Re: [Sks-devel] Keyserver operators with reverse proxies: read this please

2013-03-02 Thread Phil Pennock
On 2013-03-02 at 22:21 -0500, Phil Pennock wrote: > So in fact, this is not normally biting Apache. I'll update the wiki > now. > > John, Daniel: thanks for getting back to me and helping pin this down. I've confirmed the new text is accurate. Got an Apache setup running, passing onto the same

[Sks-devel] Keyserver operators with Apache reverse proxy: read this please

2013-03-02 Thread Phil Pennock
Reposting the important information for Apache, without all the diagnostics from the other part of the previous thread. On 2013-03-01 at 17:03 -0500, Phil Pennock wrote: > We now have two separate issues affecting SKS (and GnuKS) keyservers > which have nginx or Apache in front of them, affecting

Re: [Sks-devel] Keyserver operators with reverse proxies: read this please

2013-03-02 Thread Phil Pennock
On 2013-03-02 at 20:39 -0500, Phil Pennock wrote: > On 2013-03-02 at 13:38 -0600, John Clizbe wrote: > > Does not appear to be failing. I have not added the "RequestHeader unset > > Expect early" directive you suggest. Perhaps this is sensitive to particular > > releases of Apache? > > That's what

Re: [Sks-devel] Keyserver operators with reverse proxies: read this please

2013-03-02 Thread Phil Pennock
On 2013-03-02 at 13:38 -0600, John Clizbe wrote: > Does not appear to be failing. I have not added the "RequestHeader unset > Expect early" directive you suggest. Perhaps this is sensitive to particular > releases of Apache? That's what I was afraid of. It's failing against keys.wuschelpuschel.or

Re: [Sks-devel] Keyserver operators with reverse proxies: read this please

2013-03-02 Thread John Clizbe
Phil Pennock wrote: > Folks, > > We now have two separate issues affecting SKS (and GnuKS) keyservers > which have nginx or Apache in front of them, affecting interop > compatibility with various versions of GnuPG (and other clients) as > deployed. > > Even as changed clients roll out, we can exp

[Sks-devel] keyserver peering request

2013-03-02 Thread Daniel Austin
Hi, I'm doing a periodic round of peering for my SKS keyservers. Anyone who doesn't currently peer with my keyservers who wishes to, please add the following membership entries to your server and email me with your entries to add to mine: pgpkeys.co.uk 11370 # Daniel Austin 0x7F003DE6 pgp

Re: [Sks-devel] Keyserver operators with reverse proxies: read this please

2013-03-02 Thread Daniel Austin
Hi Phil, On 02/03/2013 00:00, Phil Pennock wrote: .eu is running apache 2.2.23 mod_proxy - both systems are FreeBSD 9.1 x64 and sks 1.1.4 Okay. And without the header modification config, you could reproduce the failure in Apache? I'm trying to be very sure, so that I can update the docs to