Re: [users@httpd] Apache2 listening on 80(http) and 443(https)

2016-04-01 Thread David Benfell
cause I started hosting these sites before SNI was widely available and even when it started becoming widely available it seemed broken (I gather this is no longer the case). I don't know how or if that would change this configuration. -- David Benfell, Ph.D. benf...@parts-unknown.org signature.asc Description: OpenPGP digital signature

[users@httpd] file exists, wget succeeds, but firefox gets 404

2016-02-18 Thread David Benfell
eeBSD 10.2-RELEASE-p9 #0: Thu Jan 14 01:32:46 UTC 2016 r...@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC amd64 Thanks! - -- David Benfell, Ph.D. benf...@parts-unknown.org -BEGIN PGP SIGNATURE- Version: GnuPG v1 iQIcBAEBCgAGBQJWxr2wAAoJEOoml8Ul4D7Wcs

[users@httpd] moving to fastcgi, was Re: [users@httpd] SOLVED MYSTERIOUSLY: Re: [users@httpd] apache apparently starts, crashes, logs absolutely nothing

2015-01-29 Thread David Benfell
is? I'm not having much luck with this. Thanks! -- David Benfell See https://parts-unknown.org/node/2 if you don't understand the attachment. pgpRt5Z3Cmtu7.pgp Description: PGP signature

[users@httpd] SOLVED MYSTERIOUSLY: Re: [users@httpd] apache apparently starts, crashes, logs absolutely nothing

2015-01-28 Thread David Benfell
rebuilding apache24 with worker, but it refused to recognize that I had built PHP with zend thread safety. So I tried event. It was only after that, that I realized that my problem was with the mod_php55 port build--I needed to select the zend thread safety option here as well. > Regards >

[users@httpd] apache apparently starts, crashes, logs absolutely nothing

2015-01-28 Thread David Benfell
28 10:14:58.295980 2015] [so:warn] [pid 49946] AH01574: module php5_module is already loaded, skipping Syntax OK Starting apache24. [Wed Jan 28 10:14:58.370798 2015] [so:warn] [pid 49947] AH01574: module php5_module is already loaded, skipping [root@home /usr/home/benfell]# service apache24 statu

Re: [users] Re: Recommended practice for mitigating BREACH/CRIME attacks with Apache 2.4+, SSL/TLS-only sites, and use of mod_deflate?

2014-06-06 Thread David Benfell
d BREACH. However, when I run my sites against web site > > analyzers they always suggest turning on compression. > > > > So what is the consensus? > > Ping! Anyone? > The site that seems authoritative for testing SSL is https://www.ssllabs.com/ssltest/ -- David

Re: [users@httpd] undefined symbol: apr_crypto_init

2014-04-11 Thread David Benfell
On Thu, Apr 10, 2014 at 06:07:53PM -0600, Jeff Trawick wrote: >On Thu, Apr 10, 2014 at 3:33 PM, David Benfell >I unfortunately missed your clear, earlier statement that you are using >the provided RPM specs which install apr + apr-util as system >libraries. IMO that i

Re: [users@httpd] undefined symbol: apr_crypto_init

2014-04-10 Thread David Benfell
On Thu, Apr 10, 2014 at 02:14:02PM -0600, Jeff Trawick wrote: >On Thu, Apr 10, 2014 at 2:05 PM, David Benfell ><[1]benf...@parts-unknown.org> wrote: > >On Thu, Apr 10, 2014 at 01:38:00PM -0600, Eric Covener wrote: >> On Thu, Apr 10, 2014 at 4:35 AM, David

Re: [users@httpd] undefined symbol: apr_crypto_init

2014-04-10 Thread David Benfell
On Thu, Apr 10, 2014 at 01:38:00PM -0600, Eric Covener wrote: > On Thu, Apr 10, 2014 at 4:35 AM, David Benfell > wrote: > > apr_crypto_init > > This phrase alone in a search engine gets you a number of hits saying > to upgrade APR. > > http://stackoverflow.com/q

Re: [users@httpd] Apache 2.4 - non adoption reasons??

2014-04-10 Thread David Benfell
ve, it seems like you're on your own. I may very well be forced to abandon this project because I simply don't know how to fix what's wrong. (See my other pending thread.) -- David Benfell See https://parts-unknown.org/node/2 if you don't understand the attachment. pgpBCls6xN3XF.pgp Description: PGP signature

Re: [users@httpd] Apache 2.4 - non adoption reasons??

2014-04-10 Thread David Benfell
l. It's just that the upgrade is difficult and I have other things I need to be working on. -- David Benfell See https://parts-unknown.org/node/2 if you don't understand the attachment. pgpbdNzQu8usm.pgp Description: PGP signature

[users@httpd] undefined symbol: apr_crypto_init

2014-04-10 Thread David Benfell
#x27;m so close to finding my way through this upgrade from 2.2. But I'm not finding anything helpful (at least at 3:30 in the morning). What do I need to do? Thanks! -- David Benfell See https://parts-unknown.org/node/2 if you don't understand the attachment. pgpL6d4MwGnln.pgp Description: PGP signature

Re: [users@httpd] 2.4 authn problem

2014-04-08 Thread David Benfell
On Wed, Apr 09, 2014 at 12:07:25AM -0600, Eric Covener wrote: > On Wed, Apr 9, 2014 at 12:00 AM, David Benfell > wrote: > > Hi all, > > > > It looks like your first and second parameter to LoadModule don't > match. Change the second parameter to authn_core_modul

[users@httpd] 2.4 authn problem

2014-04-08 Thread David Benfell
module' in file /usr/local/apache2.4/modules/mod_authn_core.so: /usr/local/apache2.4/modules/mod_authn_core.so: undefined symbol: authn_alias_module What does it want? I'm definitely no apache guru but this sounds to me like a missing prerequisite. Is that right? What do I need to do? Thanks

Re: [users@httpd] Apache won't start, strace output enclosed

2014-01-17 Thread David Benfell
ssion Off #SSLCipherSuite RC4-SHA:HIGH:!ADH SSLInsecureRenegotiation off SSLOptions StdEnvVars BrowserMatch "MSIE [2-6]" \ nokeepalive ssl-unclean-shutdown \ downgrade-1.0 force-response-1.0 BrowserMatch "MSIE [17-9

[users@httpd] Apache won't start, strace output enclosed

2014-01-16 Thread David Benfell
m in a bit of a panic. What's going wrong? Thanks! - -- David Benfell see https://parts-unknown.org/node/2 if you don't understand the attachment -BEGIN PGP SIGNATURE- Version: GnuPG v2.1.0-ecc (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBA

Re: [users@httpd] undefined reference to tls client method

2013-11-30 Thread David Benfell
--libdir=lib64 \ && make && make test && sudo make install This overwrites the CentOS version and you will want to tell yum to ignore openssl. - -- David Benfell see https://parts-unknown.org/node/2 if you don't understand the attachment -BEGIN PGP SIGNATURE- V

[users@httpd] SOLVED Re: [users@httpd] undefined reference to tls client method

2013-11-01 Thread David Benfell
On 2013-11-01 04:12, David Benfell wrote: On 2013-11-01 03:32, Pete Houston wrote: OTOH, if it fails, you'll probably have to revisit your build of openssl. Actually, even though the test passed, I needed to revisit the build of openssl. The big ugly question is where in (insert obsc

Re: [users@httpd] undefined reference to tls client method

2013-11-01 Thread David Benfell
On 2013-11-01 03:32, Pete Houston wrote: Hello David, On Fri, Nov 01, 2013 at 03:21:35AM -0700, David Benfell wrote: I built openssl from source. I'm trying to get TLS 1.2 working, which the old and crufty openssl on Centos 6.4 doesn't do. Do I need to do something different

Re: [users@httpd] undefined reference to tls client method

2013-11-01 Thread David Benfell
PM-based system ;-)) I built openssl from source. I'm trying to get TLS 1.2 working, which the old and crufty openssl on Centos 6.4 doesn't do. Do I need to do something different to get the development libraries in place? Thanks! 2013/11/1 David Benfell : Hi all, I'm try

[users@httpd] undefined reference to tls client method

2013-11-01 Thread David Benfell
hod' My ./configure line is pretty simple, just because I haven't really figured it out: ./configure --enable-modules=all --enable-ssl What am I missing? Thanks! -- David Benfell Normally you should expect a GnuPG signature: https://parts-unknown.org/node/2 But t

Re: [users@httpd] Apache insists on binding to *all* addresses even though Listen directives specify specific ip addresses

2013-09-23 Thread David Benfell
on. A file called ssl.conf that had been included and that did a blanket Listen 443. :facepalm. Thanks! Now I can move on to the next problem -- David Benfell My mail is usually signed cryptographically, but from Zimbra, it generally will not be. Please see https://parts-unknown.org/node/

[users@httpd] Apache insists on binding to *all* addresses even though Listen directives specify specific ip addresses

2013-09-23 Thread David Benfell
e system. This is a *very* *bad* thing for it to attempt to do. What am I missing? Thanks! -- David Benfell My mail is usually signed cryptographically, but from Zimbra, it generally will not be. Please see https://parts-unknown.org/node/2 for more information. BEGIN:VCARD VERSION:3.0 FN:Da