Redhat secure server - Oct 1999 - SecureServer, Minivend, Authorize.Net, and Net::SSley

Hello,

My company is putting together an online catalog. We are of course using 
the Red Hat E-Commerce, in this case version 6.

We have installed Minivend (www.minivend.com) and have it running for our 
catalog system.

We would like to use Authorize.net to handle the credit card 
transactions. I have a module for Minivend to work with Authorize.net. 
But the module says it wants the perl library Net::SSLeay. Ok, so I go 
get that also. But the Net::SSLeay says it wants something from SSLeay or 
OpenSSL. Here''s it''s message that it gives when trying to make
it:
>Please provide SSLeay-0.9.0 or OpenSSL-0.9.1c (get from
> http://www.openssl.org/ if you dont have it) installation
>directory (C-c to abort):
Now this is where I get confused. Since I had bought the RH Secure 
Server, and there are the /usr/lib/openssl.cnf file and /usr/sbin/openssl 
file I wouldn''t think I need to get the Openssl package separately. Is 
there somthing in the separate package needed just to make the 
Net::SSLeay perl module?

Also, is that legal? I would think using the openssl package would be ok 
since I did buy the Secure Server?

So does anyone else use the Red Hat ECommerce Server with MiniVend and 
Authorize.net?

Thanks for any help, it''s much appreciated.

-Bob Burton
IT Consultant
Literati Information Technology, LLC






------------------------------------------------------------
Window''s Fact: The "Shut Down" command in Windows is located
               in the "Start" menu. 
Me: What the @#%$& ?!?
------------------------------------------------------------

While parts of OpenSSL were used to implement the Secure Web Server,
Secure Web Server and/or the E-commerce Server doesn''t provide a
generic
OpenSSL solution.  You are only licensed to use SSL with the web server
itself.

---
  Preston Brown                                    Systems Engineer
  pbrown@redhat.com                                Red Hat, Inc.

On Fri, 22 Oct 1999 pbrown@redhat.com wrote:
> While parts of OpenSSL were used to implement the Secure Web Server,
> Secure Web Server and/or the E-commerce Server doesn''t provide a
generic
> OpenSSL solution.  You are only licensed to use SSL with the web server
> itself.
Hmm. Sounds like something Redhat might might want to sic their
legal/contracts people on. Clearly a lot of people would like expanded
licensing especially in the context of the E-commerce server & it seems to
be really difficult to get from RSA.

-- 
Robert G. Rittenhouse      * WHY do you run software that gets viruses?
Computer Science Dept,     * rob@cs1.mcm.edu
McMurry University         * http://cs1.mcm.edu/~rob/
Abilene TX 79697-0968

What version of apache is RHSS 2.0 using?
  Server version: Red Hat Secure/2.0 (Unix)
  Server built:   Dec 22 1998 10:55:20


How can I upgrade apache?  I need apache 1.3.6 or better

--
Brad

> > How can I upgrade apache?  I need apache 1.3.6 or better
>
> Follow the instructions that were posted a week or so ago about obtaining
> a free upgrade to Red Hat Linux Professional 6.1/Secure Web Server 3.1.
Will I be able to  rpm -U secureweb*

I can not get into an OS upgrade.

Thanks
Brad

On Mon, 1 Nov 1999, Bradley Glonka wrote:
> How can I upgrade apache?  I need apache 1.3.6 or better
Follow the instructions that were posted a week or so ago about obtaining
a free upgrade to Red Hat Linux Professional 6.1/Secure Web Server 3.1.

---
  Preston Brown                                    Systems Engineer
  pbrown@redhat.com                                Red Hat, Inc.

> > Will I be able to  rpm -U secureweb*
> >
> > I can not get into an OS upgrade.
>
> The secureweb RPMs included will only run on a 6.0-based system or later;
> the bundled operating system is 6.1 but the secureweb packages themselves
> should not have any 6.1-specific dependencies.
Sorry to be difficult.  But I find myself back at square one.  Because we
run on a 5.2 system I''ll need to upgrade apache in order to upgrade
php.
And the above statement says that I can not use the new 6.1 secureweb
rpms.

Is there a FAQ or howto on how to upgrade the apache portion of the RHSS?

Thanks
Brad

On Mon, 1 Nov 1999, Bradley Glonka wrote:
> Will I be able to  rpm -U secureweb*
>
> I can not get into an OS upgrade.
The secureweb RPMs included will only run on a 6.0-based system or later;
the bundled operating system is 6.1 but the secureweb packages themselves
should not have any 6.1-specific dependencies.

---
  Preston Brown                                    Systems Engineer
  pbrown@redhat.com                                Red Hat, Inc.

On Mon, 1 Nov 1999, Bradley Glonka wrote:
> Sorry to be difficult.  But I find myself back at square one.  Because we
> run on a 5.2 system I''ll need to upgrade apache in order to
upgrade php.
> And the above statement says that I can not use the new 6.1 secureweb
> rpms.
>
> Is there a FAQ or howto on how to upgrade the apache portion of the RHSS?
Unfortunately, because Secure Web Server 2.0 had the SSL module compiled
directly into apache, you cannot recompile / upgrade apache.

---
  Preston Brown                                    Systems Engineer
  pbrown@redhat.com                                Red Hat, Inc.

Maybe RedHat should consider:

a) bundling the required libraries with the distribution like the java dist;

b) a statically-linked binary;

c) providing binaries for all major Red Hat versions since there is nothing I
   know that would prevent it to be compiled on even 4.2 so there''s no
reason
   to require 6+ (that would esentially be three versions I think, libc5,
   glibc-2.0 and glibc-2.1).

d) providing a shared library of the ssl module so we can compile the rest of
   apache any way we want (I know this is an RSA licensing issue though).

-lc
>
> > > Will I be able to  rpm -U secureweb*
> > >
> > > I can not get into an OS upgrade.
> >
> > The secureweb RPMs included will only run on a 6.0-based system or
later;
> > the bundled operating system is 6.1 but the secureweb packages
themselves
> > should not have any 6.1-specific dependencies.
>
> Sorry to be difficult.  But I find myself back at square one.  Because we
> run on a 5.2 system I''ll need to upgrade apache in order to
upgrade php.
> And the above statement says that I can not use the new 6.1 secureweb
> rpms.
>
> Is there a FAQ or howto on how to upgrade the apache portion of the RHSS?
>
> Thanks
> Brad
>
>
> --
>   PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
> 		http://www.redhat.com http://archive.redhat.com
>          To unsubscribe: mail redhat-secure-server-request@redhat.com with
>                        "unsubscribe" as the Subject.
>

> > Sorry to be difficult.  But I find myself back at square one.  Because
we
> > run on a 5.2 system I''ll need to upgrade apache in order to
upgrade php.
> > And the above statement says that I can not use the new 6.1 secureweb
> > rpms.
> >
> > Is there a FAQ or howto on how to upgrade the apache portion of the
RHSS?
>
> Unfortunately, because Secure Web Server 2.0 had the SSL module compiled
> directly into apache, you cannot recompile / upgrade apache.
Is there any way we can get our pals(hint hint) at Red Hat to update this
version(2.0) of Secure web server.  It would be great if you guys would
continue to support the older versions for a little while instead of or in
addition to comming out with new ones.


Thanks
Brad