[2108] in WWW Security List Archive

home help back first fref pref prev next nref lref last post

Re: Add CA's certifacte to Netscape Navigator 2.01

daemon@ATHENA.MIT.EDU (Ravi Shankar)
Thu May 16 09:49:02 1996

From: Ravi Shankar <ravi.shankar@citicorp.com>
To: etdrc@public.bta.net.cn
Date: Thu, 16 May 96 17:22:40 IST
Cc: www-security@ns2.rutgers.edu
In-Reply-To: <199605160637.OAA08476@public.bta.net.cn>; from "etdrc@public.bta.net.cn" at May 16, 96 2:37 pm
Errors-To: owner-www-security@ns2.rutgers.edu

> I start the server in the way you told me(ie,start the server with option -z 
> verify=0),but Netscape Navigator still can't work correctly and OS give out 
> the same application error.Can you tell me how you solved this problem?

Hmm. This is quite interesting.
I run my server with
	httpd -d . -z ssl
And it works.

But if I run it with
	httpd -d . -z ssl -z verify=n
where n is any number including 0, it gives a GPF as you describe.

Looking at the code, it seems like specifying "-z verify=0" is the same
as not giving "-z verify" option at all. Looks like this will bear 
further investigation.

Just for the record, these are the versions of the software I use:

	NCSA httpd 1.4.2 with the SSL 0.5.1 patch.
	SSLeay 0.5.1b
	Netscape 2.0

Cheers
Ravi

home help back first fref pref prev next nref lref last post