Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
From: hunter <theantigod@sympatico.ca>
To: users@httpd.apache.org
In-Reply-To: <000a01c42a18$89dcd7f0$6600a8c0@NeilP>
References: <000a01c42a18$89dcd7f0$6600a8c0@NeilP>
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
Date: 24 Apr 2004 14:18:00 -0400
Message-Id: <1082830680.22963.70.camel@ptak>
Mime-Version: 1.0
Subject: RE: [users@httpd] Windows Sources for 1.3.29

On Sat, 2004-04-24 at 12:23, Neil Pitman wrote:
> Thanks Aaron,
> 
> How do I know that this executable has not been hacked?
> 
> 
> 
> -----Original Message-----
> From: Aaron W Morris [mailto:aaronmorris@mindspring.com] 
> Sent: April 23, 2004 11:59 PM
> To: users@httpd.apache.org
> Subject: Re: [users@httpd] Windows Sources for 1.3.29
> 
> 
> Neil Pitman wrote:
> 
> > I'm trying to build Apache-SSL for Windows.  I cannot seem to get the 
> > sources for 1.3.29 Windows.  There is no windows sources zip in the 
> > dist/httpd directory.  In the dis/binaries/win32 directory there are 
> > two interesting files: apache_1.3.29-win32-x86-src.exe and 
> > apache_1.3.29-win32-x86-src.msi. apache_1.3.29-win32-x86-src.exe fails 
> > to run with "Program too big to fit in memory"
> > apache_1.3.29-win32-x86-src.msi fails because it claims that I already
> have
> > an installation.  It probably means the apache 2.0 executable.  I don't
> > really want to trash that until I have at least a candidate for SSL
> > 
> > Finally, the win32 binaries suggests that if I'm not interested in the 
> > MSI version, that I should get the -win32-src.zip file from the root 
> > dist/httpd directory (sorry it's not there).
> > 
> > Anyone have some ideas of how I should proceed to build a secure 
> > HTTPD?
> > 
> > Thanks
> > 
> > Neil Pitman
> > Work +1.514.344.1218
> > Cell +1.514.863.5465
> > Neil.pitman@mahjongmania.com
> > 
> 
> You can always download the binary version instead:
> http://hunter.campbus.com/
> 
> 
> -- 
> Aaron W Morris <aaronmorris@mindspring.com> (decep)
> 
> 
> 
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info. To
> unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
> 
> 
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
> 
Niel,

My name is Chris Lewis and I create the binaries at... 

http://hunter.campbus.com located somewhere in northern United States 

and 

http://tor.ath.cx/~hunter located in Toronto, Canada.

I have been building these binaries for several years, both for my
download sites and also for my employer (I work for a large Canadian
bank). I have established a trust relationship with thousands of people
around the world that depend on my binaries. I do everything possible to
keep my local site secure and it gets my personal attention daily. Ken
Campney securely manages the hunter.campbus.com site in the US (I ftp
the files there and verify them). 

I do not hack the code. 

I will try do whatever you would like to help to establish the
confidence that you need. Off-list I will identify myself completely and
we can 'get to know one another' so to speak, if you wish. 

However, the only way to be certain is to build it yourself - though you
do have to trust Apache.org and at some point perhaps trust me as well. 

If you take the binaries from hunter.campbus.com you should get the MD5
from tor.ath.cx/~hunter/apache and verify the zip or get both from
there.

Chris Lewis

  
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org