RE: [us...@httpd] Encryption key size

2010-03-17 Thread Hugh E Cruickshank
From: Hugh E Cruickshank Sent: March 17, 2010 14:18 > From: Jeff Trawick Sent: March 17, 2010 13:50 > > > > Either this ("/etc/httpd/cgi-bin") is the wrong directory, or you > > need > > to also enable SSL envvars for /var/www/cgi-bin. From your envvars > > dump, the script is running from /var/w

RE: [us...@httpd] Encryption key size

2010-03-17 Thread Hugh E Cruickshank
From: Jeff Trawick Sent: March 17, 2010 13:50 > > Either this ("/etc/httpd/cgi-bin") is the wrong directory, or you need > to also enable SSL envvars for /var/www/cgi-bin. From your envvars > dump, the script is running from /var/www/cgi-bin: > > SCRIPT_FILENAME: /var/www/cgi-bin/faq Good catc

Re: [us...@httpd] Encryption key size

2010-03-17 Thread Jeff Trawick
On Wed, Mar 17, 2010 at 4:40 PM, Hugh E Cruickshank wrote: > From: Jeff Trawick Sent: March 17, 2010 13:25 >> >> (no mod_ssl-set envvars but HTTPS) >> >> Can you show the part of your config where you added >> >> SSLOptions +StdEnvVars > > From /etc/httpd/conf.d/ssl.conf: > > >  ServerName   >  S

RE: [us...@httpd] Encryption key size

2010-03-17 Thread Hugh E Cruickshank
From: Jeff Trawick Sent: March 17, 2010 13:25 > > (no mod_ssl-set envvars but HTTPS) > > Can you show the part of your config where you added > > SSLOptions +StdEnvVars >From /etc/httpd/conf.d/ssl.conf: ServerName ServerAlias ServerAlias DocumentRoot /var/www/fap ServerAdmin

Re: [us...@httpd] Encryption key size

2010-03-17 Thread Jeff Trawick
On Wed, Mar 17, 2010 at 3:00 PM, Hugh E Cruickshank wrote: > From: Jeff Trawick Sent: March 17, 2010 11:10 >> >> Exactly where are you/your software looking for it to be set? > > Here is a list of the CGI variables that I can see when using an HTTPS > connection: > > AUTH_TYPE*: > CONTENT_LENGTH*:

RE: [us...@httpd] Encryption key size

2010-03-17 Thread Hugh E Cruickshank
From: Jeff Trawick Sent: March 17, 2010 11:10 > > Exactly where are you/your software looking for it to be set? First a little background infor that may help explain things... We are a PROGRESS shop and are using their WebSpeed package. WebSpeed provides us the ability to write programs as either

Re: [us...@httpd] Encryption key size

2010-03-17 Thread Jeff Trawick
On Wed, Mar 17, 2010 at 2:08 PM, Hugh E Cruickshank wrote: > From: Hugh E Cruickshank Sent: March 17, 2010 11:00 >> From: Jeff Trawick Sent: March 17, 2010 04:10 >> > >> > See http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#ssloptions >> > (StdEnvVars).  SSL_CIPHER_USEKEYSIZE should be set. >> >

RE: [us...@httpd] Encryption key size

2010-03-17 Thread Hugh E Cruickshank
From: Hugh E Cruickshank Sent: March 17, 2010 11:00 > From: Jeff Trawick Sent: March 17, 2010 04:10 > > > > See http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#ssloptions > > (StdEnvVars). SSL_CIPHER_USEKEYSIZE should be set. > > That looks perfect. Thank you muchly. Unfortunately that did not

RE: [us...@httpd] Encryption key size

2010-03-17 Thread Hugh E Cruickshank
From: Jeff Trawick Sent: March 17, 2010 04:10 > On Tue, Mar 16, 2010 at 9:54 PM, Hugh E Cruickshank > > > > I am attempting to find a way of determining the encryption key size. > > Apparently the old environment variable was HTTPS_KEYSIZE which was > > renamed SSL_CIPHER_USEKEYSIZE. However this i

Re: [us...@httpd] Encryption key size

2010-03-17 Thread Jeff Trawick
On Tue, Mar 16, 2010 at 9:54 PM, Hugh E Cruickshank wrote: > Apache 2.2.3 on RHEL 5.4 > > Hi All: > > I am attempting to find a way of determining the encryption key size. > Apparently the old environment variable was HTTPS_KEYSIZE which was > renamed SSL_CIPHER_USEKEYSIZE. However this is only ac

[us...@httpd] Encryption key size

2010-03-16 Thread Hugh E Cruickshank
Apache 2.2.3 on RHEL 5.4 Hi All: I am attempting to find a way of determining the encryption key size. Apparently the old environment variable was HTTPS_KEYSIZE which was renamed SSL_CIPHER_USEKEYSIZE. However this is only active if you specify +CompatEnvVars on the SSLOptions directives. When