Re: Static vs. Shared module precedence was Re: ap_sub_req_lookup_uri(r-uri, r, NULL)-content_type always returns 'text/plain'?

2009-11-15 Thread ohaya

 Eric Covener cove...@gmail.com wrote: 
  Is the problem that the original Apache was on a 64-bit system?
 
  Could the Apache API on the 64-bit system be behaving differently than on a 
  32-bit system?
 
 Seems unlikely. I also checked and mod_limitipconn and mod_mime don't
 even operate in the same hook.
 
 Perhaps see the comments in mid_dir's usage of ap_sub_req_lookup_uri()?
 
 -- 
 Eric Covener
 cove...@gmail.com


Eric,

I'm not clear what you meant by:

Perhaps see the comments in mid_dir's usage of ap_sub_req_lookup_uri()?.

Did you mean mod_dir?

Jim


May have found the culprit was Re: ap_sub_req_lookup_uri(r-uri, r, NULL)-content_type always returns 'text/plain'?

2009-11-15 Thread ohaya
Hi,

With further testing, I think that I've identified that mod_limitipconn is not 
able to get the Content-Type/content_type when the URL is being proxied to a 
WebLogic server via a plugin/module that comes with WebLogic (the WebLogic 
Plugin for Apache).

[NOTE: mod_limitipconn still DOES get the correct content_type for other URLs 
that are NOT being proxied by the WebLogic Plugin.]

I've tried changing the LoadModule order, so that mod_limitipconn is both 
before and after the WebLogic plugin/module in httpd.conf, and the order 
doesn't seem to matter.

I guess that this might take this thread slightly off-topic, except that I 
still don't understand why mod_limitipconn can't get the content_type, 
especially since the LoadModule order doesn't seem to affect things :(...

Jim


[OT] ajusting apache timeout

2009-11-15 Thread Sam Carleton
I am working on a Axis2/C module that is hosted by Apache 2.2.  The client
is .Net 3.5.  I have set the SendTimeout on the .Net binding to 10 minutes
but things are still timing out in about 30 seconds.  I am wondering if
anyone in this forum has run into timeout problems that where fixed by
modifiying Apache's configuration.

Sam


Re: Preventing the use of chunked TF encoding while content-filtering

2009-11-15 Thread Christoph Gröver

Hello Anthony,

 I had a mod_buffer module written for me by Konstantin Chuguev
 (konstan...@chuguev.com) which collects chunks and buffers them for
 transfer in one shot. You should contact him and see whether he'll
 give/license it to you.

Thank you for your answer.

Does this mean that collecting the chunks and transfering them in one
shot will solve my problem?

Do you know for sure that by this I will be able to circumvent the use
of chunked transfer encoding?

I will program it myself, but I wanted to be sure that this will help
before I start implementing it.

Bye

-- 
Christoph Gröver, gro...@sitepark.com
Sitepark GmbH, Gesellschaft für Informationsmanagement, AG Münster, HRB
5017 Rothenburg 14-16, D-48143 Münster, Telefon (0251) 48265-50
Geschäftsführer: Dipl.-Phys. Martin Kurze, Dipl.-Des. Thorsten Liebold


Re: [OT] ajusting apache timeout

2009-11-15 Thread Eric Covener
On Sun, Nov 15, 2009 at 3:44 PM, Sam Carleton
scarle...@miltonstreet.com wrote:
 I am working on a Axis2/C module that is hosted by Apache 2.2.  The client
 is .Net 3.5.  I have set the SendTimeout on the .Net binding to 10 minutes
 but things are still timing out in about 30 seconds.

During what?

-- 
Eric Covener
cove...@gmail.com


Re: one remaining mpms-shared quirk

2009-11-15 Thread William A. Rowe Jr.
Jeff Trawick wrote:
 
 I get different results with --with-mpm=worker --enable-mpms-shared...
 
 checking which MPM to use by default... worker
 configure: error: MPM yes does not support dynamic loading.
 configure failed
 
 The --enable-mpms-shared option handling doesn't deal with yes; it
 expects all or a list of space-delimited MPMs.  I'll change it to
 build the default MPM (--with-mpm) as shared when no argument is
 passed on the --enable-mpms-shared option.  (and I guess
 no/--disable... should do nothing, if it doesn't already)

Sorry - yes, I used --with-mpm=worker --enable-mpms-shared=all

sorry I wasn't more explicit


Re: one remaining mpms-shared quirk

2009-11-15 Thread Jeff Trawick
On Sun, Nov 15, 2009 at 4:06 AM, William A. Rowe Jr.
wr...@rowe-clan.net wrote:
 Jeff Trawick wrote:

 I get different results with --with-mpm=worker --enable-mpms-shared...

 checking which MPM to use by default... worker
 configure: error: MPM yes does not support dynamic loading.
 configure failed

 The --enable-mpms-shared option handling doesn't deal with yes; it
 expects all or a list of space-delimited MPMs.  I'll change it to
 build the default MPM (--with-mpm) as shared when no argument is
 passed on the --enable-mpms-shared option.  (and I guess
 no/--disable... should do nothing, if it doesn't already)

 Sorry - yes, I used --with-mpm=worker --enable-mpms-shared=all

hmmm...  no issues here, whether or not the named MPM would be the
default anyway

send me your configure so I can match up the line numbers from your
error messages and also see if the generated code is what I have


 sorry I wasn't more explicit

no problem; it was a good opportunity to realize that something
reasonable should happen with that invocation too


Re: mod_rewrite and mod_fcgid pass wrong fcgi request

2009-11-15 Thread Jeff Trawick
On Sat, Nov 14, 2009 at 3:40 PM, Felipe Alcacibar falcaci...@gmail.com wrote:
 Thanks Jeff for the response.


 I don't know what your rewrite config is, but rewrite isn't required
 to use path info.  Can you post a minimal config that illustrates the
 problem?


 my current configuration of the mod_rewrite and mod_fcgid
 rohan counter # cat /hosting/http/fullplanet.cl/dom/servicio/www/.htaccess
 RewriteEngine on

 RewriteCond $1 
 !^($|index\.php|stock|images|subidas|galerias|css|js|robots\.txt)
 RewriteRule ^(.*)$ /index.php/$1 [L]
 rohan counter # cat /hosting/http/fullplanet.cl/dom/servicio/www/.htaccess
 RewriteEngine on

 RewriteCond $1 
 !^($|index\.php|stock|images|subidas|galerias|css|js|robots\.txt)
 RewriteRule ^(.*)$ /index.php/$1 [L]
 --

 rohan counter # cat /etc/apache2/modules.d/20_mod_fcgid.conf
 IfDefine FCGID
 LoadModule fcgid_module modules/mod_fcgid.so
 FcgidIPCDir /var/run/fcgidsock
 FcgidProcessTableFile /var/run/fcgid_shm

 FcgidMaxRequestsPerProcess 8
 FcgidMaxProcesses 10240
 FcgidMaxProcessesPerClass 1024
 FcgidMinProcessesPerClass 1
 FcgidFixPathinfo 1

 AddHandler fcgid-script .php
 FcgidWrapper /usr/bin/php-cgi .php

 FcgidInitialEnv PHP_FCGI_CHILDREN 8
 FcgidInitialEnv PHP_FCGI_MAX_REQUESTS 1

 FilesMatch \.php$
        Options +ExecCGI
 /FilesMatch

 DirectoryIndex index.php
 /IfDefine

 i using a 307 redirect temporally, but that is the configuration that
 give me this problem.

 as i told before the file that try to open php-cgi is prefixed with
 redirect: string.

This is apparently PR 40781:

https://issues.apache.org/bugzilla/show_bug.cgi?id=40781

I see that one or two people have suggested work-arounds in that PR,
but they don't seem to apply directly to your configuration.  Perhaps
some mod_rewrite experts on the user list can help solve this, with
some adjustment to your mod_rewrite configuration so that in effect
PATH_TRANSLATED doesn't get left with redirect:?

FWIW, changing the FcgidWrapper directive temporarily to point to this
Perl script is helpful for seeing what mod_fcgid is telling PHP:

#!/usr/bin/perl

use strict;
use CGI::Fast;

while (my $q = CGI::Fast-new) {
  print Content-Type: text/plain\r\n\r\n;

  foreach my $env (keys %ENV) {
print env $env = $ENV{$env}\n;
  }
}

(though possibly you don't have CGI::Fast or its FCGI dependency installed)


 Something to consider when debugging mod_fcgid issues is that the same
 config should work with mod_cgi[d] simply by changing the handler from
 fcgid-script to cgi-script.  More people on the users@ mailing list
 are able to help with mod_cgi config issues.


 i take your advice and now i probe it, thanks :)

 i take the dessicion to use mod_fcgid because i use mapserver php
 module, and this module does not have a good memory management, and
 with mod_fcgid i solve this problems very efficiently.

I wasn't very clear with this suggestion ;)  My thought was to see
what it takes to get it working with CGI first, as more people could
potentially help with a CGI issue.  Once it works with CGI, it should
be straightforward to convert the config to FastCGI.  Also, if the
config then doesn't work after converting to FastCGI then it is more
likely a mod_fcgid bug.


Re: TLS renegotiation disabling : mod_ssl and OpenSSL 0.9.8l

2009-11-15 Thread Stefan Fritsch
Hi,

On Tuesday 10 November 2009, Jean-Marc Desperrier wrote:
 So when Apache is compiled with openssl 0.9.8l, TLS renegotiation
  will be fully disabled.
 
 But the problem with that if that some comments of the discussion
  inside https://issues.apache.org/bugzilla/show_bug.cgi?id=39243
  are true, this change will unexpectedly break very badly a *lot*
  of sites.
 
 Those comments suggest Apache currently requests TLS renegotiation
  in quite a few cases where it should not be needed, and where it
  won't be expected.
 
 First there's the short SSLSessionCacheTimeout problem :
 https://issues.apache.org/bugzilla/show_bug.cgi?id=39243#c23
 
 In my understanding, SSLSessionCacheTimeout should never cause
 renegociation. If the client tries to do a SSL session resume, and
  the server does not have the SSL info for that SSL id anymore, the
  result is a brand new SSL Session, *not* a SSL renegotiation.
 
 If they actually are resumes caused by SSLSessionCacheTimeout, then
  it seems SSLSessionCacheTimeout times out sessions that are
  currently active at the TCP level, and where the user is just
  trying to send more data. Or there's a bug in the resume code that
  first says yes, then finds the session id should have been timed
  out, so forces a renegotiation. Anyway, this means this was
  already broken in some way before, but it used to be of little
  consequences and will now be a huge problem.
 
 Second there's the SSLVerifyClient optional problem :
 https://issues.apache.org/bugzilla/show_bug.cgi?id=39243#c21
 
 When SSLVerifyClient optional is actually used to allow various
 authentication level, it's expected that the change will break the
  site.
 
 But what this comment report is that simply having SSLVerifyClient
 optional set, not having any different value anywhere, not even
  *using* client certificates, will cause renegotiation to happen
  and therefore sites to break when TLS renegotiation is disabled.
 And Peter Gutmann just reported on oss-sec that they are many
  servers configured like this (see
  http://seclists.org/oss-sec/2009/q4/138 ) with their admin not
  even knowing that they require client certificates.
 
 According to the following comment, it might be that a very simple
  patch would correct this problems :
 https://issues.apache.org/bugzilla/show_bug.cgi?id=39243#c16
 (I've checked the svn code for apache 2.2.x, that piece of code is
  still exactly the same, but I don't understand enough to be sure
  that just handling the optional case in addition to the none
  case would really be enough to solve the problem)
 

I cannot reproduce the problems. With an openssl that rejects all 
renegotiations, both reconnections after ssl session timeout and 
connections to a host with sslverifyclient optional work fine (with 
openssl s_client).

Cheers,
Stefan


Re: one remaining mpms-shared quirk

2009-11-15 Thread Jeff Trawick
On Sat, Nov 14, 2009 at 8:10 PM, William A. Rowe Jr.
wr...@rowe-clan.net wrote:
 ./configure with both --with-mpm=worker --enable-mpms-shared provides a really
 odd result;

 checking which MPM to use by default... worker
 ../httpd-2.x/configure: line 25999: server/mpm/event/modules.mk: No such file 
 or directory
 checking for pthread_kill... yes
 ../httpd-2.x/configure: line 26148: server/mpm/prefork/modules.mk: No such 
 file or directory
 ../httpd-2.x/configure: line 26197: server/mpm/simple/modules.mk: No such 
 file or directory
 ../httpd-2.x/configure: line 26293: server/mpm/worker/modules.mk: No such 
 file or directory

lack of vpath support is the problem; I need to mimic or share the
builddir creation logic that exists for regular modules in order to
create server/mpm/FOO before trying to create modules.mk there


Re: mod_rewrite and mod_fcgid pass wrong fcgi request

2009-11-15 Thread Felipe Alcacibar
...
 This is apparently PR 40781:

 https://issues.apache.org/bugzilla/show_bug.cgi?id=40781

 I see that one or two people have suggested work-arounds in that PR,
 but they don't seem to apply directly to your configuration.  Perhaps
 some mod_rewrite experts on the user list can help solve this, with
 some adjustment to your mod_rewrite configuration so that in effect
 PATH_TRANSLATED doesn't get left with redirect:?

Effectively, that happens to me, but not in cgi mode (cgid) or with
php's libphp5 (apxs module) it happens only with mod_fcgid.


 FWIW, changing the FcgidWrapper directive temporarily to point to this
 Perl script is helpful for seeing what mod_fcgid is telling PHP:

 #!/usr/bin/perl

 use strict;
 use CGI::Fast;

 while (my $q = CGI::Fast-new) {
  print Content-Type: text/plain\r\n\r\n;

  foreach my $env (keys %ENV) {
    print env $env = $ENV{$env}\n;
  }
 }

 (though possibly you don't have CGI::Fast or its FCGI dependency installed)

for no errors i take the straces dumps from php-cgi with mod_cgid and
mod_fcgid, to know better what it's happens here is the vars that
passes to me.

REDIRECT_STATUS: 200
SERVER_NAME: servicio.fullplanet.cl
DOCUMENT_ROOT: /hosting/http/fullplanet.cl/dom/servicio/www
SCRIPT_FILENAME: /hosting/http/fullplanet.cl/dom/servicio/www/index.php
REMOTE_PORT: 1734
REDIRECT_URL: /favicon.ico
GATEWAY_INTERFACE: CGI/1.1
SERVER_PROTOCOL: HTTP/1.1
REQUEST_URI: /favicon.ico
SCRIPT_NAME: /index.php
PATH_INFO: /favicon.ico
PATH_TRANSLATED: redirect:/index.php/favicon.ico

The complete list and the strace dumps have here
http://devel.tryer.cl/fcgid_debug/

...

 I wasn't very clear with this suggestion ;)  My thought was to see
 what it takes to get it working with CGI first, as more people could
 potentially help with a CGI issue.  Once it works with CGI, it should
 be straightforward to convert the config to FastCGI.  Also, if the
 config then doesn't work after converting to FastCGI then it is more
 likely a mod_fcgid bug.


at least is a bug, that is great to clear me that dude.

but i habe a last dude. The way of the good Open Source Software user
is to report the bug, but where is the bug, in the mod_fcgid or in the
mod_rewrite??

lot of thanks Jeff

-- 
Felipe Alcacibar Buccioni


Bug report for Apache httpd-1.3 [2009/11/15]

2009-11-15 Thread bugzilla
+---+
| Bugzilla Bug ID   |
| +-+
| | Status: UNC=Unconfirmed NEW=New ASS=Assigned|
| | OPN=ReopenedVER=Verified(Skipped Closed/Resolved)   |
| |   +-+
| |   | Severity: BLK=Blocker CRI=Critical  REG=Regression  MAJ=Major   |
| |   |   MIN=Minor   NOR=NormalENH=Enhancement TRV=Trivial |
| |   |   +-+
| |   |   | Date Posted |
| |   |   |  +--+
| |   |   |  | Description  |
| |   |   |  |  |
|10744|New|Nor|2002-07-12|suexec might fail to open log file|
|10747|New|Maj|2002-07-12|ftp SIZE command and 'smart' ftp servers results i|
|10760|New|Maj|2002-07-12|empty ftp directory listings from cached ftp direc|
|14518|Opn|Reg|2002-11-13|QUERY_STRING parts not incorporated by mod_rewrite|
|16013|Opn|Nor|2003-01-13|Fooling mod_autoindex + IndexIgnore   |
|16631|Inf|Min|2003-01-31|.htaccess errors logged outside the virtual host l|
|17318|Inf|Cri|2003-02-23|Abend on deleting a temporary cache file if proxy |
|19279|Inf|Min|2003-04-24|Invalid chmod options in solaris build|
|21637|Inf|Nor|2003-07-16|Timeout causes a status code of 200 to be logged  |
|21777|Inf|Min|2003-07-21|mod_mime_magic doesn't handle little gif files|
|21975|Opn|Nor|2003-07-29|mod_rewrite RewriteMap from external program gets |
|22618|New|Maj|2003-08-21|MultiViews invalidates PATH_TRANSLATED if cgi-wrap|
|25057|Inf|Maj|2003-11-27|Empty PUT access control in .htaccess overrides co|
|26126|New|Nor|2004-01-14|mod_include hangs with request body   |
|26152|Ass|Nor|2004-01-15|Apache 1.3.29 and below directory traversal vulner|
|26790|New|Maj|2004-02-09|error deleting old cache file |
|29257|Opn|Nor|2004-05-27|Problem with apache-1.3.31 and mod_frontpage (dso,|
|29498|New|Maj|2004-06-10|non-anonymous ftp broken in mod_proxy |
|29538|Ass|Enh|2004-06-12|No facility used in ErrorLog to syslog|
|30207|New|Nor|2004-07-20|Piped logs don't close read end of pipe   |
|30877|New|Nor|2004-08-26|htpasswd clears passwd file on Sun when /var/tmp i|
|30909|New|Cri|2004-08-28|sporadic segfault resulting in broken connections |
|31975|New|Nor|2004-10-29|httpd-1.3.33: buffer overflow in htpasswd if calle|
|32078|New|Enh|2004-11-05|clean up some compiler warnings   |
|32539|New|Trv|2004-12-06|[PATCH] configure --enable-shared= brocken on SuSE|
|32974|Inf|Maj|2005-01-06|Client IP not set |
|33086|New|Nor|2005-01-13|unconsistency betwen 404 displayed path and server|
|33495|Inf|Cri|2005-02-10|Apache crashes with WSADuplicateSocket failed for|
|33772|New|Nor|2005-02-28|inconsistency in manual and error reporting by sue|
|33875|New|Enh|2005-03-07|Apache processes consuming CPU|
|34108|New|Nor|2005-03-21|mod_negotiation changes mtime to mtime of Document|
|34114|New|Nor|2005-03-21|Apache could interleave log entries when writing t|
|34404|Inf|Blk|2005-04-11|RewriteMap prg can not handle fpout   |
|34571|Inf|Maj|2005-04-22|Apache 1.3.33 stops logging  vhost|
|34573|Inf|Maj|2005-04-22|.htaccess not working / mod_auth_mysql|
|35424|New|Nor|2005-06-20|httpd disconnect in Timeout on CGI|
|35439|New|Nor|2005-06-21|Problem with remove /../ in util.c and mod_rewri|
|35547|Inf|Maj|2005-06-29|Problems with libapreq 1.2 and Apache::Cookie |
|3|New|Nor|2005-06-30|Can't find DBM on Debian Sarge|
|36375|Opn|Nor|2005-08-26|Cannot include http_config.h from C++ file|
|37166|New|Nor|2005-10-19|Under certain conditions, mod_cgi delivers an empt|
|37252|New|Reg|2005-10-26|gen_test_char reject NLS string   |
|38989|New|Nor|2006-03-15|restart + piped logs stalls httpd for 24 minutes (|
|39104|New|Enh|2006-03-25|[FR] fix build with -Wl,--as-needed   |
|39287|New|Nor|2006-04-12|Incorrect If-Modified-Since validation (due to syn|
|39937|New|Nor|2006-06-30|Garbage output if README.html is gzipped or compre|
|40224|Ver|Nor|2006-08-10|System time crashes Apache @year 2038 (win32 only?|
|41279|New|Nor|2007-01-02|Apache 1.3.37 htpasswd is vulnerable to buffer ove|
|42355|New|Maj|2007-05-08|Apache 1.3 permits non-rfc HTTP error code = 600 |
|43626|New|Maj|2007-10-15|r-path_info returning invalid value  |
|44768|New|Blk|2008-04-07|Server suddenly reverted to showing test page only|

Re: mod_rewrite and mod_fcgid pass wrong fcgi request

2009-11-15 Thread Jeff Trawick
On Sun, Nov 15, 2009 at 5:56 PM, Felipe Alcacibar falcaci...@gmail.com wrote:
 ...
 This is apparently PR 40781:

 https://issues.apache.org/bugzilla/show_bug.cgi?id=40781

 I see that one or two people have suggested work-arounds in that PR,
 but they don't seem to apply directly to your configuration.  Perhaps
 some mod_rewrite experts on the user list can help solve this, with
 some adjustment to your mod_rewrite configuration so that in effect
 PATH_TRANSLATED doesn't get left with redirect:?

 Effectively, that happens to me, but not in cgi mode (cgid) or with
 php's libphp5 (apxs module) it happens only with mod_fcgid.

When comparing modes of PHP execution:

- CGI and FastCGI are directly comparable because the information that
Apache needs to pass to PHP is the same.  (In fact, mod_cgi[d] and
mod_fcgid use the same core Apache code to build almost all of that
information.)

You should be able to take your CGI configuration and change the
handler from cgi-script to fcgid-script and have PHP work as FastCGI.
One nuance is that if you're relying on ScriptAlias you'll need to use
both Alias and Options +ExecCGI in the FastCGI equivalent.

- mod_php and mod_fcgid configurations are not comparable.



 FWIW, changing the FcgidWrapper directive temporarily to point to this
 Perl script is helpful for seeing what mod_fcgid is telling PHP:

 #!/usr/bin/perl

 use strict;
 use CGI::Fast;

 while (my $q = CGI::Fast-new) {
  print Content-Type: text/plain\r\n\r\n;

  foreach my $env (keys %ENV) {
    print env $env = $ENV{$env}\n;
  }
 }

 (though possibly you don't have CGI::Fast or its FCGI dependency installed)

 for no errors i take the straces dumps from php-cgi with mod_cgid and
 mod_fcgid, to know better what it's happens here is the vars that
 passes to me.

 REDIRECT_STATUS: 200
 SERVER_NAME: servicio.fullplanet.cl
 DOCUMENT_ROOT: /hosting/http/fullplanet.cl/dom/servicio/www
 SCRIPT_FILENAME: /hosting/http/fullplanet.cl/dom/servicio/www/index.php
 REMOTE_PORT: 1734
 REDIRECT_URL: /favicon.ico
 GATEWAY_INTERFACE: CGI/1.1
 SERVER_PROTOCOL: HTTP/1.1
 REQUEST_URI: /favicon.ico
 SCRIPT_NAME: /index.php
 PATH_INFO: /favicon.ico
 PATH_TRANSLATED: redirect:/index.php/favicon.ico

 The complete list and the strace dumps have here
 http://devel.tryer.cl/fcgid_debug/

 ...

 I wasn't very clear with this suggestion ;)  My thought was to see
 what it takes to get it working with CGI first, as more people could
 potentially help with a CGI issue.  Once it works with CGI, it should
 be straightforward to convert the config to FastCGI.  Also, if the
 config then doesn't work after converting to FastCGI then it is more
 likely a mod_fcgid bug.


 at least is a bug, that is great to clear me that dude.

 but i habe a last dude. The way of the good Open Source Software user
 is to report the bug, but where is the bug, in the mod_fcgid or in the
 mod_rewrite??

I believe that the bug is in mod_rewrite, and is already tracked by

https://issues.apache.org/bugzilla/show_bug.cgi?id=40781


Re: Obsolete modules in 2.3

2009-11-15 Thread Lars Eilebrecht
Greg Stein wrote on 2009-11-11 23:33:35:

 Bah. If they want them, then they should not upgrade their server.
 Simple as that.

Or just use the 2.2 modules with 2.4.

There may still be some legacy sites using mod_imagemap or
mod_cern_meta, but in my opinion there is absolutely no reason to
continue including the modules in the httpd package.

+1 on removing mod_imagemap and mod_cern_meta.


ciao...
-- 
Lars Eilebrecht
l...@apache.org




Re: [VOTE] release 2.3.3 as alpha

2009-11-15 Thread Gregg L. Smith

It's 03:00 UTC 11/16 but the vote failed anyway.

Some things that have not been addressed.
Basically, SSL doesn't work or there's new directives not documented yet.

mod_ssl: r835046 + OpenSSL 0.9.8L + working config from 2.2.14
PKCS #1 SHA-1 With RSA Encryption 2048bit certs (Real, not self-signed)

SSLCertificateChainFile: file '/path/to/real.ca.crt' does not exist or 
is empty
SSLCACertificateFile: file '/path/to/real.ca-bundle.crt' does not exist 
or is empty

comment those out and Oops, no RSA, DSA or ECC server private key found?!

SSLSessionCache: 'shmcb' session cache not supported (known names: )
corresponding socache module seems to need to be loaded, not documented.

mod_proxy_scgi does not build on win32, not surprising since it does not
build on 2.2.14 either. see Message-ID: 4ac1c161.7080...@glewis.com
(missing from archives but is at MARC)

It would be nice if the ssl errors could be cleaned up before 
2.3.4-alpha but I'll understand if they are not. It's alpha after all.


Regards,
Gregg


Paul Querna wrote:

Test tarballs for Apache httpd 2.3.3-alpha are available at:
http://httpd.apache.org/dev/dist/

Your votes please;

 +/- 1
 [  ]  Release httpd-2.3.3 as Alpha

Vote closes at 18:00 UTC on Sunday November 15 2009.

Thanks,

Paul




Re: May have found the culprit was Re: ap_sub_req_lookup_uri(r-uri, r, NULL)-content_type always returns 'text/plain'?

2009-11-15 Thread ohaya

 oh...@cox.net wrote: 
 Hi,
 
 With further testing, I think that I've identified that mod_limitipconn is 
 not able to get the Content-Type/content_type when the URL is being proxied 
 to a WebLogic server via a plugin/module that comes with WebLogic (the 
 WebLogic Plugin for Apache).
 
 [NOTE: mod_limitipconn still DOES get the correct content_type for other URLs 
 that are NOT being proxied by the WebLogic Plugin.]
 
 I've tried changing the LoadModule order, so that mod_limitipconn is both 
 before and after the WebLogic plugin/module in httpd.conf, and the order 
 doesn't seem to matter.
 
 I guess that this might take this thread slightly off-topic, except that I 
 still don't understand why mod_limitipconn can't get the content_type, 
 especially since the LoadModule order doesn't seem to affect things :(...
 
 Jim


Hi,

I've been continuing to try to figure this out, and quite frankly, I'm really 
stumped by this.

I don't know if this will help, but I enabled mod_dumpio, and recorded the 
responses both via the WebLogic plugin (when mod_limitipconn doesn't get the 
Content-Type) and for a GET for a resource (GIF) local to the Apache (when 
mod_limitipconn does get the correct Content-Type):

GOOD (GIF, local to Apache):

[Sat Nov 14 22:24:37 2009] [debug] mod_dumpio.c(74): mod_dumpio:  dumpio_out 
(data-HEAP): HTTP/1.1 200 OK\r\nDate: Sun, 15 Nov 2009 03:24:37 GMT\r\nServer: 
Apache/2.2.14 (Unix)\r\nLast-Modified: Sat, 14 Nov 2009 23:41:34 GMT\r\nETag: 
3220b-105-4785d510de780\r\nAccept-Ranges: bytes\r\nContent-Length: 
261\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: 
image/gif\r\n\r\n


BAD (via the WebLogic Plugin/module):

[Sat Nov 14 22:17:24 2009] [debug] mod_dumpio.c(74): mod_dumpio:  dumpio_out 
(data-HEAP): HTTP/1.1 200 OK\r\nDate: Sun, 15 Nov 2009 03:17:24 GMT\r\nServer: 
Apache/2.2.14 (Unix)\r\nX-Powered-By: Servlet/2.5 JSP/2.1\r\nKeep-Alive: 
timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: 
chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n

Some of the things that I noticed that are different:

Transfer-Encoding: 
- local == Response header Not present 
- Via WebLogic Plugin == chunked

Content-Type:
- local == text/html
- Via WebLogic Plugin == text/html; charset=UTF-8

Could either of these (or both) differences be messing the mod_limitipconn 
module up, preventing it from getting the Content-Type properly?

Jim



Re: mod_rewrite and mod_fcgid pass wrong fcgi request

2009-11-15 Thread Felipe Alcacibar
...
 When comparing modes of PHP execution:

 - CGI and FastCGI are directly comparable because the information that
 Apache needs to pass to PHP is the same.  (In fact, mod_cgi[d] and
 mod_fcgid use the same core Apache code to build almost all of that
 information.)

 You should be able to take your CGI configuration and change the
 handler from cgi-script to fcgid-script and have PHP work as FastCGI.
 One nuance is that if you're relying on ScriptAlias you'll need to use
 both Alias and Options +ExecCGI in the FastCGI equivalent.

 - mod_php and mod_fcgid configurations are not comparable.


As you sayed it i made a similar environment (the difference is the
FcgidWrapper line) from mod_cgid to mod_fcgid and the result is the
same, in the mod_cgid environment all runs good and in the mod_fcgid
persisst the problem...

rohan counter # cat /etc/apache2/modules.d/70_php5_cgi.conf
IfDefine PHP5CGI
ScriptAlias /.httpd/cgi-interpreters /var/cgi-interpreters/
Directory /var/cgi-interpreters
AllowOverride None
Options None
Options +ExecCGI

Order allow,deny
Allow from all
/Directory

IfDefine FCGID
FcgidWrapper /var/cgi-interpreters/php-cgi .php
FcgidWrapper /var/cgi-interpreters/php-cgi .php2
FcgidWrapper /var/cgi-interpreters/php-cgi .php3
FcgidWrapper /var/cgi-interpreters/php-cgi .php4
FcgidWrapper /var/cgi-interpreters/php-cgi .php5
FcgidWrapper /var/cgi-interpreters/php-cgi .phtml

FcgidInitialEnv PHP_FCGI_CHILDREN 12
FcgidInitialEnv PHP_FCGI_MAX_REQUESTS 1

AddHandler fcgid-script .php .php3 .php4 .php5 .php6 .phtml
/IfDefine

IfDefine !FCGID
AddHandler php-script .php .php3 .php4 .php5 .php6 .phtml
Action php-script /.httpd/cgi-interpreters/php-cgi
/IfDefine

FilesMatch \.ph(p[2-6]?|tml)$ 
Options +ExecCGI
/FilesMatch

DirectoryIndex index.php index.php3 index.php4 index.php5 index.phtml
/IfDefine


Any suggestion or step to do??...

Thanks Jeff

-- 
Felipe Alcacibar Buccioni