answer my own question for the search engines.
Yes it works fine. apache-sslctl blacklists mod_ssl and doesn't allow
it to be added to /etc/apache-ssl/modules.conf via the apache-modconf
mechanism (lame). Copy modules.conf to modules.conf.custom. change the
Include in your httpd.conf t
I'm using the apache 1.3 packages. How can I use apache-modconf to
disable apache_ssl and enable mod_ssl in the apache-ssl package? Will
it work? I noticed that when installing the libapache-mod-ssl package
that it automatically updated my /etc/apache/modules.conf
and /etc/apache
On 15.03.2004 22:06 Ralph Crongeyer wrote:
"/usr/sbin/modules-config apache mod_ssl enable"
...
and restart apache with no errors, but netstat -a -p shows apache
listening on port 80 only?
What am I doing worng?
Add 'Listen 443' to your httpd.conf and restart Apache.
--
T
Hi all,
I'm having trouble getting mod_ssl working. I have the module loaded: I did
"/usr/sbin/modules-config apache mod_ssl enable"
then added this to the bottom of my /etc/apache/httpd.conf file:
SSLEngine on
SSLCertificateFile /etc/apache/ssl.crt/s
Hi,
I'm trying to use apache-SSL with libssl AND mod_ssl :
It works fine with only libssl but I'd want also mod_ssl
I've added in the httpd.conf :
LoadModule ssl_module /usr/lib/apache/1.3/mod_ssl.so
AddModule mod_ssl.c
and then all the SSLEngine paramet
On Wednesday 19 March 2003 11:49, Haim Ashkenazi wrote:
> If I understand corectly, apache-perl is staticaly compiled with mod_perl
> (that is it's the same as installing apache+mod_perl). so how come I can
> install both? the same with apache-ssl.
There are some known problems with the mod_perl m
gt; compiled in when you run apache-ssl. The apache issue is further
> complicated in that apache-ssl and libapache-mod-ssl _are not the same
> code_ ... they are two means to an end. See
> http://www.apache-ssl.org/#mod_ssl for an explanation.
>
thanx, at least I'm starting t
uff is
compiled in when you run apache-ssl. The apache issue is further
complicated in that apache-ssl and libapache-mod-ssl _are not the same
code_ ... they are two means to an end. See
http://www.apache-ssl.org/#mod_ssl for an explanation.
For most people it somes down to personal preference.
Hi
If I understand corectly, apache-perl is staticaly compiled with mod_perl (that is
it's the same as installing apache+mod_perl). so how come I can install both? the same
with apache-ssl.
Am I missing something here?
Bye
--
Haim
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subj
Hi,
I use apache 1.3.27 with mod_ssl-2.8.12-1.3.27 (both from original source, not
debian packages) with this in httpd.conf:
SSLSessionCache dbm:/usr/local/apache/logs/ssl_scache
and I get this error in ssl-engine-log for every https request:
[14/Mar/2003 13:06:23 29826] [error] Cannot
Will Trillich wrote:
>
> but the odd part is, they didn't just come in from the top
> (first uri was not "/"). it reflects either a) the result of a
> prior drill-down or 2) an exact echo of my previous request, but
> somehow coming from outside in the internet.
>
You may have already done th
On Thu, Feb 20, 2003 at 12:45:59PM -0800, Vineet Kumar wrote:
> Is there an easy way to decode a snarfed SSL session given
> that he has the server's private key? Theoretically it's
> possible, but I wonder if any of the popular sniffing/IDS
> tools facilitate it.
but the odd part is, they didn't
Vineet Kumar said:
>
> Is there an easy way to decode a snarfed SSL session given that he has the
> server's private key? Theoretically it's possible, but I wonder if any of
> the popular sniffing/IDS tools facilitate it.
I believe dsniff can do this ... ??
nate
--
To UNSUBSCRIBE, email to
* sean finney ([EMAIL PROTECTED]) [030220 07:00]:
> you could find out for sure by running the packet sniffer of your
> choice and dumping the whole conversation to a log, and then look
> at what kind of data the client was sending. oh wait... https...
> nevermind. there's probably a way to turn
On Thu, Feb 20, 2003 at 01:56:40AM -0600, Will Trillich wrote:
> what does this mean? are there black hats involved? (maybe even
> a gray fedora?)
i'd guess one of two things:
a - someone else has messed up a dns entry or href on a webpage
b - this computer is trying to test for exploitable weakn
i've got apache offering ssl on port :443, but haven't published
that fact anywhere -- yet i've gotten a hit from mit.edu, and
it's not even a from-the-top entry?
i've got apache-perl going, and mod_ssl is even cooperating.
so, all is wonderful in linux-land...
the sec
> On Fri, Dec 13, 2002 at 11:30:40PM +0200, Jokke Heikkilä wrote:
>> Should I add some other source for apt-get?
> or details. Thanks ]
>
> Um, what do you have in your sources.list now?
>
> On my stable machine, libapache-mod-ssl is available and installed.
> sources.list looks like this:
>
>
On Fri, Dec 13, 2002 at 11:30:40PM +0200, Jokke Heikkilä wrote:
>
>
> >
> > Or, just 'apt-get install libapache-mod-ssl' ... mod_ssl will be added
> > to your Apache config and you will be able to tweak it to your heart's
> > content.
> >
On Fri, Dec 13, 2002 at 01:53:52PM +0200, Jokke Heikkilä wrote:
> > Unless you have a special need to compile mod_ssl in a non-standard
> > way, I think you can avoid building it altogether. Instead, you can
> > just install the "apache-ssl" debian package, which alrea
Jokke Heikkilä wrote:
Or, just 'apt-get install libapache-mod-ssl' ... mod_ssl will be added
to your Apache config and you will be able to tweak it to your heart's
content.
This would be ideal, but I can't find mod_ssl package under dselect and
'apt-get install li
>
> Or, just 'apt-get install libapache-mod-ssl' ... mod_ssl will be added
> to your Apache config and you will be able to tweak it to your heart's
> content.
>
This would be ideal, but I can't find mod_ssl package under dselect and
'apt-get install l
On Fri, Dec 13, 2002 at 06:42:29AM -0500, Lloyd Zusman wrote:
> "Jokke Heikkilä" <[EMAIL PROTECTED]> writes:
>
> > I've installed Woody and wanted to add mod_ssl to my apache conf. I
> > downloaded the tarball from modssl.org and unpacked. When installing
> Unless you have a special need to compile mod_ssl in a non-standard
> way, I think you can avoid building it altogether. Instead, you can
> just install the "apache-ssl" debian package, which already has SSL
> support built in. It provides a separate "apache-ssl"
"Jokke Heikkilä" <[EMAIL PROTECTED]> writes:
> I've installed Woody and wanted to add mod_ssl to my apache conf. I
> downloaded the tarball from modssl.org and unpacked. When installing the
> mod, the installer asks for the path for my Apache source tree. Where is
&
I've installed Woody and wanted to add mod_ssl to my apache conf. I
downloaded the tarball from modssl.org and unpacked. When installing the
mod, the installer asks for the path for my Apache source tree. Where is
it? I sort of thought that it would be /usr/lib/apache/src , but there's
ed to
configure a basic VirtualHost for port 80:
ServerName my.host.com
DocumentRoot /var/www/html
CustomLog /var/log/access.log combined
you get the idea..
On Sun, 2002-10-06 at 11:02, Marc Dreher wrote:
> Hi,
>
> I am stuck here. I used apt-get to install apache and mod_ssl.
Hi,
I am stuck here. I used apt-get to install apache and mod_ssl. Then I edited
httpd.conf to run one server serving http on port 80 and https on port 443
on a virtual host. The problem is, when I start apache I only get http, no
https. But when I use "Port 443" instead of Port 80 in
Hi,
I am stuck here. I used apt-get to install apache and mod_ssl. Then I edited
httpd.conf to run one server serving http on port 80 and https on port 443
via a virtual host. The problem is, when I start apache I only get http, no
https. But when I use "Port 443" instead of
In article <20020909110403.GA13708@harvey>,
Keith Robinson <[EMAIL PROTECTED]> wrote:
>If anybody could point me in the right direction with the following
>problem, it would be most appreciated :)
>
>I'm trying to get mod_ssl to work with apache, but so far to no a
On Mon, 9 Sep 2002 12:04:03 +0100
Keith Robinson <[EMAIL PROTECTED]> wrote:
>
> LoadModule ssl_module /usr/lib/apache/1.3/mod_ssl.so
>
> and then added the following lines:
>
>
>
>
> ServerAdmin [EMAIL PROTECTED]
> DocumentRoot /var/www/site.virtual/htdocs/mystats
> ServerName www.webwardro
Hi all,
If anybody could point me in the right direction with the following problem, it would
be most appreciated :)
I'm trying to get mod_ssl to work with apache, but so far to no avail. I've installed
mod_ssl (through apt), generated server.crt and server.key and signed the c
I can't seem to get mod_ssl working and I don't see
why. I'm using apache 1.2.6 and libapache-mod-ssl
2.8.7. I modified httpd.conf per instructions,
including adding the cut-and-paste info. I then ran
mod-ssl-makecert as root in the /etc/apache directory.
I got some errors when I
On Wed, 2002-04-17 at 15:51, David Bell wrote:
> If you didn't create the certificate with mod-ssl-makecert, I'm not sure how
> to
> remove the password
try
openssl rsa -in current_key_name -out new_key_name
enter the password
new_key_name has no password
hope that helps
-Mark Roach
--
Yes, if you created the site certificate with mod-ssl-makecert. During
the process of creating the certificate, there's an option to add a
passphrase. If you don't want to have to enter a password at each
apache startup, then you don't want to add this passphrase. If you
didn't create the certif
Is there anyway to have Apache STOP asking for the password when
restarting the server?
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
I got mod_ssl working with Apache and woody. Thanks to the list for
all the help...
Is there anyway to have the respond to only
ONE domain name? If I have 5 domains using NameVirtualHost for
standard HTTP, is there any way to use only one specific domain for
HTTPS only?
--
To UNSUBSCRIBE
> If I want to use the mod_ssl
> [http://packages.debian.org/testing/non-us/libapache-mod-ssl.html] do
> I have to recompile apache?
No. You need to introduce the line
LoadModule ssl_module /usr/lib/apache/1.3/mod_ssl.so
into the DSO list in /etc/apache/http.conf (or maybe th
If I want to use the mod_ssl
[http://packages.debian.org/testing/non-us/libapache-mod-ssl.html] do
I have to recompile apache?
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Does anyone have a mod_ssl/apache/woody how-to or faq?
On Sun, Apr 07, 2002 at 12:32:19PM +1000, Rob Weir wrote:
> On Sat, Apr 06, 2002 at 05:14:07PM +0200, Oliver Siegmar wrote:
> > Hello All,
> >
> > I can't find the package containing mod_ssl to use it with ap
On Sat, Apr 06, 2002 at 05:14:07PM +0200, Oliver Siegmar wrote:
> Hello All,
>
> I can't find the package containing mod_ssl to use it with apache. I'm
> using woody..
libapache-mod-ssl
-rob
--
I did not vote for the Australian government.
pgpSggGIw2snU.pgp
Description: PGP signature
Hello All,
I can't find the package containing mod_ssl to use it with apache. I'm
using woody..
Can you help me?
Bye,
Oliver
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
In article <[EMAIL PROTECTED]>,
Matthew Sackman <[EMAIL PROTECTED]> wrote:
>With something as important as apache, I'd *alway* suggest compiling it from
>source. Along with OpenSSL, and mod_ssl, then follow the instructions, and it
>should work fine.
Well, we run quit
On Tue, Jul 10, 2001 at 11:58:50AM -0700, der.hans wrote:
> moin, moin,
>
> which should one use and why?
>
> At a consulting gig with another dist the web developers suggested mod_ssl
> was what got approval from the apache group.
>
> Does anyone have any input as
moin, moin,
which should one use and why?
At a consulting gig with another dist the web developers suggested mod_ssl
was what got approval from the apache group.
Does anyone have any input as to which is better? Does debian prefer one or
the other?
I need both ports 80 and 443. Initially the
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
I installed libapache-mod-ssl on an up-to-date unstable system this
morning. I followed the instructions in libapache-mod-ssl-doc (I
think), but mod-ssl won't load.
I get this error message:
- ---
Syntax error on line 242 of /etc/apache/httpd.conf:
Hi all!
i want to use froms with mod_ssl (Client authentication via certificates),
but as soon as i call a POST Method, the server returns an Error:
Method Not Allowed
The requested method POST is not allowed for the URL
/admin/mysql/tbl_create.php.
can anybody help?
tia
Erich Birngruber
Hi there,
someone recently told me that the apache-ssl is "obsolete," and that you
should use apache plus mod-ssl instead.
Is this true, and why is this so?
Thanks,
Ralf
--
Sign the EU petition against SPAM: L I N U X .~.
http://www.politik-digital.de/spam/The Choice
On Sun, 4 Jun 2000, Dr. Orange wrote:
>
> I installed mod_ssl and
> it's dependencies through dselect. After that, without changing anything I
>
> started apache with /usr/sbin/apache -DSSL. But https://mylocalhost.com
>
> would not accept th
I'm sorry, please disregard that previous email, I figured out based on
the other replay to your post that I was missing something (the mod_ssl
libraries, duh...) so I fixed the problem. Thanks anyway.
-Aaron
On Sun, Jun 04, 2000 at 05:54:57PM -0400, Dr. Orange wrote:
>
> I installed mod_ssl andit's dependencies through dselect.
> After that, without changing anything I started apache with
> /usr/sbin/apache -DSSL. But https://mylocalhost.com would not
> acce
I installed mod_ssl and
it's dependencies through dselect. After that, without changing anything I
started apache with /usr/sbin/apache -DSSL. But https://mylocalhost.com
would not accept the connection. I then tried /usr/sbin/apachectl startssl
but it to
In article <[EMAIL PROTECTED]>,
Jaume Teixi <[EMAIL PROTECTED]> wrote:
>Once time I've the package mod_ssl and openssl, where can I find the
>step by step procedure for build ssl on my apache ?
Simply install the latest apache debian package and the latest
libapache
On Thu, 30 Mar 2000, Jaume Teixi wrote:
> Once time I've the package mod_ssl and openssl, where can I find the
> step by step procedure for build ssl on my apache ?
www.modssl.org has a nice documentation
--
[-]
kazmer at any cost !
Once time I've the package mod_ssl and openssl, where can I find the
step by step procedure for build ssl on my apache ?
thanks
begin:vcard
n:Teixi;Jaume
tel;fax:972 46 31 14
tel;work:972 46 30 50
x-mozilla-html:TRUE
url:http://www.6tems.com
org:6TEMS;Ducform, SA
adr:;;Pla de l'Estany,
If they choose to keep the certificate they won't be
> bothered again. I think the mod_ssl docs have an example on how to
> generate the certificate.
maybe I didn't make myself clear: what I'm looking for is a tool to
make a certificate for browser client so that only certifi
d again. I think the mod_ssl docs have an
example on
how to generate the certificate.
Mario Olimpio de Menezes wrote:
> Hi,
>
> Do you know how can I generate a certificate for a client? Is this
> possible with the mod-ssldebian package? Is there a way to generate such
> cert
On Wed, Jan 12, 2000 at 04:31:21PM -0200, Mario Olimpio de Menezes wrote:
>
> Do you know how can I generate a certificate for a client? Is this
> possible with the mod-ssldebian package? Is there a way to generate such
> certificate without recurring to VerignSign or other CA?
/usr/sbin/m
Hi,
Do you know how can I generate a certificate for a client? Is this
possible with the mod-ssldebian package? Is there a way to generate such
certificate without recurring to VerignSign or other CA?
This is intended for a private system (Intranet via Internet).
I'm usin
On Thu, 30 Dec 1999, aphro wrote:
> On Thu, 30 Dec 1999, Mario Olimpio de Menezes wrote:
>
> mario >If I do a full stop and then a start, everything is ok! I think that
> the
> mario >reload isn't working well with mod_ssl.
>
> is apache-ssl the same as apa
On Thu, 30 Dec 1999, Mario Olimpio de Menezes wrote:
mario >If I do a full stop and then a start, everything is ok! I think that the
mario >reload isn't working well with mod_ssl.
is apache-ssl the same as apache+mod_ssl ? i dont like to use dynamic
modules i compile everything stat
On Thu, 30 Dec 1999, Mario Olimpio de Menezes wrote:
mario >but the port 443 is opened at the firewall. the relevants lines are:
i coulda swore that you said the firewall was blocking connections ..so
you can telnet to 443 on that ip and connect..it doesnt timeout.. the
firewall looks ok to me im
ime I did a graceful restart in apache
after changing some config files, the child handling with ssl would seg
fault.
If I do a full stop and then a start, everything is ok! I think that the
reload isn't working well with mod_ssl.
btw the problem was occuring with internal clients too. only w
On Thu, 30 Dec 1999, aphro wrote:
> On Thu, 30 Dec 1999, Mario Olimpio de Menezes wrote:
>
> mario >looking at the apache logs I found that the child server is seg
> faulting.
> mario >it's intriguing why this happens only with external clients :-|
>
> its possible the firewall blocking the dat
On Thu, 30 Dec 1999, Mario Olimpio de Menezes wrote:
mario >looking at the apache logs I found that the child server is seg faulting.
mario >it's intriguing why this happens only with external clients :-|
its possible the firewall blocking the data causes the child server to
segfault..i would thi
On Wed, 29 Dec 1999, aphro wrote:
> best thing to do (what id do) is enable kernel firewall logging and turn
> on logging for your firewall, then examine the logs when you try to
> connect and see what is going on ..
looking at the apache logs I found that the child server is seg faulting.
it's i
ve set a site for webmail using apache+mod_ssl under a firewall.
mario > The proper port is opened in the firewall (443 and 80) but every
mario >time I try to connect from an outside machine I get a network error.
mario > If I clear the firewall rules, everything is ok!
mario > btw, all
Hi,
I've set a site for webmail using apache+mod_ssl under a firewall.
The proper port is opened in the firewall (443 and 80) but every
time I try to connect from an outside machine I get a network error.
If I clear the firewall rules, everything is ok!
btw
Hi!
Can anybody give me some advice/hints/personal opinion about which
SSL http server to choose?
Thank you!
-- p.
On Wed, Sep 16, 1998 at 05:32:49PM +0100, Oliver Thuns wrote:
> >> No but there is apache-ssl, wich is also a debian package (in hamm), find
> >> it at www.debian.org -> packages -> search I think it's in the non-US
> >> section
> >
> >Does anyone know why it's such an old version of Apache?
>
>> Is there a Apache mod_ssl package under development?
>
>No but there is apache-ssl, wich is also a debian package (in hamm), find
>it at www.debian.org -> packages -> search I think it's in the non-US
>section
I know, but I'm looking for mod_ssl :-)
>> No but there is apache-ssl, wich is also a debian package (in hamm), find
>> it at www.debian.org -> packages -> search I think it's in the non-US
>> section
>
>Does anyone know why it's such an old version of Apache?
There should be 1.3.1/SSL in unstable (slink).
On Wed, Sep 16, 1998 at 04:11:28PM +0200, Ulisses Alonso Camaro wrote:
> On Wed, 16 Sep 1998, Oliver Thuns wrote:
> > Is there a Apache mod_ssl package under development?
>
> No but there is apache-ssl, wich is also a debian package (in hamm), find
> it at www.debian.org -&g
-BEGIN PGP SIGNED MESSAGE-
On Wed, 16 Sep 1998, Oliver Thuns wrote:
> Hello!
>
> Is there a Apache mod_ssl package under development?
No but there is apache-ssl, wich is also a debian package (in hamm), find
it at www.debian.org -> packages -> search I think it&
Hello!
Is there a Apache mod_ssl package under development?
74 matches
Mail list logo
