New MS patch problems with Apache & SSL on NetWare web serve

This week our users began to experience problems accessing our Intranet based on a NetWare 6.5 box running Apache and using a Verisign SSL certificate. IE would say it was connecting but you would never get there. Firefox could get to the server but I had similar problems with Safari & Chrome.
I discovered that the MS security patch KB980436 had modified some portion of IE and was causing the problem. Uninstalling that patch put us back to where we could once again access our Intranet.
This seems to have something to do with how IE accesses using the SSL 443 port. When, internally, I accessed this same site using http instead of https it worked perfectly.
This patch was applied to Win XP and Win 7 with the same bad results.
If there is a more appropriate place for this post please move it there.

Have you tried the registry settings to go back to compatible mode? The
settings are listed in the MS KB article.
"boomchuck" <[email protected]> wrote in message
news:[email protected]..
>
> This week our users began to experience problems accessing our Intranet
> based on a NetWare 6.5 box running Apache and using a Verisign SSL
> certificate. IE would say it was connecting but you would never get
> there. Firefox could get to the server but I had similar problems with
> Safari & Chrome.
>
> I discovered that the MS security patch KB980436 had modified some
> portion of IE and was causing the problem. Uninstalling that patch put
> us back to where we could once again access our Intranet.
>
> This seems to have something to do with how IE accesses using the SSL
> 443 port. When, internally, I accessed this same site using http
> instead of https it worked perfectly.
>
> This patch was applied to Win XP and Win 7 with the same bad results.
>
> If there is a more appropriate place for this post please move it
> there.
>
>
> --
> boomchuck
> ------------------------------------------------------------------------
> boomchuck's Profile: http://forums.novell.com/member.php?userid=28653
> View this thread: http://forums.novell.com/showthread.php?t=418742
>

Similar Messages

Problem with the Installation of Mobile Web Server...

I have a N95. I have been trying to install Mobile Web Server on it. The installation fisnishes but the icons are all separeted and there is no only one icon for the program (MWS, MWSChat, MWSBlog, MWS).
Reading the manual of the software I realized that something should run after the installation but nothing is
executed. I tried to install it on memory card, main memory
>with no success. Is there any bug reported about it?

Hello, this is a known problem with new 1.2 release. Please refer to my blog post and stay tuned for a fix.
http://blogs.s60.com/mws/2008/01/mobile_web_server_new_release.html

Is there a problem with Allen Bradley PLC and web server export options

It says this object will not run in a client version. I have a development version and a client version. Maybe I'm not understanding the error message. Lookout 5.0

The process you upload to a web server needs to be a poor client process. It means you have to create a client process without the PLC driver and a server process with the PLC driver. You will just upload the client process and the server process will stay on the Lookout Server machine.
There are several links on the support site those explain the prefered client-server architecture to choose for a Lookout application.
Building a Sample Server-Client System in Lookout
Converting a Lookout Server Process Into a Client
://ae.natinst.com/operations/ae/public.nsf/fca7838c4500dc10862567a100753500/4c13547ceb6354a886256b80...
Hope this is a good starting point for your Lookout application design.
Roland

Right problem with apache and tomcat

Bonjour;
I use a user login "apache" to stop/start Apache and tomcat. Because never launching apache et tomcat as root.
But I have the following problem with apache (file error.log) :
[Tue May 6 17:26:22 2003] [error] Connection "warpConnection" cannot connect
[Tue May 6 17:26:22 2003] [error] Cannot open connection "warpConnection"
[Tue May 6 17:27:01 2003] [error] Re-Trying to deploy connections
As root the error msg does'nt exists (lost)
Best regards;
A+;

Run it from the shell to see whats wrong:
# httpd

I originally bought an iMac 17 which crashed. Have now bought a second-hand iMac20. This has less preinstalled software, no iDVD, no iPhoto, Garageband, no iWeb. Can I use my original discs to restore these options to my new computer? Problems with this?

I originally bought an iMac 17 which crashed. Have now bought a second-hand iMac20. This has less preinstalled software, no iDVD, no iPhoto, Garageband, no iWeb. Can I use my original discs to restore these options to my new computer? Problems with this?

You might be able to depending on the age of the disc and the model of your newer used iMac. Only way to tell is to pop in the DVD and see if you can install the iLife programs.

Problem with pdf display downloaded from application server

Hi all,
I have a problem with displaying pdf downloaded from application server (saved in BINARY MODE).
I am getting the pdf output of adobe form in FPFORMOUTPUT-PDF as rawstring back to my program and then converting that rawstring into binary form using the function module SCMS_BINARY_TO_STRING.
Now, when I export the data to presentation server directly using cl_gui_frontend_services=>gui_download, the pdf is downloaded properly.
However, when I save the data to application server file by looping at the internal table obtained from SCMS_XSTRING_TO_BINARY and using TRANSFER, and subsequently downloading the file in "unconverted format" from AL11 to my desktop, I am getting a "blank" pdf file (with the same number of pages as the one downloaded using gui_download).
I have tried different encodings during download but in those cases i get corrupted pdf message. only the default option of INTIAL value seems to work.
I am forced to believe that there is a problem in my code which saves the data to app server but I cant find any solution that is logical. Any solution to this would be greatly appreciated.
Regards,
Sasi
Edited by: Sasi Upadrasta on Sep 29, 2010 7:55 PM

used a program to read the file from appl server and then downloading it to desktop.

Problems with parameter button in Crystal Report Server 2008

Dear all,
I have problems with parameter button in Crystal Report Server 2008.
when I created some parameters and groups in Crystal Report 2008, they showed both parameters in 'Parameter button' and group in 'Group button' on the left, so I can choose or type without clicking 'Refresh button' But when I added it to Crystal Report Server 2008 and I click parameter button , it doesn't show any parameter. Only click refresh button to choose them. On the other hand, for 'Group Tree' is ok. When go to Default Setting-> Parameter, all parameters are in 'Unused parameter' First time I think I had problems with my installation, but when I reinstalled it again, it was like before.
Could any one help me with this?
I appreciate looking forward to your reply
Ketya

Try posting your questionin the correct forum, this is for SAP Business One, not Crystal reports Server

Safari Crash - Problem with doodle (planer) app - doodle web links cause safari to crash with a very strange message "Error - Please make sure Safari is not used in Private Modus" (translated from german) No Privat Modus buttom in ios 7 safari settings!

Safari Crash - Problem with doodle (planer) app - doodle web links cause safari to crash with a very strange message "Error - Please make sure Safari is not used in Private Modus" (translated from german) No Privat Modus buttom in ios 7 safari settings! Works fine with an older Safari Version. Web link, call doodle app. You could see the website in the backround working but safari crashes after clicking on the error window. Any suggestions?

Turn off Private Browsing.
Tap "Private" on Safari Screen to disable Private Browsing. When top of screen is white, Private Browsing is off.

Time Machine - Problem with establishing a connection to the server

Using LionMac OS X Version 10.7 and when attempting to setup Time Machine to make backupto my ReadyNas Duo, the setup fails and I receive the following message(translated from Danish):
“There wasa problem with establishing a connection to the server ”SERVERNAME”.
The versionof the server that you attempt to establish connection to, is not supported.Contact the system administrator to solve the problem.”
Any ideasfor a solution?

Please follow these instructions:
Lion: Connecting to legacy (pre-Lion) AFP services - and Mac OS X (server):
https://discussions.apple.com/thread/3258472

EDSPermissionError(-14120) problems with LDAP, SSL and Directory Utility

Hello everyone,
Apologies for the repost but I think I may have made a mistake by posting this originally in the Installation, Setup and Migration forum instead of the Open Directory forum. At least I think that may be why I didn't receive any responses.
Anyway, I've been trying to get my head around Open Directory and SSL as they are implemented in Mac OS X Server 10.5 Leopard, and have been having a few issues. I would like to set up a secure internal infrastructure based around a local Certificate Authority that signs certificates for other internal services like LDAP, email, websites, etc.
I only have one Mac OS X Server and it is kind of a small office so I have gone against best practice and simply made it a CA (through Keychain Utility). I then generated a self-signed SSL certificate through Server Admin, and used the "Generate CSR" option to create a Certificate Signing Request. This went fine, but I did have some problems signing it with the CA, because the server documentation suggested that once I signed it it would pop open a Mail message containing the ASCII version of the signed certificate - it did not, and it took me a loooong time to realize that I could simply export the copy of the signed certificate it put in my local Keychain on the server as a PEM file and paste this back into the "Add Signed or Renewed Certificate from Certificate Authority" dialog box in Server Admin. Hopefully this can be fixed in a forthcoming patch, but I thought I would mention it here in case anyone else is stuck on this issue.
Once I did this I was able to use this certificate in the web server on the same machine and sure enough I was able to connect to it with with clients who had installed the CA certificate in their system Keychains without getting any error messages - very cool.
However, I haven't had quite as much luck getting it going with LDAP/Open Directory. I installed the certificate there as well, but have run into a number of problems. At first I could not get clients (also running 10.5.2) to talk to the server at all over SSL, receiving an error in Directory Utility that the server did not support SSL. I eventually discovered that the problem seemed to lie in the fact that the OpenLDAP implementation on Leopard is not tied in with the system Keychain, necessitating some command-line voodoo to install a copy of the CA cert in a local directory and point /etc/openldap/ldap.conf at it, as documented here: http://www.afp548.com/article.php?story=20071203011158936
This allowed me to do an ldapsearch command over SSL, and seemingly turn SSL on on clients that were previously bound to the directory, and additionally allowed me to run Directory Utility on new clients and put in the server name with the SSL box checked and begin to go through the process of binding. Once this seemed to work, I turned off all plaintext LDAP communication and locked down the service by checking the "Enable authenticated directory binding," "Require authenticated binding," "Disable clear text passwords," and "Encrypt all packets" options in Server Admin. However, I am now running into a new problem, specifically that I cannot successfully bind a local account to a directory account over SSL.
Here's what happens:
1) I run Directory Utility, (or it auto-runs) and add a server, typing in the DNS name and clicking the SSL box.
2) I get asked to authenticate, and type in user credentials, including computer name (incidentally, should this be a FQDN or just a hostname?)
3) Provided I put admin credentials in here and not user-level credentials, I get taken to the "Do you want to set up Mail, VPN, etc.?" box that normally appears when you autodiscover or connect to an Open Directory server.
4) I click through, and am asked for a username and password on the server, as well as the password for my local account.
5) When I put this information in, I get a popup with the dreaded "eDSPermissionError(-14120)" and it fails.
Checking the logs in Server Admin reveals nothing special, and while I have seen a couple other threads on this error and various other binding problems:
http://discussions.apple.com/thread.jspa?messageID=5967023
http://discussions.apple.com/message.jspa?messageID=5982070
these have not solved the problem. In the Open Directory user name field I am putting the short username. I have tried putting [email protected] and the user's longname but this fails by saying the account does not exist. For some reason it does seem to work if I bind it to the initial admin account I created, but no other user accounts.
If I turn all the encryption stuff off I am able to join just fine, so I am suspecting that the error may lie in some other "under the hood" piece of software that doesn't get the CA trust settings from the Keychain or the ldap.conf file, but I'm stymied as to which piece of software this might be. Does anyone have any clues on what I might be able to do here?
Thanks,
Andrew

Hard to tell what is happening without looking at the application
source, knowing what OS & hardware you're using etc. You might want to
try running with different JVM versions to see if it's actually the VM
that is the problem. If you have a support contract with BEA you could
ask support to help you diagnose this.
Regards,
/Helena
Ayub Khan wrote:
I have an application running on Weblogic 8.1 ( with JRockit as the JVM). This
application in turns talks to an iPlanet Directory server via LDAP/SSL. The problem
seems to happen on loading the machine..the performance progressively gets worse
and after a couple of seconds, all the threads stop responding. I checked the
heap, cpu and the idle threads in the execute queue and there is nothing there
to trigger alarms...there are quite a few idle threads still and the heap and
the cpu utilization seem OK. On doing a thread dump, Is see that all the other
threads seem to be in a state where they are waiting for data from LDAP and it
is basically read only data that they are waiting on.
Does anyone know what it is going on and help point me in the right direction.
-Ayub

Problems with Apache PHP Mysql

I tried doing an upgrade from Tiger to Leopard server but was having lots of issues while working with the virtual sites I have hosted. I tried a clean install and I was still unable to get Apache php and mysql to work together. Each service was starting fine but when I would try to run a php file it would only display a white page. Under the upgrade instead of displaying the page it was downloading any page I tried to load.
In the new clean install I enabled phplib5 through server admin but even a simple info.php file with <?php phpinfo(); ?> was only giving me a white page. I dont know if mysql was interfacing with php and apache at this point cause I could not get any further. I mainly just want to be able to run wordpress which is a php blog that uses a mysql database.
I have heard some people talking about mamp installs and not using the stock web services but I did not know if that would be a smart route to take.

well the problem come in that you could end out with multiple releases of the same application when the idea is to make one package "stable"
would you rather have a debain package data base that has seventeen apache's or one stable full featured apache?
as for a server/stable tree for production machines this is coming. implimentation is not the trouble it is time that is a factor.

Problems with an SSL connection

I'm trying to execute a Post request using HTTPS. To achieve that I'm using commons-httpclient v.3.0rc1 and a custom SSLSocketProtocolSocketFactory that can work with untrusted self-signed certificates.
My code works on Windows 2000 Pro, but it fails on Linux (Suse Linux 8.2). However I'm using JDK 1.4.2 both in Windows and LInux, with the same list of security providers set at $JAVA_HOME/jre/lib/security/java.security file.
I've heard about problems with security when upgrading form JDK 1.4.x to JDK 1.5, but it's not the case.
Any idea about this?
This is the exception I get when I run my code on Linux:
Caused by: javax.net.ssl.SSLKeyException: RSA premaster secret error
at com.sun.net.ssl.internal.ssl.PreMasterSecret.<init>(PreMasterSecret.java:86)
at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverHelloDone(ClientHandshaker.java:514)
at com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:160)
at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:495)
at com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:433)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:815)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1025)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl.java:619)
at com.sun.net.ssl.internal.ssl.AppOutputStream.write(AppOutputStream.java:59)
at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:65)
at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:123)
at org.apache.commons.httpclient.HttpConnection.flushRequestOutputStream(HttpConnection.java:825)
at org.apache.commons.httpclient.HttpMethodBase.writeRequest(HttpMethodBase.java:1920)
at org.apache.commons.httpclient.HttpMethodBase.execute(HttpMethodBase.java:1002)
at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:382)
at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:168)
at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:393)
at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:324)
at com.gd.define.orion.mailets.AbstractHttpMailet.send(AbstractHttpMailet.java:451)
... 6 more
Caused by: java.security.NoSuchAlgorithmException: Cannot find any provider supporting RSA/ECB/PKCS1Padding
at javax.crypto.Cipher.getInstance(DashoA12275)
at com.sun.net.ssl.internal.ssl.JsseJce.getCipher(JsseJce.java:90)
at com.sun.net.ssl.internal.ssl.RSACipher.<init>(RSACipher.java:35)
at com.sun.net.ssl.internal.ssl.RSACipher.getInstance(RSACipher.java:69)
at com.sun.net.ssl.internal.ssl.PreMasterSecret.<init>(PreMasterSecret.java:82)
... 24 more

I've read in other forums that server and client running on same machine can cause problems using SSL. Is that real? Could it happen even when server uses JDK 1.5 and client uses JDK 1.4.2? May JDK version conflicts appear?
Thanks in advance

Problem with Apache reverse proxy after applying SP13 NW

Hello,
we have a NW04 EP Portal and a Apache reverse proxy in the DMZ. After applying SP 13 for the portal we get the following error from the reverse proxy:
Proxy Error
The proxy server received an invalid response from an upstream server.
The proxy server could not handle the request GET /irj/.
Reason: Error reading from remote server
Apache/2.0.52 (Win32) mod_ssl/2.0.52 OpenSSL/0.9.7e Server at servername.company.de Port 443
Is is it possible, that there is a problem with sp13?
Best regards
Daniel Holstein

Hi Daniel,
ok I`ll try to find a solution in parallel and keep you up to date.
In the following my settings in case I missed something:
<VirtualHost test.firma.de:443>
SSLEngine on
SSLProxyEngine on
SSLCertificateFile /apache/keys/pac_ssl_qep_dmz_server.crt
SSLCertificateKeyFile /apache/keys/pac_ssl_qep_dmz_server.key
ServerName test.firma.de:443
ServerAdmin [email protected]
LogLevel debug
ErrorLog logs/ssl_443_error
CustomLog logs/ssl_443_access_log common
ProxyVia Off
ProxyPreserveHost On
ReWriteEngine on
ReWriteLogLevel 0
ReWriteLog logs//ssl_443_rewrite_http.log
ProxyPass / https://backend.firma.de:50001/
ProxyPassReverse / https://backend.firma.de:50001/
</VirtualHost>
Regards, Jens

Problem with Apache

I have a problem with starting Apache process.
There is a log:
fopen: Invalid argument
Processing config directory: c:/oracle/product/10.2.0/db_2/apache/modplsql/conf"
Apache.exe: could not open config directory c:/oracle/product/10.2.0/db_2/apache/modplsql/conf"

Kostya,
Is that directory there (does it exist)? And is it readable by the Apache service user?
Earl

Problems with apache

I downloaded XAMPP Moodle today to do some development and found that apache would not start. It complained that Web Sharing was already turned on in System Preferences and that I should turn it off. When I checked in System Preferences, all indications were that Web Sharing was not enabled. Furthermore, when I tried to turn it on from System Preferences, it would not do so. I opened up http://localhost and my own user account (i.e. localhost/~micah) functions properly and httpd shows up as three processes in Activity Monitor (one under root and two under _www).
I am confident that I can kill it (using sudo), but I'm not confident that it will not come back in the same way when I restart. Also, how does System Preferences deterine whether or not httpd is running? Does it check the process list? Does it check the port? Is there a pid file? Why does it not show up properly in System Preferences?
How do I properly fix this situation?

AstroNauts wrote:
Thanks for your response!
Okay, done. Moved it from /Library/WebServer/Documents to /Sites/, stopped working. Now I suppose I have to look into the CGI?
(apologies, haven't been near this project for a while).
Okay, it now works!
Following your hint about the CGI, I uncommented the line below. I don't why it was commented (or should be), but it now works. Had some other help stating it was indeed a problem with how to handel php.
We're cool, now; thank you for your responses and help!
Best,
-Pim
+LoadModule fastcgi_module libexec/apache2/mod_fastcgi.so+

New MS patch problems with Apache & SSL on NetWare web serve

Similar Messages

Maybe you are looking for