[us...@httpd] Re: slowloris mitigation

2010-04-15 Thread Dirk-Willem van Gulik
On 14 Apr 2010, at 22:46, Nick Kew wrote: > > Since then Stefan has given us mod_reqtimeout, which offers > an alternative defence, and a more satisfactory approach. > .. > So what should we do with mod_noloris? > (b) Keep it in trunk for the interested but keep it >out of released versions.

RE: [us...@httpd] Domain cant find server

2010-04-15 Thread Renato Oliveira
Have you checked if you can ping the DNS name from other machines? Have you checked if you can get access to the DNS name from outside or from somewhere other than the location you are in? Have you checked the nameservers you are using? Do an nslookup on Windows or host -t A on linux and see what

[us...@httpd] Creating user in apache web server

2010-04-15 Thread senthil kumar j
Hi there, Could you please tell me how to create user name pasword for apache web server. Thanks in advance Senthilkumar .J

Re: [us...@httpd] Creating user in apache web server

2010-04-15 Thread Tom Evans
On Thu, Apr 15, 2010 at 11:50 AM, senthil kumar j wrote: > Hi there, > > Could you please tell me how to create user name pasword for apache web > server. > > Thanks in advance > Senthilkumar .J > http://httpd.apache.org/docs/2.2/programs/htpasswd.html # Create htpasswd -c /path/to/.htpasswd you

Re: [us...@httpd] Custom ETags

2010-04-15 Thread Brian Mearns
On Tue, Apr 13, 2010 at 4:50 PM, Florian S. wrote: > Am Dienstag, den 13.04.2010, 10:34 -0400 schrieb Brian Mearns: >> I'd like to use stronger and correlated ETag, namely the hash of the >> content being served. Obviously it's a drag to do this in-line, so I'm >> planning an automated task to gen

RE: [us...@httpd] Creating user in apache web server

2010-04-15 Thread Renato Oliveira
DO you want to have users authenticated? If that is what want: htpasswd -c /etc/password.users Note 'htpasswd' is the command, '-c' is the command option, '/etc/password.users' is the file to store the users, is to be replaced with the username you want. R Renato Oliveira Systems Administra

[us...@httpd] CVE-2009-3555 and Opera

2010-04-15 Thread Andre Hübner
Hello, did on my Server update of openssl from 0.9.8a to 0.9.8n and compiled apache 2.2.15 against the new libs. Apache is running and CVE-2009-3555 security warning in newest firefox is gone but still appears in newest opera-browser. Somebody knows what they want to be updated? Thanks, Andr

Re: [us...@httpd] apache+mod_fcgid on windows

2010-04-15 Thread Jeff Trawick
On Tue, Mar 30, 2010 at 12:23 PM, Brent Davidson wrote: > Nope but the binary is in the distribution tree and linked from the download > page, so I'm not sure where you got turned around.  You mentioned the source > package but I'm assuming that isn't what you wanted, and apparently the > download

[us...@httpd] (70007)The timeout specified has expired: proxy: error reading status line from remote server

2010-04-15 Thread maurizio bella
Hi to all, I have an httpd server with mod_proxy that forward any request to an another server. the flow is: client --> requesto proxy https://miosito.it --> forward to server https://192.168.0.10:8443/ I'm reading this error in my httpd log in LogLevel debug (after some request). After some reques

RE: [us...@httpd] apache+mod_fcgid on windows

2010-04-15 Thread Brent Davidson
From: Jeff Trawick [traw...@gmail.com] Sent: Thursday, April 15, 2010 7:16 AM To: users@httpd.apache.org Subject: Re: [us...@httpd] apache+mod_fcgid on windows On Tue, Mar 30, 2010 at 12:23 PM, Brent Davidson wrote: > Nope but the binary is in the distribution tree and linked from the download >

Re: [us...@httpd] Re-negotiation handshake failed

2010-04-15 Thread Justin Pasher
kennethye...@infoimageinc.com wrote: Re-negotiation handshake failed: Not accepted by client!? I read through the documentation. I tried to turn SSLInsecureRenegotiation on and off, but no luck. I attached the configuration of my virtual host, hoping that you would point out anything that I

Re: [us...@httpd] Re-negotiation handshake failed

2010-04-15 Thread KennethYeung
I'm using https. Thanks, Kenneth Yeung Justin Pasher 04/15/2010 07:32 AM Please respond to users@httpd.apache.org To users@httpd.apache.org cc Subject Re: [us...@httpd] Re-negotiation handshake failed kennethye...@infoimageinc.com wrote: > Re-negotiation handshake failed: Not accep

Re: [us...@httpd] Re-negotiation handshake failed

2010-04-15 Thread Serge Dubrouski
This message is normal. It says that server expected user certificate but it wasn't presented by browser. On Tue, Apr 13, 2010 at 5:31 PM, wrote: > > Greeting! > > I'm having a problem on setting up client certificate on my test site on > Apache 2.2.15/OpenSSL 0.9.8m on Windows XP.  I followed t

[us...@httpd] Apache module that enables ActiveX

2010-04-15 Thread Mauri
Hi, I have a proxy with SSL that forward any request to a backend platform. In this moment I have a problem if I'm trying to execute an activex on the backend platform. I'm reading that the mod_proxy blocks any activex request because it don't trust for the system. How I can do? I'm reading about m

Re: [us...@httpd] Re-negotiation handshake failed

2010-04-15 Thread Serge Dubrouski
The window would pop-up if you had several certs installed in your browser that could satisfy server's request. Since you have just one cert installed browser sends it by default. On Thu, Apr 15, 2010 at 12:27 PM, wrote: > > After I installed a certificate on my browser (tested on both IE and >

Re: [us...@httpd] Re-negotiation handshake failed

2010-04-15 Thread KennethYeung
After I installed a certificate on my browser (tested on both IE and Firefox), I was able to access the site with client authentication. I was expecting my browser to pop up a dialog and ask me for a certificate. However, it seems like the browser won't do so if I have no certificate installed

[us...@httpd] questions regarding the version 2.2.15

2010-04-15 Thread Hélène Montarou
Hi, I am looking for an HTTP proxy server with the following features: - It has to be a reverse proxy; - It has to support SSL certificates for encryption and a two-way authentication: it should received HTTPS requests and be able to decrypt them as well as encrypt them based on another SSL keys.

RE: [us...@httpd] questions regarding the version 2.2.15

2010-04-15 Thread Emmanuel Bailleul
>De : Hélène Montarou [mailto:hmonta...@yahoo.com] >Envoyé : jeudi 15 avril 2010 21:53 >À : users@httpd.apache.org >Objet : [us...@httpd] questions regarding the version 2.2.15 > >Hi, > >I am looking for an HTTP proxy server with the following features: >- It has to be a reverse proxy; >- It has t

Re: [us...@httpd] questions regarding the version 2.2.15

2010-04-15 Thread Fernando Milovich
I think is the correct version you are looking for. http://httpd.apache.org/docs/2.2/new_features_2_2.html On Thu, Apr 15, 2010 at 4:53 PM, Hélène Montarou wrote: > Hi, > > I am looking for an HTTP proxy server with the following features: > - It has to be a reverse proxy; > - It has to support