06-Jan-2008

Rejected Webaccess
Last weblog shows an attempt to do simething werid:

210.51.23.7 - - [06/Jan/2008:02:06:34 +0100] "GET http://clickingagent.com/proxycheck.php?ip=217.149.210.164&port=80&loc= HTTP/1.0" 403 864
...
210.51.23.7 - - [06/Jan/2008:05:27:00 +0100] "GET http://clickingagent.com/proxycheck.php?ip=217.149.210.164&port=80&loc= HTTP/1.0" 403 864

In other words – this person (?) tries something and appearently fails to reckognize autentication errors – for 2 1/2 hours. There are 159 entries all together, the intervals differ – from minutes to tenths of seconds. In vain, of course, because proxies are not enabled.
Plus the ever recurring types of attempts, but less than normal.

One thin g to add to be allowed: the count program. It’s in the home page and valid – but shows up, as well as the webpage itself.

SSL
This weekend I tried to get a server certificate from CA-cert, and had (I think) to use the HP-supplied scripts ($ @SSL$COM:SSL$_CERT_TOOLS), because the WASD SSL kit isn’t complete in that respect (according Mark’s documentation), I got one from CA-cert and after some playing around following documentation, I thought I got one to use as server certificate. But the server failes on handling it:
%HTTPD-I-SSL, ssssssss.grootersnet.nl:443
-SSL-I-CERT, DDDDDD:SSSSSSSS.PEM
-SSL-W-ERROR, "error:0906D06C:PEM routines:PEM_read_bio:no start line" (HT_ROOT:[SRC.OPENSSL-0_9_8.CRYPTO.PEM]PEM_LIB.C;1 644)"Expecting: CERTIFICATE"
-SSL-W-ERROR, "error:140DC009:SSL routines:SSL_CTX_use_certificate_chain_file:PEM lib" (HT_ROOT:[SRC.OPENSSL-0_9_8.SSL]SSL_RSA.C;1 727)
-SERVICE-W-SSL, service not configured

leaving each of the SSL’d sites inaccesable. So I reversed to the original, and first check how to create such a certificate…

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.