Re: [us...@httpd] SSL certificate and multiple names

2010-08-11 Thread Crypto Sal
On 08/10/2010 04:11 AM, Mark Watts wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 06/08/10 18:22, Hélène Montarou wrote: Hi, I have installed httpd-2.2.3 and I would like to generate a certificate. The machine on which it is installed has an internal name (internal.domain.com) and I

Re: [us...@httpd] Two Name-Based Virtual Hosts : Two SSL Certificates?

2010-04-24 Thread Crypto Sal
On 04/24/2010 11:07 AM, Wang, Mary Y wrote: Hi, I've two name-based virtual hosts defined (two name web sites on a single IP address). I only requested one SSL certificate for the main site. My application is running on the main site first and goes to the second site when user's click on

Re: [us...@httpd] multiple SSL on one computer - IP

2010-04-24 Thread Crypto Sal
On 04/22/2010 04:22 AM, Tom Evans wrote: More to the point, show me one major commercial deployment actually using SNI. Google. - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.ap

Re: [us...@httpd] multiple SSL on one computer - IP

2010-04-21 Thread Crypto Sal
On 04/21/2010 08:11 PM, Tom Evans wrote: On Wed, Apr 21, 2010 at 11:48 PM, Michael Ni wrote: i have a situation where I have only one computer (one IP) with 2 virtual hosts one virtual host is static.foobar.com one virtual host is www.foobar.com both have separate ssl certs registered to th

Re: [us...@httpd] Apache Doesn't See My SSLCACertificateFile

2010-04-07 Thread Crypto Sal
On 04/07/2010 10:47 AM, Carlos Mennens wrote: I have Apache running on my RHEL 5.4 web server and when someone goes to my website, they get a scary warning that tells them my secure site isn't safe because it can't be validated by a CA. I contacted my CA (Verisign) today and was told that my web

Re: [us...@httpd] SSL on Apache 2.2.14

2009-11-26 Thread Crypto Sal
On 11/25/2009 03:03 PM, John J. Consolati wrote: Just checked into it further, and the ldd might not be a problem (I think?) The LD_LIBRARY_PATH env variable is being set to a location where the /wrong/path files are. Is that a good enough solution? As far as the Apache configuration, it is

Re: [us...@httpd] cannot install a SSL certificate : any idea folks ? Going nuts over SSL..

2009-11-17 Thread Crypto Sal
On 11/17/2009 11:37 AM, sieger...@gmail.com wrote: Thanks a lot folks. I am getting some sort of handle here . The problem is If I use the original key and the certificate that they give me, the web server does not start I assume because the CN, OU, etc. does not match.I just want a SSL cert t

Re: [us...@httpd] cannot install a SSL certificate : any idea folks ? Going nuts over SSL..

2009-11-16 Thread Crypto Sal
the private key and certificate file' Thx Sam On Mon, Nov 16, 2009 at 2:27 PM, Crypto Sal <mailto:crypto@gmail.com>> wrote: On 11/16/2009 03:48 PM, sieger...@gmail.com <mailto:sieger...@gmail.com> wrote: Thank you friends. This SSL stuff drives me

Re: [us...@httpd] cannot install a SSL certificate : any idea folks ? Going nuts over SSL..

2009-11-16 Thread Crypto Sal
On 11/16/2009 03:48 PM, sieger...@gmail.com wrote: Thank you friends. This SSL stuff drives me nuts . Just to clarify, I had sent a certificate request with xyz.abc.com as the common name. I got back a certificate with *.abc.com as the common na

Re: [us...@httpd] SSL received a record that exceeded the maximum permissible length.

2009-11-13 Thread Crypto Sal
On 11/13/2009 12:29 PM, Philip Wigg wrote: NameVirtualHost 192.168.1.47:443 NameVirtualHost 192.168.1.129:443 You can't use name based virtual hosting with SSL. Try these lines out. You need to make sure you have a Listen directive for those IP/port combinations though. Cheers, Phil.

Re: [us...@httpd] Problem with cert of *443 VirtualHost

2009-10-03 Thread Crypto Sal
On 10/03/2009 07:01 AM, Marek Šabo wrote: Hi all, I would like to ask anyone if he ran in this issue before posting configurations. I configured default virtualhost with both 80 and ssl 443 listeners (works). I configured two other vhosts with rewrites from 80 to 443 (webmail and other system

Re: [us...@httpd] Is it okay to not use exportable ciphers?

2009-08-20 Thread Crypto Sal
On 08/20/2009 03:40 PM, Brian Mearns wrote: On Thu, Aug 20, 2009 at 3:24 PM, Sander Temme wrote: On Aug 20, 2009, at 3:16 PM, Brian Mearns wrote: For the sake of security, I'd like to configure my SSL/TLS server to not allow export level ciphers (using the SSLCipherSuite directive).