|
osdir.com mailing list archive |
|
Subject: Question about authentication and session cache - msg#00003List: apache.mod-ssl.userI try the construction of the server which satisfied three following conditions. 1) Directory[dir01] performs access control using SSL mutual authentication. 2) Directory[dir02] using only SSL server authentication. 3) Using SSL session cache. Therefore I made it the following configuration file. <Location "/dir01"> SSLRequireSSL SSLVerifyClient require </Directory> <Location "/dir02"> SSLRequireSSL </Location> I can't use SSL session cache when I accessed dir01 again, Because Re-negotiation occured. Next, When I set it as follows. SSL session cache became effective, but client certification became necessary for access to dir02. SSLVerifyClient require <Location "/dir01"> SSLRequireSSL SSLVerifyClient require </Directory> <Location "/dir02"> SSLRequireSSL </Location> How should I have set it to satisfy a condition? Regards Nori ______________________________________________________________________ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List modssl-users@xxxxxxxxxx Automated List Manager majordomo@xxxxxxxxxx Thread at a glance:
Previous Message by Date: click to view message previewRE: Question on SSL for Apache 1.3.9 on WindowsIve tried that but am unable to locate Apache_X-mod_ssl_Y-openssl_Z-WIN32[-i386].zip which is mentioned at step 2 -----Original Message----- From: owner-modssl-users@xxxxxxxxxx [mailto:owner-modssl-users@xxxxxxxxxx] On Behalf Of Glyn Astill Sent: Friday, 2 November 2007 8:45 AM To: modssl-users@xxxxxxxxxx Subject: Re: Question on SSL for Apache 1.3.9 on Windows get the src and compile or read: http://tud.at/programm/apache-ssl-win32-howto.php3 --- Michael Driscoll <michaeld@xxxxxxxxxx> wrote: > I am running Apache 1.3.9 on Windows 2003 SP2 and need to install > SSL. I > am new to this so I was wondering if someone can help me? I am > unable to > find a precompiled version of mod-ssl. > > > > Regards > > Michael > > ___________________________________________________________ Yahoo! Answers - Got a question? Someone out there knows the answer. Try it now. http://uk.answers.yahoo.com/ ______________________________________________________________________ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List modssl-users@xxxxxxxxxx Automated List Manager majordomo@xxxxxxxxxx ______________________________________________________________________ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List modssl-users@xxxxxxxxxx Automated List Manager majordomo@xxxxxxxxxx Next Message by Date: click to view message previewself-signed wild card certs and mozillaI would like to make a self-signed wild card cert and install the cert in my browser so that I don't get any scary warnings from the browser. I created a self-signed wild card cert as follows: # openssl req -new -x509 -nodes -out networkguild.org.crt -keyout networkguild.org.key -days 1826 -subj "/C=US/ST=MD/O=Network Guild/CN=*.networkguild.org/emailAddress=mg-webmaster@xxxxxxxxxxxxxxxx/" I then extracted the der form and stored it in a second .crt file: openssl x509 -inform PEM -outform DER -in networkguild.org.crt -out files/networkguild.org.crt I then simply pointed Mozilla at this file which is here: http://networkguild.org/sites/networkguild.org/files/networkguild.org.crt Mozilla dutifully offers to install the certificate without complaint. Unfortunately, when I access https://www.networkguild.org, it complains with the following error: Website Certified by an Unknown Authority Although it does give me the choice of accepting forever, but I shouldn't have to do this. When I click to accept here, I then get the next scary message: You have attempted to establish a connection with "networkguild.org". However, the security certificate presented belongs to "*.networkguild.org". It is possible, though unlikely, that someone may be trying to intercept your communications with this web site. However, and this was totally unexpected, IE doesn't complain at all. It found the certificate that I installed using Mozilla. Did I create my self-signed wild card cert properly? I must have done something partially correct for IE to accept it without warnings or errors. Michael Grant ______________________________________________________________________ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List modssl-users@xxxxxxxxxx Automated List Manager majordomo@xxxxxxxxxx Previous Message by Thread: click to view message previewQuestion on SSL for Apache 1.3.9 on WindowsI am running Apache 1.3.9 on Windows 2003 SP2 and need to install SSL. I am new to this so I was wondering if someone can help me? I am unable to find a precompiled version of mod-ssl. Regards Michael Next Message by Thread: click to view message previewself-signed wild card certs and mozillaI would like to make a self-signed wild card cert and install the cert in my browser so that I don't get any scary warnings from the browser. I created a self-signed wild card cert as follows: # openssl req -new -x509 -nodes -out networkguild.org.crt -keyout networkguild.org.key -days 1826 -subj "/C=US/ST=MD/O=Network Guild/CN=*.networkguild.org/emailAddress=mg-webmaster@xxxxxxxxxxxxxxxx/" I then extracted the der form and stored it in a second .crt file: openssl x509 -inform PEM -outform DER -in networkguild.org.crt -out files/networkguild.org.crt I then simply pointed Mozilla at this file which is here: http://networkguild.org/sites/networkguild.org/files/networkguild.org.crt Mozilla dutifully offers to install the certificate without complaint. Unfortunately, when I access https://www.networkguild.org, it complains with the following error: Website Certified by an Unknown Authority Although it does give me the choice of accepting forever, but I shouldn't have to do this. When I click to accept here, I then get the next scary message: You have attempted to establish a connection with "networkguild.org". However, the security certificate presented belongs to "*.networkguild.org". It is possible, though unlikely, that someone may be trying to intercept your communications with this web site. However, and this was totally unexpected, IE doesn't complain at all. It found the certificate that I installed using Mozilla. Did I create my self-signed wild card cert properly? I must have done something partially correct for IE to accept it without warnings or errors. Michael Grant ______________________________________________________________________ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List modssl-users@xxxxxxxxxx Automated List Manager majordomo@xxxxxxxxxx Loading Comments...
|
|
