Re: [us...@httpd]

2009-07-06 Thread Brian Mearns
The answer is 12. On Mon, Jul 6, 2009 at 4:03 AM, John Winther wrote: > help -- Feel free to contact me using PGP Encryption: Key Id: 0x3AA70848 Available from: http://keys.gnupg.net - The official User-To-User support forum

[us...@httpd] Is it okay to not use exportable ciphers?

2009-08-20 Thread Brian Mearns
For the sake of security, I'd like to configure my SSL/TLS server to not allow export level ciphers (using the SSLCipherSuite directive). Is this going to realistically limit the number of people who can use a secure connection to my site? Specifically, will visitors from other countries (outside t

Re: [us...@httpd] Is it okay to not use exportable ciphers?

2009-08-20 Thread Brian Mearns
On Thu, Aug 20, 2009 at 3:24 PM, Sander Temme wrote: > > On Aug 20, 2009, at 3:16 PM, Brian Mearns wrote: > >> For the sake of security, I'd like to configure my SSL/TLS server to >> not allow export level ciphers (using the SSLCipherSuite directive). >> Is this

[us...@httpd] Limit output filter by response code

2009-10-31 Thread Brian Mearns
I'm using external filters to minify javascript and CSS files as they head out of the server. The minifier takes a good 500ms to run, causing serious drag. So I put Squid in front of the server and configured it as a caching proxy. The problem is, the filters are running even on "304 Not Modified"

Re: [us...@httpd] pdf report generation - content type text/html

2009-11-03 Thread Brian Mearns
On Tue, Nov 3, 2009 at 2:26 PM, Marcin 'Rambo' Roguski wrote: > On Tue, 3 Nov 2009 14:20:27 -0500 > b k wrote: > >> Hi all, >> PDF reports are not being generated on any browser. [...]Any help would be >> greatly >> appreciated > > Send Content-Type: application/pdf or application/octet-stre

Re: [us...@httpd] pdf report generation - content type text/html

2009-11-03 Thread Brian Mearns
g fine. I suspect something is wrong in the apache config. I also > checked mime.types file which includes pdf entry. > > On Tue, Nov 3, 2009 at 2:32 PM, Brian Mearns wrote: >> >> On Tue, Nov 3, 2009 at 2:26 PM, Marcin 'Rambo' Roguski >> wrote: >> > O

[us...@httpd] Conditional behavior by status code

2009-11-04 Thread Brian Mearns
Is there any way to get Apache to behave differently based on the status code, specifically apply different OutputFilters? This is similar in concept, I believe, to AddOutputFilterByType, which relies on the generated Content-Type header to determine what filter to apply. But I want to apply differ

Re: [us...@httpd] apache configuration: always go to parent directory

2009-11-10 Thread Brian Mearns
On Tue, Nov 10, 2009 at 4:43 AM, J. Bakshi wrote: > Hello, > > I have configured a personal work-space for mine in apache where I can > experiment with different sites and here is the configuration > > > Alias /personal/joydeep  /var/personal_work_area/

Re: [us...@httpd]

2009-11-10 Thread Brian Mearns
On Tue, Nov 10, 2009 at 8:28 AM, Eric Covener wrote: > On Tue, Nov 10, 2009 at 8:19 AM, Stephen Love wrote: >> I have set up a routine in my server that logs all incoming IP addresses and >> parses for duplicates in the same list. HOWEVER...a person posting almost >> NEVER has the same address. I

Re: [us...@httpd] Caching files on reverse proxy

2009-11-10 Thread Brian Mearns
On Tue, Nov 10, 2009 at 1:36 PM, vara prasad wrote: > Hi  All, > I have set up a reverse proxy www.example.com for an internal tomcat server > http://internal:8080 > Few files are hosted on  http://internal:8080. > My requirement is when user downloads a file from http://internal:8080 using > the 

Re: [us...@httpd]

2009-11-10 Thread Brian Mearns
On Tue, Nov 10, 2009 at 6:37 PM, Eric Covener wrote: > On Tue, Nov 10, 2009 at 6:20 PM, Stephen Love wrote: >> So what you are telling me is that there IS no REAL 2-way handshaking going >> on. Then we've lost ALL hope of security. >> > > What's "REAL" in this context?  It's not authenticated and

Re: [us...@httpd]

2009-11-10 Thread Brian Mearns
On Tue, Nov 10, 2009 at 10:29 PM, Stephen Love wrote: > Ok, now we're getting somewhere... just ENOUGH to eliminate the path > inbetween... I'd just like to ask APACHE for a unique signature of the > machine sending the message to compare it against others. Nothing more, > nothing less. > > > See

Re: [us...@httpd] apache configuration: always go to parent directory

2009-11-10 Thread Brian Mearns
On Tue, Nov 10, 2009 at 10:00 PM, J. Bakshi wrote: > Brian Mearns wrote: >> On Tue, Nov 10, 2009 at 4:43 AM, J. Bakshi wrote: >> >>> Hello, >>> >>> I have configured a personal work-space for mine in apache where I can >>> experiment

Re: [us...@httpd]

2009-11-11 Thread Brian Mearns
; See us online at http://www.LOVEnCompany.com. > > -- Original Message -- > From: Brian Mearns > To: users@httpd.apache.org > Subject: Re: [us...@httpd] > Date: Tue, 10 Nov 2009 22:34:24 -0500 > > On Tue, Nov 10, 2009 at 6:37 PM, Eric Covener wrote:

Re: [us...@httpd] SPDY protocol

2009-11-13 Thread Brian Mearns
On Fri, Nov 13, 2009 at 9:51 AM, Mike Cardwell wrote: > Does Apache intend to add support for Googles recently announced SPDY > protocol? > > http://sites.google.com/a/chromium.org/dev/spdy/spdy-whitepaper > > -- > Mike Cardwell - IT Consultant and LAMP developer > Cardwell IT Ltd. (UK Reg'd Compa

Re: [us...@httpd] SPDY protocol

2009-11-13 Thread Brian Mearns
On Fri, Nov 13, 2009 at 11:15 AM, David Henderson wrote: > I would vote to make it a module over a patch due to Brian Mearns making a > good point about it possibly not moving beyond the IEFT.  At least a modular > design can just be dropped from the operation of the server without ha

Re: [us...@httpd] Just curious on SPDY

2009-11-17 Thread Brian Mearns
On Tue, Nov 17, 2009 at 6:15 AM, Mike Cardwell wrote: > Kamaraj, Jayakumar wrote: > >>            Just curious to know whether  Google announcement on SPDY >> http://blog.chromium.org/2009/11/2x-faster-web.html needs change only in >> Apache web server side or even needs change in application poin

Re: [us...@httpd] Just curious on SPDY

2009-11-17 Thread Brian Mearns
On Tue, Nov 17, 2009 at 9:55 AM, Mike Cardwell wrote: > Brian Mearns wrote: > >>>>           Just curious to know whether  Google announcement on SPDY >>>> http://blog.chromium.org/2009/11/2x-faster-web.html needs change only in >>>> Apache web serve

Re: [us...@httpd] how to install gcc required for apache 2.2 on RHEL 4

2009-11-19 Thread Brian Mearns
On Thu, Nov 19, 2009 at 5:34 AM, Philip Wigg wrote: >> I am installing Apache web server 2.2.14 on RHEL 4. When I am running >> configure command in the apache, it is throwing error “No c++ compiler >> found”. > > This isn't an Apache question but anyway, you probably just need to > type 'up2date

Re: [us...@httpd] Name virtual hosts and HTTPS

2009-11-21 Thread Brian Mearns
On Sat, Nov 21, 2009 at 11:54 AM, Florent Georges wrote: >  Hi, > >  I have one server one which I run two virtual hosts, say site1 > and site2.  They run very well for HTTP stuff for months.  Site1 > has also HTTPS access configured.  I am trying to add HTTPS > support for site2 as well.  So I cr

Re: [us...@httpd] Name virtual hosts and HTTPS

2009-11-22 Thread Brian Mearns
On Sun, Nov 22, 2009 at 1:22 PM, Florent Georges wrote: > Peter Schober wrote: > >  Thanks all for your responses! > >> Or put all vhosts in the certificate (as X.509v3 SubjectAltName >> extensions) and serve up the same cert on every vhost. > >  Yes, that's what I started to think after have seen

[us...@httpd] Lightweight apache for fast proxying

2009-11-22 Thread Brian Mearns
I'm thinking of setting up apache as a fairly rich reverse proxy for a variety of different servers, and would like some suggestions on a) whether or not this is a good idea and if there are better alternatives, and b) how should I build and configure it to maximize performance. There's the execut

Re: [us...@httpd] how to get multiple SSL with name based vhost ?

2009-12-01 Thread Brian Mearns
On Tue, Dec 1, 2009 at 3:48 PM, Sheryl wrote: > >> Krist explained it very nicely... But maybe you still didn't get it: >> Without SNI, there is NO WAY TO DO THIS. It is a fundamental limitation of >> the HTTPS protocol with no production-grade work-around. SNI (server-name >> indication) was spec

[us...@httpd] SSL Reverse Proxy

2010-01-26 Thread Brian Mearns
I'm looking for some clarification on how to setup a reverse proxy that supports SSL/TLS. My understanding is as follows (please correct me if I'm wrong): 1. Client connects with SSL, mod_ssl handles this 2. mod_proxy handles generating a proxy-request to the configured origin server 3. SSLProxyEng

Re: [us...@httpd] SSL Reverse Proxy

2010-01-29 Thread Brian Mearns
On Thu, Jan 28, 2010 at 5:34 AM, Matus UHLAR - fantomas wrote: > On 26.01.10 15:28, Brian Mearns wrote: >> I'm looking for some clarification on how to setup a reverse proxy >> that supports SSL/TLS. My understanding is as follows (please correct >> me if I'm wro

Re: [us...@httpd] proxy chaining to squid

2010-02-01 Thread Brian Mearns
On Mon, Feb 1, 2010 at 5:33 AM, Emmanuel Bailleul wrote: > > >> -Message d'origine- >> De : David Cotter [mailto:davidcot...@gmail.com] >> Envoyé : lundi 1 février 2010 11:30 >> À : users@httpd.apache.org >> Objet : Re: [us...@httpd] proxy chaining to squid >> >> n Mon, Feb 1, 2010 at 9:08

[EMAIL PROTECTED] export.c build errors - many "solutions" found, none worked.

2008-09-01 Thread Brian Mearns
This seems to be a common problem, but none of the solutions I found online and in mailing list archives helped. The problem is when running make, and I get many errors about redefinitions in exports.c like: exports.c:743: error: redefinition of ‘ap_hack_apr_allocator_create’ exports.c:728: error

Re: [EMAIL PROTECTED] export.c build errors - many "solutions" found, none worked.

2008-09-01 Thread Brian Mearns
Nope, thanks anyway but that's not it either. It's a local drive. -Brian > Don't configure on an NFS-mounted filesystem. > > If you have only an NFS-mounted home directory at your > disposal, there's always /tmp. If you need debugging > in your executable to see the source, you may need to > mov

Re: [EMAIL PROTECTED] Why do I need /var/www as DocumentRoot & www-data as www owner?

2008-09-02 Thread Brian Mearns
Correct me if I'm wrong, but based on the way your message sounds, you don't appear to have any knowledge of the httpd.conf file? It's the main configuration file for your server, and it includes a DocumentRoot directive that allows you to specify the document root. The default may be /var/www, but

[EMAIL PROTECTED] Re: exports.c: duplicate sections RESOLVED (sort of)

2008-09-27 Thread Brian Mearns
I resolved the issue by simply removing all traces of my old apr and apr-util, and just using the packaged versions. So help is no longer needed, but for those having the same issue, I can't offer any additional assistance. -Brian > Follow up: I found the problem, but still don't know how to fix

Re: [EMAIL PROTECTED] Cannot connect to apache from outside machines

2008-09-30 Thread Brian Mearns
Not sure what the default xampp setup is, but look for the Listen directive to verify which ports apache is actually listening on, and make sure those are forwarded. Also, I'm not sure how much you know about networks (so pardon me if you consider this suggestion offensive): are you connecting to

Re: [EMAIL PROTECTED] Cannot connect to apache from outside machines

2008-09-30 Thread Brian Mearns
e > says or have it listen on my ip? > > # Change this to Listen on specific IP addresses as shown below to > # prevent Apache from glomming onto all bound IP addresses (0.0.0.0) > # > #Listen 12.34.56.78:80 > Listen 80 > > > > - Original Message - From: &qu

Re: [EMAIL PROTECTED] Running Multiple Windows Services on port 8080

2008-09-30 Thread Brian Mearns
You /can/ run multiple sites from different IP addresses on the same or different ports, using virtual hosts, which are well documented in apache. It basically just allows you to use custom configurations depending on which IP address is accessed. So for instance, you could have a different Documen

Re: [EMAIL PROTECTED] Running Multiple Windows Services on port 8080

2008-09-30 Thread Brian Mearns
vices. Also I am limited to port 8080 because we will be using the BEA > Weblogic Plug-in to proxy back to our WL servers and we have established > only port 8080 is allowed to come through our firewall to talk to the WL > servers. > > John > > > Brian Mearns-2 wrote: >>

Re: [EMAIL PROTECTED] Running Multiple Windows Services on port 8080

2008-09-30 Thread Brian Mearns
Well look at that. Thanks for correcting me, even if you did it rather unpleasantly. It's always nice to learn something new. That's why I try to preface my comments with soft phrases like "to the best of my knowledge". -Brian > > You seem to be getting quite a bit of incorrect advise, so I'll hi

Re: [EMAIL PROTECTED] Running Multiple Windows Services on port 8080

2008-09-30 Thread Brian Mearns
gt; and got it working. My issue is that since they are different sites, if >>> I >>> do maintenance on one site and have to stop the service then all sites >>> are >>> down and I cannot have that. This is why I was trying to setup different >>> services

Re: [EMAIL PROTECTED] Running Multiple Windows Services on port 8080

2008-09-30 Thread Brian Mearns
How are you "redirecting" to the IP address? I used to use dyndns.com for my subdomain name, and I was able to append the port number with no problem. E.g., my subdomain was something like bmearns.homeip.net, so I just went to http://bmearns.homeip.net:8080. Do you not want users to see your IP ad

Re: [EMAIL PROTECTED] Running Multiple Windows Services on port 8080

2008-10-01 Thread Brian Mearns
ould petition dyndns to > allow the domains they hand out to be linked to an IPADDRESS:PORT instead of > just an IP. That would elminate any workarounds like webhop and suffice to > say solve the port 80 issue with ISP's. > > - Original Message - From: "Brian Mearns

Re: [EMAIL PROTECTED] Running Multiple Windows Services on port 8080

2008-10-01 Thread Brian Mearns
> tried my.domain.com to my.domain.com:8080. doesnt work only allows IP:PORT. > btw Cox internet out here even with a business account blocks port 80. > > - Original Message - From: "Brian Mearns" <[EMAIL PROTECTED]> > To: > Sent: Wednesday, October 01, 2008

Re: [EMAIL PROTECTED] Apache server - Output to the same page whatever request

2008-10-09 Thread Brian Mearns
The QSA option is what you need to pass the GET arguments along to the rewritten url. For instance, if you want EVERY url to get served by a.php, including GET arguments, you can do: RewriteRule ^.*$ /a.php [QSA] I'm pretty sure that's the write matching pattern to match anything, but wh

Re: [EMAIL PROTECTED] Thanks ALOT!!!

2008-10-10 Thread Brian Mearns
> Where can I learn the basic concept of these Rewrite methods? I mean > before learning the sytax.. I would like to know whats the server is doing > while output the page page :] The online doc is always a great place to start. For basics on how apache decides where the file comes from, see http:

Re: [EMAIL PROTECTED] Managed! thanks

2008-10-14 Thread Brian Mearns
Pleas try to avoid changing the subject line when following up on a message. It gets very confusing to keep track of the threads. Thanks! -Brian On Tue, Oct 14, 2008 at 4:14 PM, MierMier <[EMAIL PROTECTED]> wrote: > > > > MierMier wrote: >> >> >> >> MierMier wrote: >>> >>> Hey people, I need your

Re: [EMAIL PROTECTED] Redirect/ReWrite config for multiple domains to different pages

2008-10-15 Thread Brian Mearns
If customer1's_domain.com and customer2's_comain.com are DNS entries to your server, then your solution can be found in VirtualHosts. This setup allows you to use different configurations depending on the hostname the client the provides when they connect. In this case, you can just set up the appr

[EMAIL PROTECTED] Determine file system directory in DirectoryIndex script

2008-10-15 Thread Brian Mearns
Using the DirectoryIndex directive, I understand you can specify a non-relative file path, for instance /var/www/index_for_all.php. My question is this: is there a way to find out the system path for the directory being indexed from within that file? I know I can get the requested URL and various r

Re: [EMAIL PROTECTED] Rewriting URLs to remove .html extension

2008-10-15 Thread Brian Mearns
It looks like %{REQUEST_FILENAME} is the /full/ system path to the file, so I think the %{DOCUMENT_ROOT} is incorrect there. I'm not familiar with RewriteCond's, but personally I would try removing the DOCUMENT_ROOT from that condition. Good luck. -Brian On Wed, Oct 15, 2008 at 12:29 PM, François

Re: [EMAIL PROTECTED] Please reply ...Requesting Counting = Round Robin ???

2008-10-17 Thread Brian Mearns
Sorry, I don't know the answer to your question, but as a bit of friendly advice, subject lines line "Please Answer", "Need Help", and other variations are often anti-effective. The fact that you're contacting the list means that you want help, so specifying it in the subject is redundant and tends

Re: [EMAIL PROTECTED] how to uninstall httpd-2.2.10

2008-10-23 Thread Brian Mearns
I think it will probably depend on your set up, actually. For instance, if you set your prefix to /usr/local or something like that, then you obviously don't want to just delete that whole thing, but apache will have installed things through out various folders under there. Not sure if there's some

Re: [EMAIL PROTECTED] Running programs...

2008-11-06 Thread Brian Mearns
Can you run the program from the server itself? I.e., don't use a web browser or GUI, just go the command line and try to run the program. It sounds like it is running, but failing (or at least failing to do what you expect). Off hand, I'd guess this is a problem with the program, not apache or you

Re: [EMAIL PROTECTED] How to connect from a remote machine

2008-11-22 Thread Brian Mearns
Each network connection on your Server machine has an IP address associated with it, which you can connect to. If the machine is connected to a LAN, then you can connect to the server FROM WITHIN THE LAN by using the IP address of the network adapter that connects it to the LAN. If you want to con

Re: [EMAIL PROTECTED] How to connect from a remote machine

2008-11-23 Thread Brian Mearns
Just so there's no confusion, I believe what André is saying is that if its not part of a network, then you can't connect to it, however the Internet is a network, so if you're connected to that, you're fine. -Brian On Sun, Nov 23, 2008 at 8:35 AM, André Warnier <[EMAIL PROTECTED]> wrote: > Alber

Re: [EMAIL PROTECTED] How to connect from a remote machine

2008-11-24 Thread Brian Mearns
You said you don't have a router, correct? So there's no port forwarding you can do. However, there's a very good chance that your ISP is blocking port 80. To start with, have your friend open a command prompt and try to ping your machine: simply type the command ping, followed by a space and your

Re: [EMAIL PROTECTED] Repost: is this the right list ??? Need "configure" directive to static link libssl.a on AIX 5.3

2008-11-24 Thread Brian Mearns
Sorry, I can't help you, but yes, this is the write lis, so hopefully someone else can. -Brian On Mon, Nov 24, 2008 at 10:47 AM, Bennett, Tony <[EMAIL PROTECTED]> wrote: > Version:Apache httpd version 2.2.10 > Platform: AIX 5.3 > Compiler: IBM "C" for AIX version 8.0 > SSL

Re: [EMAIL PROTECTED] How to connect from a remote machine

2008-11-24 Thread Brian Mearns
anything. Most sensible firewalls nowdays block pings. > > Albert Joseph wrote: >> >> Brian Mearns, >> >> I think there is something wrong in the IP address I am using. I asked my >> friend to ping the IP address I got from www.whatismyip.com, he couldn't get &g

Re: [EMAIL PROTECTED] File upload to Apache server without third party software

2008-12-02 Thread Brian Mearns
Well, It's very possible you know something I don't, but based on my understanding on POST, it sounds like you're confused about how it works. The use case I'm familiar with is to create a cgi script, or a server side script like PHP that receives the POST data and saves it to a file. And you're ri

Re: syntax error

2008-12-15 Thread Brian Mearns
Just off the top of my head, try changing the Listen directive from Listen 80 to Listen 127.0.0.1:80 -Brian -- Feel free to contact me using PGP Encryption: Key Id: 0x3AA70848 Available from: http://pgp.mit.edu/ On Mon, Dec 15, 2008 at 10:33 AM, James Taylor-Bye wrote: > This is the complete

Re: apache

2008-12-15 Thread Brian Mearns
Sorry, I can't help with your problem, I just wanted to give a little friendly advice about posting to the mailing list: The subject of your email is "apache", which has an entropy of almost 0. That is to say, it conveys no information about what your problem is because the fact that you're writing

Re: Hide Directory

2008-12-17 Thread Brian Mearns
What exactly is it you're trying to do? Do you want, no matter what "page" the user is viewing, it will always have a URL of just www.yoursite.com? If that's the case, I think you're basically looking to recreate a simple webserver in server side scripting. In other words, you would need to write a

Re: Hide Directory

2008-12-18 Thread Brian Mearns
I guess if you want to do things the easy way. =J -Brian -- Feel free to contact me using PGP Encryption: Key Id: 0x3AA70848 Available from: http://pgp.mit.edu/ On Thu, Dec 18, 2008 at 1:16 AM, Morgan Gangwere <0.fracta...@gmail.com> wrote: > http://sonof.bandit.name/ > Member, INCOSE [ incos

Segfaults with SSLSessionCache

2008-12-18 Thread Brian Mearns
If I configure the SSLSessionCache directive to anything other than none or nonenotnull, I get a Seg fault reported in the error log when I try an HTTPS access, and my browser reports that the connection was interrupted while negotiating a connection. It works fine when I remove the directive, or s

Re: [us...@httpd] Use Apache as proxy to redirect requests

2008-12-24 Thread Brian Mearns
You'll probably want to use mod_proxy. There's a whole section on it in the manual: http://httpd.apache.org/docs/2.2/mod/mod_proxy.html -- Feel free to contact me using PGP Encryption: Key Id: 0x3AA70848 Available from: http://pgp.mit.edu/ On Tue, Dec 23, 2008 at 6:19 PM, giovanni.forme...@lib

Re: [us...@httpd] Issue in apache service

2008-12-24 Thread Brian Mearns
And what exactly do you mean by not being able to see the site? Does you browser say it can't connect? That it can't find the site? Does it connect and nothing shows up? There could be a million things causing problems, please be more specific about the symptoms so we can try to help you. -Brian

Re: [us...@httpd] 301 Redirect problem on Apache 2.0.50

2009-01-06 Thread Brian Mearns
No, it sounds like you're attempting to do what is already being done. As Krist said, any of those urls you specified will cause Apache to invoke PHP for topic-guide.php, passing the URL specified section value in the $_GET super global. To illustrate this, just create a file on your server, say t

[us...@httpd] Idea for SSL with name-based Vhosts using two servers, mod_rewrite, and mod_proxy

2009-01-07 Thread Brian Mearns
I know everyone always asks about having name-based-virtual hosts with a secure connection, and I understand why it's not currently possible. So I was thinking of ways around this, and I came up with a little something. I haven't tested it yet, but I'm curious what people think. The idea is to hav

Re: [us...@httpd] Idea for SSL with name-based Vhosts using two servers, mod_rewrite, and mod_proxy

2009-01-07 Thread Brian Mearns
On Wed, Jan 7, 2009 at 10:13 AM, Davide Bianchi wrote: > Brian Mearns wrote: >> for secure http support. The frontend server can then use rewrite >> conditions to check the http Host header, and rewrite rules with the > > And how can he check the host header if the request

Re: [us...@httpd] Idea for SSL with name-based Vhosts using two servers, mod_rewrite, and mod_proxy

2009-01-08 Thread Brian Mearns
On Thu, Jan 8, 2009 at 1:28 AM, Krist van Besien wrote: > On Wed, Jan 7, 2009 at 4:27 PM, Brian Mearns wrote: > >> Right, which I guess is a big problem for most use cases. For me, my >> certificate is self-signed anyway, and I already use it for multiple >>

Re: [us...@httpd] Idea for SSL with name-based Vhosts using two servers, mod_rewrite, and mod_proxy

2009-01-08 Thread Brian Mearns
On Thu, Jan 8, 2009 at 8:03 AM, Bruno - e-comBR wrote: > I think a bank site or a "big e-business site" won't HAVE TO use > virtual servers using another domains. > > And I also think a "common site" don't need SSL. I use SSL/TLS for privacy on my site, not for authentication per se, which is why

Re: [us...@httpd] Idea for SSL with name-based Vhosts using two servers, mod_rewrite, and mod_proxy

2009-01-08 Thread Brian Mearns
On Thu, Jan 8, 2009 at 9:23 AM, Eric Covener wrote: > On Thu, Jan 8, 2009 at 8:45 AM, Brian Mearns wrote: >> Is that possible if I want to serve both secure and unsecure (80 and >> 443)? If I just setup my root configuration (i.e., not in a vhost) to >> listen on port 80 an

Re: [us...@httpd] Idea for SSL with name-based Vhosts using two servers, mod_rewrite, and mod_proxy

2009-01-08 Thread Brian Mearns
On Thu, Jan 8, 2009 at 10:06 AM, Frank Gingras wrote: > In a scenario where you have two vhosts on *:443, apache will serve the > certificate from the first vhost for both sites, therefore generating a SSL > certificate mismatch if a client were to request content from the second > vhost, and so o

Re: [us...@httpd] Setting DirectoryIndex to a Location?

2009-01-09 Thread Brian Mearns
I believe DirectoryIndex is what you're looking for: http://httpd.apache.org/docs/2.2/mod/mod_dir.html#directoryindex The directive takes a local url as the argument. Yours, I guess, would be simply DirectoryIndex /eumel/linch I'll give you a heads up though, you may have difficulty figuring out

Re: [us...@httpd] Setting DirectoryIndex to a Location?

2009-01-09 Thread Brian Mearns
On Fri, Jan 9, 2009 at 9:26 AM, Michael Ludwig wrote: > I thought so, too. I had tried, unsuccessfully: > > DirectoryIndex linch (Note that I believe without a leading slash, this will look append "/linch" to whatever address the user has entered, e.g., server.com/foo will become server.com/foo/

Re: [us...@httpd] Apache abending in Dreamweaver and not serving test pages

2009-01-09 Thread Brian Mearns
On Fri, Jan 9, 2009 at 2:48 PM, Paul Prescod wrote: > For those without a background in IBM or Novell terminology, abend > means crash. ;) Abnormally end? -- Feel free to contact me using PGP Encryption: Key Id: 0x3AA70848 Available from: http://pgp.mit.edu/ ---

Re: [us...@httpd] Setting DirectoryIndex to a Location?

2009-01-09 Thread Brian Mearns
On Fri, Jan 9, 2009 at 11:53 PM, Brian Hayward wrote: > unsubscribe > > - > The official User-To-User support forum of the Apache HTTP Server Project. > See http://httpd.apache.org/userslist.html> for more info. > To unsubscribe,

Re: [us...@httpd] Apache and Port 80 and 443

2009-01-13 Thread Brian Mearns
No, there's quite a bit more than that if you want to use secure HTTP. The standard is to use mod_ssl to set up SSL/TLS support. It's not too difficult, but there's quite a bit of details. I highly suggest you read all the way through the documentation starting with the overview at http://httpd.apa

Re: [us...@httpd] Apache and Port 80 and 443

2009-01-13 Thread Brian Mearns
> On Mon, Jan 12, 2009 at 8:36 PM, Jason Todd Slack-Moehrle > wrote: >> HI All, >> >> I have a new Mac Pro that will be hosting my "web presence". >> >> I am running Apache2 and I have everything working on one IP. >> >> I want to run my online store on a separate IP and NIC and port 443. >> >> So

Re: [us...@httpd] Serving default error pages after CGI?

2009-01-13 Thread Brian Mearns
On Tue, Jan 13, 2009 at 7:21 AM, Eric Covener wrote: > On Tue, Jan 13, 2009 at 7:11 AM, Sacha Varma wrote: >> I've been unable to google up the answer to this, so if anyone can help it >> would be much appreciated. >> >> The CGI standard (RFC 3875, 6.3.3) allows a CGI script to output an HTTP >>

Re: [us...@httpd] animated gif play or no play?

2009-01-14 Thread Brian Mearns
On Tue, Jan 13, 2009 at 6:16 PM, PJ wrote: > Here's a weird one: the exact same animated gif plays fine on my local > server when addressed directly to the file - but it does not play on the > virtual site on the local server. > > In other words, http://my_server/ptahhotep/images/email1.gif plays

Re: [us...@httpd] Re: Can I just compile once and copy the installed server to multi machines?

2009-01-14 Thread Brian Mearns
On Wed, Jan 14, 2009 at 8:21 AM, Dan Poirier wrote: > Dan Poirier writes: > >> The compiled-in default paths can't be changed, but you can use a >> configuration file that sets a different ServerRoot and that should >> override the defaults for most paths. You might run into a few other >> paths

Re: [us...@httpd] FOSSkriti- FOSS mini -conference ,India

2009-01-14 Thread Brian Mearns
On Wed, Jan 14, 2009 at 11:01 AM, zakir ahmed wrote: > Hi , > > We are a bunch of students at the Indian Institute of Technology > Kanpur,India , organizing FOSSkriti [1]. FOSSkriti is a mini-conference > aimed at students in India with the aim of making open source software,open > standards more

Re: [us...@httpd] ReWrite woes

2009-01-14 Thread Brian Mearns
On Wed, Jan 14, 2009 at 2:45 PM, Sheldon Ross wrote: > Thanks, I've tried several variations on the rule. > > Am I correct in thinking there should be some mod_rewrite log, or at > least mention of it in one of the logs? > Yes, you can specify the path to the rewrite log file with the RewriteLog

Re: [us...@httpd] apache 2.0.52

2009-01-15 Thread Brian Mearns
Sorry, I can't provide any help with your problem, but in the future, please use more descriptive subject lines. Specifyng in the body of your message what version you're using is always good, but it doesn't make a very helpful subject line. You're more likely to get [helpful] responses if your sub

Re: [us...@httpd] Satisfy any & Basic authorization

2009-01-15 Thread Brian Mearns
On Thu, Jan 15, 2009 at 8:51 AM, Jan Hoskens wrote: > Hi all, > > After some digging in the Apache docs I managed to come up with the > following configuration snippet to secure my whole server excluding one > directory: > > > Order deny,allow > Allow from all > Satisfy any > ProxyPass http:/

Re: [us...@httpd] Satisfy any & Basic authorization

2009-01-15 Thread Brian Mearns
On Thu, Jan 15, 2009 at 9:18 AM, Jan Hoskens wrote: > Thanks for the suggestion, but switching the order of the location tags > didn't work either... > > Kind Regards, > Jan > > On Thu, 2009-01-15 at 09:09 -0500, Brian Mearns wrote: >> On Thu, Jan 15, 2009 at 8:51

[us...@httpd] mod_ssl Client authentication question

2009-01-16 Thread Brian Mearns
I just want to double check some things because I implement ssl client auth on my server, to make sure I really understand what I'm doing: First, if I use SSLRequire to check various fields in a client's certificate, is it implied that the certificate has already been verified as signed by one of

Re: [us...@httpd] mod_ssl Client authentication question

2009-01-16 Thread Brian Mearns
On Fri, Jan 16, 2009 at 8:51 AM, Eric Covener wrote: >> Second, I was trying to test the above question by creating >> self-signed certs, adding them to my browser, and making sure the >> server would not authenticate them. But when I did, my browser >> (Firefox) didn't even provide them as an opt

Re: [us...@httpd] mod_ssl Client authentication question

2009-01-16 Thread Brian Mearns
On Fri, Jan 16, 2009 at 8:48 AM, Peter Schober wrote: > * Brian Mearns [2009-01-16 14:40]: >> First, if I use SSLRequire to check various fields in a client's >> certificate, is it implied that the certificate has already been >> verified as signed by one o

Re: [us...@httpd] SSL-cert based User-Auth

2009-01-16 Thread Brian Mearns
On Fri, Jan 16, 2009 at 10:27 AM, Andre Hübner wrote: > Hello, > > today i heared of this topic of authenticating users by their client certs. > ( I think establishing ssl-connect with mysql works like this) > Can this be done with apache or additional moduls? I do not really know how > to search

Re: [us...@httpd] generic enquiry about rendering zipped content

2009-01-16 Thread Brian Mearns
On Fri, Jan 16, 2009 at 2:24 PM, André Warnier wrote: > Hi. > > Question : > > What exact form would a HTTP response need to have, for the browser to > correctly interpret that the response it is getting is a document (for > example an OpenOffice document or an email in eml format), but which has

Re: [us...@httpd] IE7 Client Auth with SSL Certs

2009-01-18 Thread Brian Mearns
On Sun, Jan 18, 2009 at 9:09 AM, Eray Aslan wrote: > I cannot get IE7 Windows Vista clients to authenticate with SSL Certs. > Browser lets me choose the certificate but results in "Cannot display > the web page..". Server logs just the generic: > > Jan 18 14:00:01 sunny apache2-TL: 62.x.x.x - - [

Re: [us...@httpd] Location based auth

2009-01-19 Thread Brian Mearns
On Mon, Jan 19, 2009 at 4:58 PM, Sheldon Ross wrote: > I can't seem to find information on using password authentication within > a tag. > > I've used .htaccess files in directories, but I'm using mod_jk to > connect to tomcat and a status worker, and would like to restrict access > to the status

Re: [us...@httpd] mod_ssl Client authentication question

2009-01-20 Thread Brian Mearns
On Tue, Jan 20, 2009 at 2:30 AM, Sean Conner wrote: > It was thus said that the Great Brian Mearns once stated: >> I just want to double check some things because I implement ssl client >> auth on my server, to make sure I really understand what I'm doing: >> >&g

Re: [us...@httpd] A critical .htaccess problem

2009-01-20 Thread Brian Mearns
On Mon, Jan 19, 2009 at 11:41 PM, J. Bakshi wrote: > Craig Huffstetler wrote: >> Krist is correct - you need to make sure Subversion a Virtual Host. >> I'm including a few instructions as I'm sure you're all set on >> Subversion and Apache. If you're still having problems let us know. > > Hello Cr

Re: [us...@httpd] mod_ssl Client authentication question

2009-01-20 Thread Brian Mearns
On Tue, Jan 20, 2009 at 1:59 PM, Sean Conner wrote: > It was thus said that the Great Brian Mearns once stated: >> >> Thanks for the detailed response, Sean. I'm still not entirely clear >> on one thing, though: If I created my own certificate and gave the the &g

Re: [us...@httpd] One host, two SSL sites

2009-01-20 Thread Brian Mearns
On Tue, Jan 20, 2009 at 3:17 PM, John Oliver wrote: > If it would turn out to be easier to do this another way, that's fine. > But I remember it as always having been a no-no to even try to get SSL > working with VirtualHosts. > Not at all, it's really just name based vhosts that cause problems f

Re: [us...@httpd] A critical .htaccess problem

2009-01-21 Thread Brian Mearns
On Wed, Jan 21, 2009 at 1:07 AM, J. Bakshi wrote: > Brian Mearns wrote: >> >> Let's start with the obvious question first: how are you trying to >> access SVN outside the LAN? You've configured your repos location to >> only require SSL for certain methods,

Re: [us...@httpd] A critical .htaccess problem

2009-01-21 Thread Brian Mearns
On Wed, Jan 21, 2009 at 1:07 AM, J. Bakshi wrote: > Brian Mearns wrote: >> >> Let's start with the obvious question first: how are you trying to >> access SVN outside the LAN? You've configured your repos location to >> only require SSL for certain methods,

Re: [us...@httpd] A critical .htaccess problem

2009-01-23 Thread Brian Mearns
On Wed, Jan 21, 2009 at 11:19 PM, J. Bakshi wrote: > Brian Mearns wrote: >> On Wed, Jan 21, 2009 at 1:07 AM, J. Bakshi wrote: >> >>> Brian Mearns wrote: >>> >>>> Let's start with the obvious question first: how are you trying to >>>

Re: [us...@httpd] UserDir + SetHandler cgi-script broken? (Apache 2.0.52)

2009-01-23 Thread Brian Mearns
On Thu, Jan 22, 2009 at 8:16 PM, Buck Golemon wrote: > I've already posted this on alt.apache.configuration, but this forum seems > much > more active. I'm sorry if this is double-posting. I'm not sure of the > etiquette... > > --- > I can't get "SetHandler cgi-script" to work from inside a UserD

Re: [us...@httpd] content handler question

2009-01-23 Thread Brian Mearns
On Fri, Jan 23, 2009 at 8:47 AM, anson ho wrote: > One more to mention is, I am using apache 1.3. > > Thanks > > On Fri, Jan 23, 2009 at 9:27 PM, anson ho wrote: >> Can you give me more hint as I am pretty new to apache >> >> Thanks >> >> On Fri, Jan 23, 2009 at 9:18 PM, Eric Covener wrote: >>>

Re: [us...@httpd] content handler question

2009-01-23 Thread Brian Mearns
On Fri, Jan 23, 2009 at 11:09 AM, anson ho wrote: > I have no way to upgrade apache as the content handler (a third party > one) only support apache 1.3. So, is there any other ways that I can > modify the response headers that were returned from the content > handler. I've read mod_headers but it

Re: [us...@httpd] Ip based virtual hosts stopped working

2009-01-23 Thread Brian Mearns
On Fri, Jan 23, 2009 at 12:15 PM, Jim Price wrote: > Yes it was working before. Can't be absolutely sure when it stopped working. > Could have been when openssl was upgraded or could have been when os patches > were added to the system. I am using direct configuration on the main > httpd.conf.

  1   2   3   >