Re: [users@httpd] High CPU Usage in Amazon EC2

2014-04-04 Thread Igor Cicimov
On 04/04/2014 1:05 AM, "Christopher Schultz" wrote: > > All, > > I'm having a problem in production I've never seem before. We are > running a pair of AWS EC2 m1.micro web servers where only one of them in > really in service at any given time. The httpd instance serves some > static content and f

Re: [users@httpd] High CPU Usage in Amazon EC2

2014-04-04 Thread Igor Cicimov
On 04/04/2014 1:05 AM, "Christopher Schultz" wrote: > > All, > > I'm having a problem in production I've never seem before. We are > running a pair of AWS EC2 m1.micro web servers where only one of them in > really in service at any given time. The httpd instance serves some > static content and f

Re: [users@httpd] https

2014-04-04 Thread Andy Canfield
Well, "a while" turned out to be one day. Stuck again. I found a web page that had some info on it, It shows a command (openssl req) to create a privately signed SSL key. Unfortunately, it doesn't explain that command, but 'man req 1' has more information such as what '-x509' does for me (this has

Re: [users@httpd] Apache HTTPD SHA256

2014-04-04 Thread Jerry Blasdel
My issue was that my server certificate was not SHA-256 capable. As soon as I put a new server certificate out there it started working. From: Jerry Blasdel/USA/CSC@CSC To: users@httpd.apache.org Date: 04/03/2014 11:53 AM Subject:[users@httpd] Apache HTTPD SHA256 We have bui

Re: [users@httpd] https

2014-04-04 Thread Pete Houston
From the openssl documentation at http://www.openssl.org/docs/apps/req.html is this list of example field values: [ req_distinguished_name ] C = GB ST = Test State or Province L = Test Locality O = Organization

[users@httpd] Can't restrict file access

2014-04-04 Thread D'Arcy J.M. Cain
I just noticed that files that should be blocked can easily be seen on my server. I have the following code in my httpd.conf yes anyone can view my svn repository or read my .htaccess files. I think that the first one was actually part of the sample config from Apache. Can anyone see a problem?

Re: [users@httpd] Can't restrict file access

2014-04-04 Thread Eric Covener
Maybe you have a covering the same space with other access control? If you overlap directory/files with location, bad things happen. On Fri, Apr 4, 2014 at 8:38 AM, D'Arcy J.M. Cain wrote: > I just noticed that files that should be blocked can easily be seen on > my server. I have the following

[users@httpd] Apache returns 401 forbidden for OPTIONS requests

2014-04-04 Thread Justin Mrkva
I've finally tracked down an error I've been having to Apache returning a 401 for all OPTIONS requests. This happens for any directory, including those that have no Limit or Require directives. These locations all respond to GET requests. I've posted the httpd.conf at https://gist.github.com/a

Re: [users@httpd] Can't restrict file access

2014-04-04 Thread D'Arcy J.M. Cain
On Fri, 4 Apr 2014 08:44:02 -0400 Eric Covener wrote: > Maybe you have a covering the same space with other access > control? If you overlap directory/files with location, bad things > happen. Someone pointed out that the config directives changed in 2.4. This is what I have now. Require

Re: [users@httpd] Can't restrict file access

2014-04-04 Thread D'Arcy J.M. Cain
On Fri, 4 Apr 2014 10:09:48 -0400 "D'Arcy J.M. Cain" wrote: > > Require all denied > > > This doesn't work. I believe that this is because I have other > Directory directives that override it. Would the above work if > changed Directory to a Location directive? My impression from > readi

[users@httpd] security question

2014-04-04 Thread apache2
Howdy, I've been working with Apache for about 10 years but have only been working with Apache Proxy for a few months. Am I reasonably safe against outside Proxy abuse with Virtual Host settings like the following? Win 2003 server standard running on primary machine Above server acting as house

Re: [users@httpd] https

2014-04-04 Thread Andy Canfield
Thank you very much, Pete. Your answer was most helpful. I was dumb because the 'man req 1' page describes the '-subj' parameter in line 81 and in line 154 but the text you sent me is in lines 482++. Similarly the openssl.cnf file never mentions "-subj" at all. I will read that web page you listed