Re: [go-nuts] Clarification on code snippet

6:39 PM burak serdar wrote: > >> >> >> On Fri, Aug 4, 2023 at 10:33 AM alchemist vk >> wrote: >> >>> Hi folks, >>> In below code, I am invoking receiver api show() via a simple uInteger >>> type variable instead of pointer, by which it

[go-nuts] Clarification on code snippet

Hi folks, In below code, I am invoking receiver api show() via a simple uInteger type variable instead of pointer, by which it expects to be invoked . Go being strict with type casing and I was expecting a compiler error. But to my surprise, it compiled and executed successfully. Can you folks

[users@httpd] Stop executing ProxyPassMatch when error is set

Hi All, I configured reverse proxy for /test/api as below: ProxyPassMatch ^/(test/api) unix:/run/testservice/http.socket| http://localhost . But my question is, if for some reason, /test/api gets authenticated and auth module sets the value as 401, then how do I stop it from forwarding the

Re: [users@httpd] Aliasing file whose requests are proxied

Thanks Eric for your input. It really worked.. With Regards, Venkatesh On Thu, Feb 3, 2022 at 9:51 PM Eric Covener wrote: > On Thu, Feb 3, 2022 at 11:15 AM alchemist vk > wrote: > > > > Hi All, > > I have set of url which needs to proxied and its working fine. Belo

[users@httpd] Aliasing file whose requests are proxied

Hi All, I have set of url which needs to proxied and its working fine. Below is the configuration of the same. ProxyPassMatch ^/(abcd) unix:/run/testserver/http.socket|http://localhost . Here any request which starts with abcd are getting proxied to testserver service and content getting served

Re: [users@httpd] Regarding CVE-2021-40438

Nick Folino wrote: > Nobody here is going to tell you how to exploit vulnerabilities. > If you can't figure it out by reading the code then upgrade to the fixed > version. > > Nick > > On Tue, Oct 19, 2021 at 2:49 AM alchemist vk > wrote: > >> Hi All, >

[users@httpd] Regarding CVE-2021-40438

Hi All, I understand that, CVE-2021-40438 is fixed in httpd release 2.4.50 onwards. But I would like to know more about, how this issue can be exploitable in prior versions and can I know the commit id/patch details for this issue. Tried looking into commit details in github apache repo, but

Re: [users@httpd] Httpd is hanging intermittently

n Fri, Sep 24, 2021 at 9:14 AM alchemist vk > wrote: > >> Thanks Dewitt for very thorough and insightful explanation. We are using >> Yocto packaged linux version with openssl version being OpenSSL 1.1.1k-fips >> 25 Mar 2021. >> >> With Regards, >> Venka

Re: [users@httpd] Httpd is hanging intermittently

is directed towards improving overall reliability > and adaptability while minimizing the barriers to using haveged for other > tasks. > > What OS are you using? Redhat CentOS etc . . . > > > On Thu, Sep 23, 2021 at 2:06 PM alchemist vk > wrote: > >> Thanks Dewitt f

Re: [users@httpd] Httpd is hanging intermittently

t; or load *virtio_rng *kernel module. > As I said before I am not sure how you will fix this without generating > more entropy, it seems the system is unable to create enough and > there is no way around this. > > > On Thu, Sep 23, 2021 at 1:15 AM alchemist vk > wrote: > &g

Re: [users@httpd] Httpd is hanging intermittently

> That may solve your problem. > > On Wed, Sep 22, 2021 at 2:11 PM alchemist vk > wrote: > >> Hi All, >> We are using httpd version 2.4.46 and its working fine for a long time. >> But recently, we started seeing an issue where apache hangs indefinitely >> even whe

Re: [users@httpd] RE: [EXTERNAL] [users@httpd] Httpd is hanging intermittently

> > john.p.ore...@medtronic.com > > > > *From:* alchemist vk > *Sent:* Wednesday, September 22, 2021 2:09 PM > *To:* users@httpd.apache.org > *Subject:* [EXTERNAL] [users@httpd] Httpd is hanging intermittently > > > > Hi All, > > We are using httpd version 2.4

[users@httpd] Httpd is hanging intermittently

Hi All, We are using httpd version 2.4.46 and its working fine for a long time. But recently, we started seeing an issue where apache hangs indefinitely even when the system is in idle state. And when apache hangs, I see below entries in error_log: [Tue Sep 21 22:05:53.243013 2021] [ssl:warn]

Re: [users@httpd] Avoiding host header exploit in apache

ago 2021 a las 10:42, alchemist vk > () escribió: > > > > Hi All, > > I am running Apache 2.4.46 and below is the problem statement. > > system IP: 10.10.10.10 > > Client IP: 10.10.10.20 > > > > When I make a request like curl -vk 'https://10.1

[users@httpd] Avoiding host header exploit in apache

Hi All, I am running Apache 2.4.46 and below is the problem statement. system IP: 10.10.10.10 Client IP: 10.10.10.20 When I make a request like *curl -vk 'https://10.10.10.10 ' -H "Host: badsite.com "*, its redirecting to

Re: [users@httpd] Re: Overwriting redirect status code

^.*$ - [R=404,L]*), but it does not reflect properly as I mentioned in my first post. On Fri, Aug 13, 2021 at 8:03 PM Paul A wrote: > On 2021-08-13 9:59 a.m., alchemist vk wrote: > > Hi Eric, thanks for response. > > I dont think its getting generated from any other external redirect

Re: [users@httpd] Re: Overwriting redirect status code

: > On Fri, Aug 13, 2021 at 12:54 AM alchemist vk > wrote: > > > > Any suggestions on above query? > > I think the redirect comes from another part of the configuration. > Neither R=404 nor ErrorDOcument /... gen

[users@httpd] Re: Overwriting redirect status code

Any suggestions on above query? On Wed, Aug 11, 2021 at 2:21 PM alchemist vk wrote: > Hi All, > As per https://httpd.apache.org/docs/2.4/rewrite/flags.html, [R] flag > can be used to redirect to new location, along with overwriting default 302 > status code. > I fo

[users@httpd] Overwriting redirect status code

Hi All, As per https://httpd.apache.org/docs/2.4/rewrite/flags.html, [R] flag can be used to redirect to new location, along with overwriting default 302 status code. I followed the same and with below configuration, RewriteCond %{REQUEST_URI} ^/abcd ErrorDocument 404 /test_error_404.json

Re: [users@httpd] Configuring KeepAliveTimeout to individual URIs

Hi Eric, I agree with you.. "keepalive timeout is n/a in the middle of a response". WR A On Wed, Oct 7, 2020 at 5:58 PM Eric Covener wrote: > On Wed, Oct 7, 2020 at 7:54 AM alchemist vk > wrote: > > > > Hi Eric, > > Thanks for response.. > > To

Re: [users@httpd] Configuring KeepAliveTimeout to individual URIs [EXT]

en create a unique URL which will fetch the data/or say > comeback later > - You then have a ticker in the page which retrieves the data > via AJAX or just waits till ready and redirects > > > > > > *From:* alchemist vk > *Sent:* 07 October 2020

Re: [users@httpd] Configuring KeepAliveTimeout to individual URIs

taking more than 60 and hence apache returns 503. As a trial, Increased the KeepAliveTimeout to 300 and its working fine always. WR A On Wed, Oct 7, 2020 at 4:58 PM Eric Covener wrote: > On Wed, Oct 7, 2020 at 6:53 AM alchemist vk > wrote: > > > > Hi All, > > I have a requi

[users@httpd] Configuring KeepAliveTimeout to individual URIs

Hi All, I have a requirement where serving GET on few URIs whose payload is large takes more than 1min compared to our configured "KeepAliveTimeout 60" directive. And this is resulting in 503 error to clients. Is there a way where I can group few URIs and increase KeepAliveTimeout to 300 secs ?

[users@httpd] HTTP 3 support in apache

Hi all, I would like to know, when we can have HTTP3 support in apache webserver stack. I know that apache not yet committed an affirmative date for support, but even if it is tentative also, it's helpful to me. Pls share the same if anyone has this info. With Regards, Venkatesh

[users@httpd] Differentiating between normal and redirect uri

Hi All, I have an requirement like, new uris needs to redirected to legacy uris. Fox ex: when uri foo/new arrives, it needs to redirected to foo/old and pass it to backend providers. I used below Rewrite rule to make this happen and its absolutely working fine. RewriteRule ^.*$

[users@httpd] Re: Returning customized error message when LimitRequestLine value exceeds

ive, but of no luck.. Help me in this regard. With regards, A On Mon, Aug 3, 2020 at 6:25 PM alchemist vk wrote: > Hi All, > Any help is appreciated .. > Please let me know, how to handle above issue. > > With Regards, > A > > On Fri, Jul 31, 2020 at 7:10 PM alchemist vk

[users@httpd] Re: Returning customized error message when LimitRequestLine value exceeds

Hi All, Any help is appreciated .. Please let me know, how to handle above issue. With Regards, A On Fri, Jul 31, 2020 at 7:10 PM alchemist vk wrote: > Hi All, > If I set LimitRequestLine to 128 and If I give any request field whose > length is more than 128, apache returns 400 ba

[users@httpd] Returning customized error message when LimitRequestLine value exceeds

Hi All, If I set LimitRequestLine to 128 and If I give any request field whose length is more than 128, apache returns 400 bad request with default xml error response as below. < HTTP/1.1 400 Bad Request < Content-Length: 278 < Connection: close < Content-Type: text/html; charset=iso-8859-1 <

Re: [users@httpd] apache config check for non available field in request

Thanks Eric for your response. Your suggestion : RewriteCond %{HTTP:Content-Type} '"" worked like a charm.. You made my day.. Thanks you again.. With Regards, A On Thu, Jul 30, 2020 at 6:28 PM Eric Covener wrote: > On Thu, Jul 30, 2020 at 8:38 AM alchemist vk > w

[users@httpd] apache config check for non available field in request

Hi All, Consider the request curl -vk -X POST -H "Del-Auth: abcd" ' 127.0.0.1/test/newuser' where I intentionally wont provide content type header for new user creation. While trying to write apache config file to check the presence of content-type field in request header, I am not able to do

Re: [users@httpd] Need Apache to return multiple error doc

Richard/All, I am trying to implement what you suggested.. But somehow its not working and unable to restart apache after making my changes. If possible, can you provide one short example code snippet . Thanks in advance, Venkatesh On Fri, Jul 12, 2019 at 10:41 PM alchemist vk wrote

Re: [users@httpd] Need Apache to return multiple error doc

Thanks Richard for suggestion. I will surely try on working out this. Thanks again for your time and help. With Regards, Venkatesh On Fri, Jul 12, 2019 at 7:47 PM Richard wrote: > > > Date: Thursday, July 11, 2019 11:48:38 +0530 > > From: alchemist vk > > >

[users@httpd] Need Apache to return multiple error doc

Hi all, I have a requirement where I need send different error docs for same error code depending upon specific error returned by application.. For example, if application returns 400,it means error may be due to non availability of query param or url doesn't have mandatory fields etc,and

[users@httpd] Re: Comparing values in RewriteCond directive

Hi everyone, able to resolve above issue with below rules: RewriteCond %{REQUEST_URI} ^example.com(.*).(?!\1$) RewriteRule ^.*$ - [R=404,L] With Regards, Venkatesh On Fri, Oct 12, 2018 at 8:39 AM alchemist vk wrote: > Hi All, >I have one test uri 'http://example.com/test1.test2'.

[users@httpd] Comparing values in RewriteCond directive

Hi All, I have one test uri 'http://example.com/test1.test2'. How I can fetch uri components test1 and test2 and compare them via RewriteCond directive?.. I tried like below: RewriteCond {REQUEST_URI} http://example.com/(.*)\.(.*) RewriteCond $1!=$2 But getting syntax error saying

Re: [users@httpd] Unable to set ciphers string with space separated in apache

Thanks William for your valuable response. It helped a lot in understanding httpd parsing. Really appreciate your time and knowledge. With Regards, Venkatesh On Thu, Sep 6, 2018 at 8:31 PM, William A Rowe Jr wrote: > On Wed, Sep 5, 2018 at 10:11 PM, alchemist vk > wrote: > >

Re: [users@httpd] Unable to set ciphers string with space separated in apache

rely don't want that. > > On Sat, Aug 25, 2018, 20:05 alchemist vk wrote: > >> Hi All, >> >> openssl standard says " The cipher list consists of one or more *cipher >> strings* separated by colons. Commas or spaces are also acceptable >> separators but colons are n

[users@httpd] Unable to set ciphers string with space separated in apache

Hi All, openssl standard says " The cipher list consists of one or more *cipher strings* separated by colons. Commas or spaces are also acceptable separators but colons are normally used". But apache says "directive uses a *colon-separated* *cipher-spec* string consisting of OpenSSL cipher

Re: [users@httpd] Mapping file name to uri dynamically

_URI} ^/example/test\.xml/?$ How i can write RewriteRule to map test.xml to temp.xml? With Regards, Venkatesh On Thu, Aug 23, 2018 at 7:48 AM, Eric Covener wrote: > On Wed, Aug 22, 2018 at 10:05 PM alchemist vk > wrote: > > > > I got a scenario where a single file present i

[users@httpd] Mapping file name to uri dynamically

I got a scenario where a single file present in directory generated with different names in different points of time. How can I map this dynamically name changing file to specific uri all the time? To summarize, uri remains same always but file name changes dynamically. With Regards, Venkatesh