Redhat secure server - Jan 2000 - Apache version in SWS 3.1

Hi :)

Could anyone confirm this for me: Is the version of Apache that comes in the
SWS 3.1 package 1.3.9 ? I think so. If we are to upgrade Apache to, lets say,
1.3.10, would we be able to just -Uvh or would we have to upgrade the whole
thing (probably secureweb 3.2) ?

Thanks for any information you could share.! 

____________________________________________________________________
Get free email and a permanent address at http://www.amexmail.com/?A=1

On 12 Jan 2000, Kevin U. wrote:
> Hi :)
> 
> Could anyone confirm this for me: Is the version of Apache that comes in
the
> SWS 3.1 package 1.3.9 ? I think so. If we are to upgrade Apache to, lets
say,
> 1.3.10, would we be able to just -Uvh or would we have to upgrade the whole
> thing (probably secureweb 3.2) ?
Yes, it is 1.3.9.  There are *no guarantees* that any other apache version
will work with the secure web server''s SSL module, even with the EAPI
applied.

---
  Preston Brown                                    Systems Engineer
  pbrown@redhat.com                                Red Hat, Inc.

Hi,
I have installed the RH secure server.  I am now trying to create a test
certificate.  Sec. 3.5.1 of the install guide says to run "make
testcert".
This does not work.  I checked the makefile and there is no "testcert"
target.   The "genkey" and "certreq" targets are there and
work fine.  Does
anyone know what this target is supposed to do so that perhaps I can run the
steps by hand???

Thanks,
EKO

Hi, Erich,

You can get a test certificate from a Certificate Authority (CA). The
manual goes step by step through the process of getting a test certificate
from VeriSign (section 3.5.2 on page 30) and Thawte (section 3.5.3 on page
34), but you can get a test certificate from any CA you choose.  Getting a
test certificate from a CA is quick, should only take you a minute or two,
and doesn''t cost anything.

Hope this helps,

Carole Williams
Technical Writer
Red Hat, Inc.

On Wed, 12 Jan 2000, Erich Oliphant wrote:
> Hi,
> I have installed the RH secure server.  I am now trying to create a test
> certificate.  Sec. 3.5.1 of the install guide says to run "make
testcert".
> This does not work.  I checked the makefile and there is no
"testcert"
> target.   The "genkey" and "certreq" targets are there
and work fine.  Does
> anyone know what this target is supposed to do so that perhaps I can run
the
> steps by hand???
> 
> Thanks,
> EKO
>

On Thu, 13 Jan 2000, Carole Williams wrote:
>  Hi, Erich,
>  
>  You can get a test certificate from a Certificate Authority (CA). The
>  manual goes step by step through the process of getting a test certificate
>  from VeriSign (section 3.5.2 on page 30) and Thawte (section 3.5.3 on page
>  34), but you can get a test certificate from any CA you choose.  Getting a
>  test certificate from a CA is quick, should only take you a minute or two,
>  and doesn''t cost anything.
>  
>  Hope this helps,
>  
>  Carole Williams
>  Technical Writer
>  Red Hat, Inc.
>  
Yes, but the problem is the test certificate is only good
for two weeks, and I was inundated with 8 unwanted email
messages from Verisign.  My question is, why is the
documentation not correct, and why isn''t there an errata
published for this.  It is a major goof in the install
documentation, and to the best of my knowledge, it is only
discussed in this mailing list.

I made the decision to switch from FreeBSD to Redhat Linux,
and so far, the $189 I paid for the server and secure web
server seem like a waste of money.  If you are going to sell
something, and there is a big time glitch in the
documentation, it ought in the bug reports and searchable.
And it should be placed there quickly!

Gene Harris
Tetron Software, LLC
>  On Wed, 12 Jan 2000, Erich Oliphant wrote:
>  
>  > Hi,
>  > I have installed the RH secure server.  I am now trying to create a
test
>  > certificate.  Sec. 3.5.1 of the install guide says to run "make
testcert".
>  > This does not work.  I checked the makefile and there is no
"testcert"
>  > target.   The "genkey" and "certreq" targets are
there and work fine.  Does
>  > anyone know what this target is supposed to do so that perhaps I can
run the
>  > steps by hand???
>  > 
>  > Thanks,
>  > EKO
>  > 
>  
>  
>  
>  -- 
>    PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
>  		http://www.redhat.com http://archive.redhat.com
>           To unsubscribe: mail redhat-secure-server-request@redhat.com with
>                         "unsubscribe" as the Subject.
>  
>

An errata for secure web server 3.1 (Red Hat Professional 6.1 version)
will be issues this week which deals with the test certificate issue, as
well as addressing intermittant segfault problems in the server.

---
  Preston Brown                                    Systems Engineer
  pbrown@redhat.com                                Red Hat, Inc.

I found the new rpms at updates.redhat.rpm, but the
secureweb-3.1-2.i386.rpm is corrupt or something. Is the rpm bad, or do
you have to do something special to use it. Is it a rhmask file or
something?

  What''s the deal. The other rpms appear fine.

thanks
Kelley


On Thu, 13 Jan 2000 pbrown@redhat.com wrote:
> An errata for secure web server 3.1 (Red Hat Professional 6.1 version)
> will be issues this week which deals with the test certificate issue, as
> well as addressing intermittant segfault problems in the server.
> 
> ---
>   Preston Brown                                    Systems Engineer
>   pbrown@redhat.com                                Red Hat, Inc. 
> 
> 
> -- 
>   PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
> 		http://www.redhat.com http://archive.redhat.com
>          To unsubscribe: mail redhat-secure-server-request@redhat.com with 
>                        "unsubscribe" as the Subject.
>

On Sun, 16 Jan 2000 apache@tellico.net wrote:
>   I found the new rpms at updates.redhat.rpm, but the
> secureweb-3.1-2.i386.rpm is corrupt or something. Is the rpm bad, or do
> you have to do something special to use it. Is it a rhmask file or
> something?
Since they don''t give away secureweb for free, rhmask is probably a
good
bet.

----------------------------------------------------------------------
 Jon Lewis *jlewis@lewis.org*|  Spammers will be winnuked or 
 System Administrator        |  nestea''d...whatever it takes
 Atlantic Net                |  to get the job done.
_________http://www.lewis.org/~jlewis/pgp for PGP public key__________

Yep, that was the case, it was an rhmask file. Normally they append the
filename with rhmask, don''t they?

  Irregardless, that was the case.

later
Kelley


On Sun, 16 Jan 2000 jlewis@lewis.org wrote:
> On Sun, 16 Jan 2000 apache@tellico.net wrote:
> 
> >   I found the new rpms at updates.redhat.rpm, but the
> > secureweb-3.1-2.i386.rpm is corrupt or something. Is the rpm bad, or
do
> > you have to do something special to use it. Is it a rhmask file or
> > something?
> 
> Since they don''t give away secureweb for free, rhmask is probably
a good
> bet.
> 
> ----------------------------------------------------------------------
>  Jon Lewis *jlewis@lewis.org*|  Spammers will be winnuked or 
>  System Administrator        |  nestea''d...whatever it takes
>  Atlantic Net                |  to get the job done.
> _________http://www.lewis.org/~jlewis/pgp for PGP public key__________
> 
> 
> -- 
>   PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
> 		http://www.redhat.com http://archive.redhat.com
>          To unsubscribe: mail redhat-secure-server-request@redhat.com with 
>                        "unsubscribe" as the Subject.
>

On Sun, 16 Jan 2000 apache@tellico.net wrote:
> 
>   I found the new rpms at updates.redhat.rpm, but the
> secureweb-3.1-2.i386.rpm is corrupt or something. Is the rpm bad, or do
> you have to do something special to use it. Is it a rhmask file or
> something?
It is an rhmask, and if it is not marked as such, I will be fixing it
posthaste.

---
  Preston Brown                                    Systems Engineer
  pbrown@redhat.com                                Red Hat, Inc.