Re: [users@httpd] wrong certs

2013-10-23 Thread Jan Vávra
Hello, it is obvious you are using port based virtual host. My question was for assuring you have configured basics well. So I suppose you have: Listen *:424 https ServerName A SSLCertificateFile 1.crt *SSLCertificateKeyFile 1.key* #and probably also SSLCertificateChainFile chain.crt I

[users@httpd] virtual hosts questions

2013-10-23 Thread Paolo De Michele
hi everybody, I have several difficulties to configure virtual hosts on my server with a public static IP my virtualhost have been populated as well (not by me): 1.conf DocumentRoot /opt/observium/html/ CustomLog /opt/observium/logs/access_log combined ErrorLog /opt/observium/logs/erro

[users@httpd] PHP variables for mod_proxy_ajp

2013-10-23 Thread Massimo Cusumano
HI all, I am trying to pass a "PHP variable" from Apache (2.2.15) to Tomcat (7.0.27) but without success. The apache is used as front-end server of tomcat using mod_proxy_ajp. I verified that I can pass only variable set by Apache (e.g. using SetEnv directive); How I can pass a variable set

Re: [users@httpd] PHP variables for mod_proxy_ajp

2013-10-23 Thread Jan Vávra
Hello, if there is defined a context for reverse proxy (eg. /tomcat_part), no php is executed on /tomcat_part. This thing you can do via redirect and pass the variable as url parameter, e.g. add param 'key' /tomcat_part/page.jsp?key=something The client calls /php_part/page.php and page.php t

Re: [users@httpd] wrong certs

2013-10-23 Thread Matthew Bachmann
Try your same config but use A for the ServerName in both VirtualHost sections. Based on what I've seen, you should then get 1.crt from either port, and never get 2.crt, which seems like a bug. On Wed, Oct 23, 2013 at 3:14 AM, Jan Vávra wrote: > Hello, > it is obvious you are using port base

[users@httpd] WebSocket Proxying only working on local machine, fails on other machines in the network

2013-10-23 Thread Heinz Romirer
Hello fellow Apache Users ;) I'm new to this mailing list and I hope to be able to contribute to this list as much as I hope to gain knowledge from it :) I'm stuck while configuring my web server (unfortunately I'm bound to a Windows machine and I must not switch to *nix because of company policy

RE: [users@httpd] Virtual Hosts and SSL Puzzler

2013-10-23 Thread Tushar Chavan
> Date: Tue, 22 Oct 2013 08:26:57 -0400 > From: d...@bellsouth.net > To: users@httpd.apache.org > Subject: [users@httpd] Virtual Hosts and SSL Puzzler > > I have 3 virtual hosts that for all I can see are configured identically > other the the obviously needed differences. The same is true of t

Re: [users@httpd] Virtual Hosts and SSL Puzzler

2013-10-23 Thread Matthew Bachmann
Use debug mode in your browser to verify that all of the contents of the page are actually coming from that server. I had a problem where javascript was importing some public library, and it was fetching it via plain http, so I got the grey globe for the whole page. On Wed, Oct 23, 2013 at 11:00

[users@httpd] Filtering incoming request with mod_ext_filter

2013-10-23 Thread Daniel Stefaniuk
I try to filter incoming HTTP request. Here is configuration of my filter: LoadModule ext_filter_module modules/mod_ext_filter.so ExtFilterDefine myFilter ftype=30 mode=input \ cmd="c:/tools/perl/bin/perl.exe c:/temp/dump.pl c:/temp/dump.out" SetOutputFilter myFilter and Perl script I'm

Re: [users@httpd] Filtering incoming request with mod_ext_filter

2013-10-23 Thread Jeff Trawick
On Wed, Oct 23, 2013 at 12:07 PM, Daniel Stefaniuk < daniel.stefan...@gmail.com> wrote: > I try to filter incoming HTTP request. Here is configuration of my filter: > > LoadModule ext_filter_module modules/mod_ext_filter.so > ExtFilterDefine myFilter ftype=30 mode=input \ > cmd="c:/tools/perl/

Re: [users@httpd] virtual hosts questions

2013-10-23 Thread Paolo De Michele
I can not help anyone? thanks in advance On 10/23/2013 10:11 AM, Paolo De Michele wrote: hi everybody, I have several difficulties to configure virtual hosts on my server with a public static IP my virtualhost have been populated as well (not by me): 1.conf DocumentRoot /opt/observium/h

Re: [users@httpd] Filtering incoming request with mod_ext_filter

2013-10-23 Thread Daniel Stefaniuk
That's a good question. I don't set it at all. Thanks for pointing that out Jeff. Now, I face another problem. I want to modify header parameters of incoming request from the Perl script. Is this possible at all? I can see headers in the output file but the input file contains just the request bod

Re: [users@httpd] Filtering incoming request with mod_ext_filter

2013-10-23 Thread Jeff Trawick
On Wed, Oct 23, 2013 at 3:18 PM, Daniel Stefaniuk < daniel.stefan...@gmail.com> wrote: > That's a good question. I don't set it at all. Thanks for pointing that > out Jeff. > > Now, I face another problem. I want to modify header parameters of > incoming request from the Perl script. Is this possi

Re: [users@httpd] Filtering incoming request with mod_ext_filter

2013-10-23 Thread Daniel Stefaniuk
Ok, thanks Jeff. I think I can work around that problem. What about this scenario: 1) Filter incoming request based on content (HTTP POST) 2) Stop further processing of a request if content matches (or doesn't match) dynamic criteria (Perl script is aware of these criteria) 3) do not pass

Re: [users@httpd] Filtering incoming request with mod_ext_filter

2013-10-23 Thread Nick Kew
On 23 Oct 2013, at 20:53, Daniel Stefaniuk wrote: > Is this doable with filters? Yes and no. Yes, it can be done. No, it can easily be done wrong, so it might pass your tests then be bypassed in operation. For example, the filter encounters something that should abort the request, but the pro

Re: [users@httpd] Filtering incoming request with mod_ext_filter

2013-10-23 Thread Daniel Stefaniuk
Thanks Nick. Yes, it looks like mod_security provides dynamic collections that I could use to match header parameters against a whitelist and change that list on demand (for example by hitting defined URL address). Does Ironbee provide any similar functionality? Daniel -

Re: [users@httpd] Filtering incoming request with mod_ext_filter

2013-10-23 Thread Nick Kew
On 23 Oct 2013, at 22:08, Daniel Stefaniuk wrote: > Thanks Nick. > > Yes, it looks like mod_security provides dynamic collections that I > could use to match header parameters against a whitelist and change > that list on demand (for example by hitting defined URL address). > > Does Ironbee pro

[users@httpd] access rules

2013-10-23 Thread Leo Donahue - OETX
Apache 2.4.6 Subversion 1.8.3 When implementing access rules, what is the significance of the following: [/] admin = rw [repo1/] * = r Does admin have read/write access to repo1 and any subdirectories in repo1? I ran into an issue checking out repo1 and then trying to make a subdirectory in r

[users@httpd] RE: access rules

2013-10-23 Thread Leo Donahue - OETX
From: Leo Donahue - OETX [leodona...@mail.maricopa.gov] Subject: [users@httpd] access rules Apache 2.4.6 Subversion 1.8.3 When implementing access rules, what is the significance of the following: [/] admin = rw [repo1/] * = r Does admin have read/write access to repo1 and any subdirectories in