG not seeded question

2002-06-07 Thread Salvi Stefano
Sorry if this is a dumb question that has been answered in countless threads and FAQ's I just don't seem to have found those particular ones. I have installed openssl 0.9.6d and generated a CA and a certificate (in pem format) using CA.pl. I configured mod_ssl 2.8.8 and mod

OpenSSL with mod_ssl in Apache 2.0.35

2002-05-06 Thread MegaZone
Hello, The platform is Solaris 8. I've installed OpenSSL 0.9.6c, and then Apache 2.0.35 using ./configure --prefix=/local/webhome/apache-2.0.35 --enable-mods-shared="ssl" I can start Apache without SSL, but when I try to use SSL I receive this message: [malarkey:/local/webhome/apache/conf]458

SSL handshake timed out/ Apache/1.3.14, mod_ssl/2.7.1,OpenSSL/0.9.6 on SolariSSL handshake timed out

2002-03-28 Thread Gary W
lient 171.64.70.217) [27/Mar/2002 14:51:23 29952] [info] Seeding PRNG with 1160 bytes of entropy [27/Mar/2002 14:52:15 29952] [error] SSL handshake timed out (client x, server x:y) Using Server: Apache/1.3.14, Interface: mod_ssl/2.7.1, Library: OpenSSL/0.9.6 on Solaris 2.6. Gary -- It has yet to be p

Re: Mod_SSL Errors

2002-03-18 Thread Dr S N Henson
Michael Katz wrote: > > Trying to get SSL running for the first time. Using Apache 1.2.23, > openssl-0.9.6c, mod_ssl-2.8.7-1.3.23. > > After creating the virtual host and restarting apache I get the following > errors: > > [Mon Mar 18 09:22:56 200

Mod_SSL Errors

2002-03-18 Thread Michael Katz
Trying to get SSL running for the first time. Using Apache 1.2.23, openssl-0.9.6c, mod_ssl-2.8.7-1.3.23. After creating the virtual host and restarting apache I get the following errors: [Mon Mar 18 09:22:56 2002] [error] mod_ssl: Init: (secure.raeinternet.com:443) U nable to configure verify

Re: mod_ssl + OpenSSL + Apache

2002-02-02 Thread Keary Suska
on 2/1/02 11:23 PM, [EMAIL PROTECTED] purportedly said: > I recently have compiled Apache 1.3.22 with PHP 4.1.1, > mod_ssl-2.8.5-1.3.22, > mm-1.1.3, and OpenSSL 0.9.6c. The server starts fine with startssl, and > the I believe the httpd.conf has been setup correctly, but if I try to

mod_ssl + OpenSSL + Apache

2002-02-01 Thread cyko
I recently have compiled Apache 1.3.22 with PHP 4.1.1, mod_ssl-2.8.5-1.3.22, mm-1.1.3, and OpenSSL 0.9.6c. The server starts fine with startssl, and the I believe the httpd.conf has been setup correctly, but if I try to pull up a https://domain that is hosted on the box, I receive the following

alpha, mod_ssl, apache, _OtsRemainder32Unsigned undefined symbol

2002-01-01 Thread Kurt
Hi there, I've been trying to run apache (1.3.12) and mod_ssl (2.6.6-1.3.12). I've also tried using both OpenSSL 0.9.5a and 0.9.6c (for my purposes, both perform identically). Everything compiles fine, however when I attempt to run 'apachectl startssl' is says the followi

Re: Questions -> new compilation of mod_ssl-2.8.5

2001-11-19 Thread Keary Suska
It is probably an Apache configuration issue. If there was a problem with your mod_ssl binary, Apache probably wouldn't load. Apache doesn't do SSL automatically. You have to specify it in the configuration. Have you looked at httpd.apache.org for documentation? Keary Suska Esoter

Questions -> new compilation of mod_ssl-2.8.5

2001-11-19 Thread Cdowns
Evening, Im new to the list. I have an openssl quesion pointed to mod_ssl. I have compiled as stated by the INSTALL Doc in the mod_perl-2.8.5 /src tree. Everything seems to compile fine with no errors at all. When I issue /usr/local/apache/bin/apachectl startssl apache starts up and here is

Re: mod_ssl for Red Hat 6.2

2001-11-11 Thread edward
Jian Chen wrote: > Hi, Edward, > > I also spent a long time to try to find it, and I only found one, it is: > mod_ssl-2.6.6_1.3.12-1.i386.rpm. Do a search on www.google.com, and you will > find this: > > http://www.megaloman.com/~hany/RPM/doors2.4/mod_ssl-2.6.6_1.3.12-1.i3

Re: mod_ssl for Red Hat 6.2

2001-11-11 Thread edward
Jian Chen wrote: > Hi, Edward, > > I also spent a long time to try to find it, and I only found one, it is: > mod_ssl-2.6.6_1.3.12-1.i386.rpm. Do a search on www.google.com, and you will > find this: > > http://www.megaloman.com/~hany/RPM/doors2.4/mod_ssl-2.6.6_1.3.12-1.i3

RE: mod_ssl for Red Hat 6.2

2001-11-11 Thread Jian Chen
Hi, Edward, I also spent a long time to try to find it, and I only found one, it is: mod_ssl-2.6.6_1.3.12-1.i386.rpm. Do a search on www.google.com, and you will find this: http://www.megaloman.com/~hany/RPM/doors2.4/mod_ssl-2.6.6_1.3.12-1.i386.html So far, I do not think redhat provides a

mod_ssl for Red Hat 6.2

2001-11-11 Thread edward
Hello, Where can I get the rpm package of mod_ssl for install with Red Hat 6.2 ? Thanks, Edward. __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL

RE: Major OpenSSL/mod_ssl install problems.

2001-09-30 Thread John . Airey
suggest you look at http://www.redhat.com/errata/ and ftp://ftp.redhat.com/pub/redhat/linux/rawhide for updates to RedHat 7.1 and the latest packages for Apache and mod_ssl. You can build from source RPMS, which gives you just as much control over what you build, although it is more fiddly. I

Re: Missing symbol _llasgremu (Apache 1.3.20/mod_ssl-2.8.4/openssl-0.9.6b]

2001-07-23 Thread George Walsh
I have tried variations of the compiler (all of which have worked previously on earlier versions). I have to assume there is something irregular about this one module. I have even gone so far as to completely remove the directories for apache, openssl, mm and mod_ssl, and freshly downloading

OpenSSL error in mod_ssl.

2001-04-27 Thread Jason Aras
I do not know if this is the correct place to post this, but the only error message I see is OpenSSL errors in apache's output. here goes... [Fri Apr 27 18:06:19 2001] [error] mod_ssl: SSL handshake failed (server www.hidden.com:443, client hidden) (OpenSSL library error follows) [Fri A

RE: Apache 1.3.17 - mod_ssl.2.8.0 - openssl.0.9.6 Reverse Proxy SSL

2001-03-08 Thread De Taeye, Herman
Sorry, send one wrong file before. Best regards, Herman -Original Message- From: De Taeye, Herman Sent: Thursday, March 08, 2001 10:55 PM To: '[EMAIL PROTECTED]'; 'Openssl-Users (E-mail) Subject: RE: Apache 1.3.17 - mod_ssl.2.8.0 - openssl.0.9.6 Reverse Proxy SSL

Proxy via apache_1.3.17, open_ssl-0.9.6 and mod_ssl-2.8.0-1.3.17

2001-02-26 Thread De Taeye, Herman
erver. Is this scenario possible with appach/openssl/mod_ssl ? Is it supported out of the box, or are the add-on's required? If not are there alternate solutions? Thanks for your assistance. Herman de Taeye Unisys Belgium.

RE: Apache_1.3.17, Openssl-engine-0.9.6, mod_ssl-2.8.0-1.3.17 Sol aris 2.7,CryptoSwift accelerator board

2001-02-23 Thread lgazis
001 6:30 AM To: 'lgazis'; '[EMAIL PROTECTED]'; De Taeye, Herman; Gyutani (E-mail) Subject: RE: Apache_1.3.17, Openssl-engine-0.9.6, mod_ssl-2.8.0-1.3.17 Sol aris 2.7,CryptoSwift accelerator board Thanks for the diagnostic program. With the delivery by Sun an other program call

RE: Apache_1.3.17, Openssl-engine-0.9.6, mod_ssl-2.8.0-1.3.17 Sol aris 2.7,CryptoSwift accelerator board

2001-02-23 Thread De Taeye, Herman
Best regards, Herman De Taeye Unisys Belgium. -Original Message- From: lgazis [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 21, 2001 4:30 PM To: '[EMAIL PROTECTED]'; De Taeye, Herman Subject: RE: Apache_1.3.17, Openssl-engine-0.9.6, mod_ssl-2.8.0-1.3.17 Sol aris 2.7,CryptoS

  1   2   >