Re: RSA_PKCS1_RSAref : That old question

2000-12-03 Thread Mads Toftum

On Sat, Dec 02, 2000 at 10:14:51PM -0500, [EMAIL PROTECTED] wrote:
> Debian-2.2.17
> Perl-5.6.0 --prefix=/opt
> apache_1.3.14
> mod_perl-1.24_01
> mod_ssl-2.7.1-1.3.14
> openssl-0.9.6
> rsaref-2.0 from ftp://www.spinnaker.com/pub/crypt/rsaref

Don't use RSAREF. Support for RSAREF was removed from mod_ssl in
version 2.7.0-1.3.14 because there is no reason to use it at all.
Just rebuild your openssl without RSAREF.

vh

Mads Toftum
-- 
`Darn it, who spiked my coffee with water?!' - lwall


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




Variable initialization in startup.pl

2000-12-03 Thread Andreas Schiffler

Hi,

I seem to have an odd problem with variable setup and use. The platform
is apache/mod_perl as per LinuxMandrake 7.1.

Here is the setup:

A) I have a configuration.pm with variable declarations and no "use
strict" similar to this:

...
@array=()
...
%hash=()
...

B) Then I have a library of common routines that make use of these
variables. These include routines to fill these variables with data.

sub fill_array();
sub fill_hash();

C) Now in startup.pl is "use" both packages and call the fill_xyz()
routines.

D) In the mod_perl scripts (the guts of these scripts is again in a
package that gets called by a wrapper .pl script) I "use" both packages
and make use of the data with $value=$configuration::array[] and
$value=$configuration::hash{} ... just reading their values.

The Problem:
The array is filled. The hash is empty.

Any ideas? Workarounds? Tests?

What would be the preferred structure to define static variables that
can be used for all modules and pre-initialized by startup.pl.

Cheers
Andreas

--
|  Andreas Schiffler[EMAIL PROTECTED]  |
|  Senior Systems Engineer-Deskplayer Inc., Buffalo  |
|  4707 Eastwood Cres., Niagara Falls, Ont  L2E 1B4, Canada  |
|  +1-905-371-3652 (private)  -  +1-905-371-8834 (work/fax)  |





Re: Apache::DBI problem and writting a perl module!!!

2000-12-03 Thread Perrin Harkins

Edmar Edilton da Silva wrote:
> I still didn't solve the problem of the Apache::DBI. It can not be
> loaded into the apache's startup.pl file because happens a error during
> the starting of the apache, the child processes are not created. For
> using the Apache::DBI I had to add the "use Apache::DBI ()" code at the
> beginning of each perl script.

That will not work.  You have to load Apache::DBI before DBI, as it says
in the documentation.  You need to solve the problem you're getting when
putting Apache::DBI in your startup.pl.  What's the error?  Did you
compile your Apache/mod_perl from source?  Are you using DSO?

- Perrin

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




Re: Variable initialization in startup.pl

2000-12-03 Thread Perrin Harkins

Andreas Schiffler wrote:
> 
> Hi,
> 
> I seem to have an odd problem with variable setup and use. The platform
> is apache/mod_perl as per LinuxMandrake 7.1.
> 
> Here is the setup:
> 
> A) I have a configuration.pm with variable declarations and no "use
> strict" similar to this:
> 
> ...
> @array=()
> ...
> %hash=()
> ...
> 
> B) Then I have a library of common routines that make use of these
> variables. These include routines to fill these variables with data.
> 
> sub fill_array();
> sub fill_hash();
> 
> C) Now in startup.pl is "use" both packages and call the fill_xyz()
> routines.
> 
> D) In the mod_perl scripts (the guts of these scripts is again in a
> package that gets called by a wrapper .pl script) I "use" both packages
> and make use of the data with $value=$configuration::array[] and
> $value=$configuration::hash{} ... just reading their values.
> 
> The Problem:
> The array is filled. The hash is empty.
> 
> Any ideas? Workarounds? Tests?

You didn't include enough code here for me to see what you're doing
wrong, but your variable assignments look fishy.  Here's a sample of how
to do it:

package SiteConfig;
%hash  = (
   'name'  => 'value',
   'name2' => 'value2',
 );

# in startup.pl
use SiteConfig ();

# in your module
my $value2  = $SiteConfig::hash{'name2'};
my $entire_hash = %SiteConfig::hash;
my $hash_ref= \%SiteConfig::hash;

- Perrin

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




Re: RSA_PKCS1_RSAref : That old question

2000-12-03 Thread JoshNarins


Thanks all.

I hadn't properly considered what the combination of 
"RSA is now free"
"openssl-0.9.5a is now openssl-0.9.6"
meant.

The consequences, no doubt, of spending a couple months
programming for the Palm.

Thanks again!




Re: Changing a file's UID from within an Apache module?

2000-12-03 Thread George Sanderson

From: "Tim Tompkins" <[EMAIL PROTECTED]>
At 09:55 AM 12/1/00 -0700, you wrote:
>I'd put it someplace that is only accessible to the web user if you're going
>to do that.
>
>
>From: "Jorge Godoy" <[EMAIL PROTECTED]>
>On Wed, 29 Nov 2000, [EMAIL PROTECTED] wrote:
>>
>> Any ideas about the best way to change the permissions and UID?
>
>Create an external minimum perl script with the SUID bit set and with
>root as it's owner. Use this script to change the file
>permissions.
>
Prior to creating any file, the user would have been authenticated and an
authorize module would have supplied the UID to be used for the request in
an environment variable.  The location of the user's files has to read by
Apache so such that it can serve the files (HTML).

The rational behind setting the UID of the files (and directories) is to
allow each user to be able to create files that are protected from other
users who may also be providing files.  Each users files are confined to
certain sub-directory stubs.

>From a security stand point, I have to be careful about restricting access
to any external routine that is owned by root which would be used to change
the UID of files.  Also, others would be very reluctant to install such an
external routine.

I'm not real keen about implementing an "external minimum" program.  I
would like to do the task from within the (Apache Perl) module so that it
would be "more portable" and  would not require any special considerations
for installation.
  



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




[ANNOUNCE] Apache::SSI 2.16

2000-12-03 Thread Ken Williams

The URL

http://forum.swarthmore.edu/~ken/modules/archive/Apache-SSI-2.16.tar.gz

has entered CPAN as

  file: $CPAN/authors/id/K/KW/KWILLIAMS/Apache-SSI-2.16.tar.gz
  size: 24483 bytes
   md5: 341d1a126296d1b65cb38c5c921ff3a9

---
Changes since 2.15:

2.16  Sun Dec  3 17:43:20 EST 2000
   The 'Filter' directive is now properly recognized as case-insensitive.

   We now use POSIX::strftime() instead of Date::Format::strftime() to
   format dates.  [[EMAIL PROTECTED] (Kent Covert)]

   The 'echo' directives are now filled in using methods instead of
   subroutines, so derived classes can change the behavior of 'echo'
   directives and add new variables by creating new methods.  See
   docs. [[EMAIL PROTECTED] (Kent Covert)]

   DATE_GMT and DATE_LOCAL variables are now properly formatted
   according to the 'timefmt'.

   We behave properly under a HEAD request.

---

Thanks to Kent for the help, and thanks to all who replied about using
POSIX vs. Date::Format vs. Time::Object vs. Apache::Util.


  ------
  Ken Williams Last Bastion of Euclidity
  [EMAIL PROTECTED]The Math Forum

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




Re: HTTP Mod_Perl mini-server

2000-12-03 Thread Greg Stark

Perrin Harkins <[EMAIL PROTECTED]> writes:

> On Fri, 3 Nov 2000, Vivek Khera wrote:
> > Lately I've been getting very interested in using solid-state disks
> > for high-performance issues.  They're expensive, but if you need that
> > much speed, they're worth it.
> 
> Are they?  I tried one once, and it wasn't any faster than my normal disk
> because I had so much RAM it was all getting buffered already.  If you
> don't have enough RAM, it might help, but I suspect these are more
> expensive than equivalent amounts of RAM.

Solid state disks are very effective for particular applications like mail
spools and database logs where the application waits for data to be flushed to
disk before continuing. For most normal applications the same effect can be
obtained by adding RAM and/or playing with tools like memfs. 

-- 
greg


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




Re: Changing a file's UID from within an Apache module?

2000-12-03 Thread George Sanderson

>Prior to creating any file, the user would have been authenticated and an
authorize module 
>would have supplied the UID to be used for the request in an environment
variable.  The location 
>of the user's files has to read by Apache so such that it can serve the
files (HTML).
>
>The rational behind setting the UID of the files (and directories) is to
allow each user to be able 
>to create files that are protected from other users who may also be
providing files.  Each users 
>files are confined to certain sub-directory stubs.
 
Perhaps, I should use the GID instead of the PID to differentiate between
users and leave the PID alone.  Then perhaps setting the directory
permission to 0770 and 0460 for files on creation, along with checking the
GID of the files and dirs before any modifcation, could be used to achieve
the same effect.



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




apache configuration & error logging

2000-12-03 Thread spam

hi.
Here is situation:
1. I have written Auth, Authz and redirect handlers for user control. They
take in information from httpd file via PerlSetVar statement for
configuration purposes. They also log information into error logs via
$r->log_error
2. I have integrated them to protect certain  on the
VirtualHost. ErrorLog was setup correctly, everything works fine.
3. I take all the stuff copy over and change approprite paths, and create
new VirtualHost directive. ErrorLog is setup correctly.

After I restart webserver, there is no messages from my modules
into the appropriate error.log or any other error log. How do I fix this?
It seems that as I add in the ModPerl authentication code into the
new VirtualHost directive, errors stop coming into error log, regarding
that particular VirtualHost, but other continue to work fine. Is that
weird? The code in new VirtualHost functions correctly, besides inablity
to append to the error.log of the virtual host...
Pavel



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




Re: HTTP Mod_Perl mini-server

2000-12-03 Thread spam

On 3 Dec 2000, Greg Stark wrote:

> Perrin Harkins <[EMAIL PROTECTED]> writes:
> 
> > On Fri, 3 Nov 2000, Vivek Khera wrote:
> > > Lately I've been getting very interested in using solid-state disks
> > > for high-performance issues.  They're expensive, but if you need that
> > > much speed, they're worth it.
> > 
> > Are they?  I tried one once, and it wasn't any faster than my normal disk
> > because I had so much RAM it was all getting buffered already.  If you
> > don't have enough RAM, it might help, but I suspect these are more
> > expensive than equivalent amounts of RAM.
> Solid state disks are very effective for particular applications like mail
> spools and database logs where the application waits for data to be flushed to
> disk before continuing. For most normal applications the same effect can be
> obtained by adding RAM and/or playing with tools like memfs. 

SCREW solid state disks. Get more ram. Depending on the size of your
website it might be smart to make a ramdisk of a 200MB in size... would be
lightning fast, and apache won't even know about it. For database
application with limited growth and size it might be very good thing to
do, like a dynamic website, from a content database, that is mirrored from
harddrive to the ramdisk on regular basis. Content editing is done
straight to the disk, but lock tables and dump the database, and go on
like a happy camper... =) NO RAID will be faster than RAM, and if it is,
it will cost a price of the new prosche and latency will never be anywhere
near ram... so I'd just give it up right now. Raid is good for large
amounts of data, but if your site is not over 500MB altogther, just get a
linux(or BSD) box fit it with 1G of ram 8G IDE drive and you will be
faster than amazon, provided, that you have enough processing power.

That is all.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]