Re: [EMAIL PROTECTED] Apache issue with NFS mount

2007-01-05 Thread Sander Temme


On Jan 4, 2007, at 11:31 PM, jeffery bayliss wrote:


Because Apache sucks.


That's it, there's your answer.

Actually, NFS sometimes introduces permissions issues, particularly  
with regards to the nobody or nfsnobody user which exists on some  
platforms. Can the user that is running Apache read the files on that  
mount? And does it have access to the directory and all directories  
above it?


S.

--
[EMAIL PROTECTED]http://www.temme.net/sander/
PGP FP: 51B4 8727 466A 0BC3 69F4  B7B8 B2BE BC40 1529 24AF




smime.p7s
Description: S/MIME cryptographic signature


Re: [EMAIL PROTECTED] Open_base

2007-01-05 Thread Matus UHLAR - fantomas
On 03.01.07 15:22, Kyle Quillen wrote:
> I have a small issue.  I need to set the open_base directive for the
> default site of apache so that php will be able to interface directly
> with the Directory it needs to.  I have tried adding this line to the
> config file in just a random place as I do not know exactly where to put
> this.  This is an internal server so security is not an issue just need
> to be able to get one function working.  Again this is not setup as a
> virtual machine all of our files are in the default site
> of /var/www/html
> 
> php_admin_value open_basedir "/var/www/html:/usr/lib/php/"
> 
> When I start apache I get no errors what so ever so I think i am doing
> this right?

this is an PHP issue, not apache issue. You should direct this question to
php mailing list and search php documentation.

-- 
Matus UHLAR - fantomas, [EMAIL PROTECTED] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Linux is like a wigwam: no Windows, no Gates and an apache inside...

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Forcing logging to the access log

2007-01-05 Thread Steve Swift

I'm getting "child pid 32719 exit signal Segmentation fault (11)" in our
error_log but whatever is causing it, it is not generating corresponding
entries in the access_log.
I suspect that the child pid is failing to update the access_log because of
the segmentation fault.

Is there some way to force the update of the access_log to be committed
before the process starts handling the request?

I've only just found these errors in our error_log and they've been
happening for as log as we have error_logs. No one has complained about
truncated pages, or pages in error though.

I got a group of four of them in the space of one second, so my theory is
that the faults occur loading images associated with one page. I can't think
of anything else that would cause such a cluster of errors; the server takes
about one hit per minute, on average.

--
Steve Swift
http://www.swiftys.org.uk


Re: [EMAIL PROTECTED] Apache+mod_jk+Tomcat+mod_rewrite+cookie

2007-01-05 Thread fredk2

I guess you are not passing the full URL to the servlet, try:

RewriteRule ^/url1(.*) /MyApp/MyServlet$1 [PT]

Cheers, Fred
-- 
View this message in context: 
http://www.nabble.com/Apache%2Bmod_jk%2BTomcat%2Bmod_rewrite%2Bcookie-tf2922976.html#a8178908
Sent from the Apache HTTP Server - Users mailing list archive at Nabble.com.


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Building Static Apache on AIX 5.2 with GCC

2007-01-05 Thread Justin Johnson

Well I'm getting further than I was before.  It seems my main problem
with LDAP not being recognized is that I was specifying
--with-ldap=yes instead of --with-ldap=/path/to/ldap/basedir.  So
after changing that I found that I need to first build apr and
apr-util, as documented at
http://httpd.apache.org/docs/2.2/install.html.

My new problem is that apr-util has a problem with a statically linked
ldap.  See below.

/svn/static/build/httpd-2.2.3/srclib/apr-util>./configure \
>  --prefix=$base_dir/apr-util-httpd \
>  --enable-static=yes \
>  --enable-shared=no \
>  --with-ldap=$base_dir \
>  --with-apr=$base_dir/apr-httpd
checking build system type... powerpc-ibm-aix5.3.0.0
checking host system type... powerpc-ibm-aix5.3.0.0
checking target system type... powerpc-ibm-aix5.3.0.0
checking for a BSD-compatible install... build/install.sh -c
checking for working mkdir -p... yes
APR-util Version: 1.2.7
checking for chosen layout... apr-util
Applying apr-util hints file rules for powerpc-ibm-aix5.3.0.0
checking for APR... yes
  setting CC to "gcc"
  setting CPP to "gcc -E"
 setting CFLAGS to " -g -O2 -pthread"
 setting CPPFLAGS to " -U__STR__ -D_THREAD_SAFE -D_USE_IRS
-D_LARGEFILE64_SOURCE"
checking for gcc... gcc
checking for C compiler default output file name... a.out
checking whether the C compiler works... yes
checking whether we are cross compiling... no
checking for suffix of executables...
checking for suffix of object files... o
checking whether we are using the GNU C compiler... yes
checking whether gcc accepts -g... yes
checking for gcc option to accept ANSI C... none needed
checking how to run the C preprocessor... gcc -E
checking for egrep... grep -E
checking for ANSI C header files... yes
checking for sys/types.h... yes
checking for sys/stat.h... yes
checking for stdlib.h... yes
checking for string.h... yes
checking for memory.h... yes
checking for strings.h... yes
checking for inttypes.h... yes
checking for stdint.h... yes
checking for unistd.h... yes
checking for ldap support...
./configure[10557]: ac_cv_lib_/svn/static_ldap_init: is not an identifier

Any ideas on this one?

Thanks,
Justin

On 1/4/07, Eric Covener <[EMAIL PROTECTED]> wrote:

On 1/4/07, Justin Johnson <[EMAIL PROTECTED]> wrote:
> I tried adding those options but still get the same error; "could not
> find an LDAP library".
>
> > I don't know why you're not finding ldap.  Do you have a library of
> > the name libldap.a (or whatever suffix AIX uses, I forget) in that /
> > svn/lib directory?  I have no idea why configure wouldn't find it there.
>
> Yes, libldap.a exists there.


If you look at srclib/apr-utill/config.lig you can see the test
programs autoconf is using to determine if an libldap.a is suitable.

You might recognize the linker error and be able to fix it / modify
the autoconf test / m4

--
Eric Covener
[EMAIL PROTECTED]

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] mod_rewrite to speed up twiki

2007-01-05 Thread Timothy Legge
Hi

I have been following Christian Folini's "Rock your Wiki!" article in
the April issue of Sysadmin magazine.  I have implemented his rules and
script to generate a cached page but things do not seem to be working.
I have reviewed the logs and it seems like the rules below work.

I was concerned about the setting of the variables but according to the
log it works.  However, it seems that the generator does not return the
correct cache file name when run via mod_rewrite.  

### Rules begin

RewriteEngine   On
RewriteLogLevel 9

RewriteLog  /var/log/httpd/rewrite.log
RewriteLock /var/log/httpd/rewrite.lock

RewriteMap  generator
prg:/home/httpd/twiki/bin/content-cache-generator.pl
RewriteMap  remover
prg:/home/httpd/twiki/bin/content-cache-remover.pl

RewriteRule !/twiki/bin/(view|save)/ - [last]

RewriteRule /twiki/bin/(view|save)/(.*)/(.*)$ -
[ENV=TWIKIWEB:$2,ENV=TWIKIPAGE:$3]

RewriteCond
/home/httpd/twiki/cache/%{ENV:TWIKIWEB}.%{ENV:TWIKIPAGE}.html -s
RewriteRule /twiki/bin/view/
/twiki/cache/%{ENV:TWIKIWEB}.%{ENV:TWIKIPAGE}.html [last]

RewriteRule /twiki/bin/view/
${generator:%{ENV:TWIKIWEB}/%{ENV:TWIKIPAGE}} [last]

RewriteRule /twiki/bin/save/
/twiki/bin/save/${remover:%{ENV:TWIKIWEB}/%{ENV:TWIKIPAGE}} [last]

DocumentRoot /home/httpd/

### Rules end

The content-cache-generator.pl script seems to work at the command line.
I enter IT/WebHome and it returns /twiki/cache/IT.WebHome.html and the
file does exist.

### content-cache-generator.pl generator script begins

#!/usr/bin/perl -w
use strict;
use LWP;

$| = 1; # turn off buffering

my ($str, $res) = "";
my $ua = LWP::UserAgent->new(timeout => 10);

$ua->no_proxy('servername');
while (  ) {
chomp($_);
$str = $_;
$res =
$ua->get("http://servername/twiki/bin/view/$str\?x-ignore";);
if ($res->is_success && $res->status_line eq "200 OK") {
s/\//./;
if (open(FILE, ">/home/httpd/twiki/cache/$_.html")) {
print FILE $res->content;
close(FILE);
print "/twiki/cache/$_.html\n";
}
else {
print "/twiki/bin/view/$str\n";
}
}
else {
print "/twiki/bin/view/$str\n";
}
}

### content-cache-generator.pl generator script begins

I have included the rewrite logs for the one request for IT/WebHome.  It
seems to me that there is too much in the file for the one request.  I
expect to see two requests (one from my pc to apache and the other from
the apache server during the mod_rewrite call to the generator script)

Sorry for the length of the email but I have been try to figure this out
for days...

### Begin log file 

Log file attached...

Thanks in advance

Tim

**
This E-mail message (including attachments, if any) is intended for the use of 
the individual or entity to which it is addressed and may contain information 
that is privileged, proprietary, confidential and exempt from disclosure. If 
you are not the intended recipient, you are notified that any dissemination, 
distribution or copying of this communication is strictly prohibited. If you 
have received this communication in error, please notify the sender and erase 
this E-mail message immediately. 

Le present message electronique (y compris les pieces qui y sont annexees, le 
cas echeant) s'addresse au destinataire indique et peut contenir des 
renseignements de caractere prive ou confidentiel. Si vous n'etes pas le 
destinataire de ce document, nous vous signalons qu'il est strictement interdit 
de le diffuser, de le distribuer ou de le reproduire. Si ce message vous a ete 
transmis par erreur, veuillez en informer l'expediteur et le  supprimer 
immediatement.



rewrite.log.tar.gz
Description: rewrite.log.tar.gz
-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [EMAIL PROTECTED] Forcing logging to the access log

2007-01-05 Thread Davide Bianchi

Steve Swift wrote:
Is there some way to force the update of the access_log to be committed 
before the process starts handling the request?


Not without hacking the code, since the access_log contains the return 
code of the request and that's not known until the request has been served.


I got a group of four of them in the space of one second, so my theory 
is that the faults occur loading images associated with one page.


I've saw scores of those errors when we were using Dynamo (application
server) in combination with mod_ssl, apparently they don't "play nice" 
together, and like you said, no 'error' was perceived by the client.


Davide

--
What's good for Standard Oil is good for Microsoft.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Special chars in third party module mod_getaccess

2007-01-05 Thread Sternath, Elmar
Hello,
 
sorry for this slightly off-topic issue: the Entrust GetAccess module
does not support certain special chars like '~':
 
[Fri Jan 05 16:20:46 2007] [error] mod_getaccess::ga_check_access:
Invalid URI:
/webdynpro/resources/sap.com/tc~wd~dispwda/global/SSR/js/popup_ie6.js.
'~' is NOT a valid char.

Has anyone experience with GetAccess to be able to provide a solution
how to fix for this problem?
 
Thanks,
Elmar


Re: [EMAIL PROTECTED] Special chars in third party module mod_getaccess

2007-01-05 Thread Nick Kew
On Fri, 5 Jan 2007 16:44:40 +0100
"Sternath, Elmar" <[EMAIL PROTECTED]> wrote:

> Hello,
>  
> sorry for this slightly off-topic issue: the Entrust GetAccess module
> does not support certain special chars like '~':

What do you mean, "support"?  Where's that coming from?

> [Fri Jan 05 16:20:46 2007] [error] mod_getaccess::ga_check_access:
> Invalid URI:
> /webdynpro/resources/sap.com/tc~wd~dispwda/global/SSR/js/popup_ie6.js.
> '~' is NOT a valid char.
> 
> Has anyone experience with GetAccess to be able to provide a solution
> how to fix for this problem?

Not unless you tell us why it's a problem.  That looks like a
security feature to me.

-- 
Nick Kew

Application Development with Apache - the Apache Modules Book
http://www.apachetutor.org/

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] PHP configuration error

2007-01-05 Thread Richard Lynch
On Fri, January 5, 2007 1:34 am, Jay Chandler wrote:
> Using FreeBSD 6.1 here with Apache 2.2 and PHP 5 (both installed from
> ports)-- trying to get it to render .php pages correctly, but instead
> it
> insists on trying to save the files instead.
>
> I've added the following lines to httpd.conf:
>
> LoadModule php5_module libexec/apache22/libphp5.so
> DirectoryIndex index.html index.php
> AddType application/x-httpd-php .php
> AddType application/x-httpd-php-source .phps

Check your error.log file right after startup of Apache, and see if it
complains about libphp5.so not being there, or something similar...

Paths, permissions, or a failed compilation of PHP could yield various
different error messages there.

Most of them are more or less clear to read/understand...

-- 
Some people have a "gift" link here.
Know what I want?
I want you to buy a CD from some starving artist.
http://cdbaby.com/browse/from/lynch
Yeah, I get a buck. So?


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Verisign signatures with Apache server

2007-01-05 Thread Booterbaugh, Nancy
This is my first posting.  I don't know much about this server, so
please be patient.

My company has an Apache server which is used to send and receive AS2
messages.  The server was set up with a virtual host to allow both
inbound and outbound processing on the same instance.

The server was originally set up with self-signed certificates and is
working fine.  However, now we have a requirement from our users to
replace with Verisign certificates.  Can the Apache server be set up to
use Verisign certificates?  If so, how can this be done?

Thanks for your help!


Re: [EMAIL PROTECTED] Apache+mod_jk+Tomcat+mod_rewrite+cookie

2007-01-05 Thread DEVAL SHAH

Hello Fred,
I set the cookie path "/" and it works fine now.

Thanks for the help.



From: fredk2 <[EMAIL PROTECTED]>
Reply-To: users@httpd.apache.org
To: users@httpd.apache.org
Subject: Re: [EMAIL PROTECTED] Apache+mod_jk+Tomcat+mod_rewrite+cookie
Date: Fri, 5 Jan 2007 06:34:29 -0800 (PST)


I guess you are not passing the full URL to the servlet, try:

RewriteRule ^/url1(.*) /MyApp/MyServlet$1 [PT]

Cheers, Fred
--
View this message in context: 
http://www.nabble.com/Apache%2Bmod_jk%2BTomcat%2Bmod_rewrite%2Bcookie-tf2922976.html#a8178908
Sent from the Apache HTTP Server - Users mailing list archive at 
Nabble.com.



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Forcing logging to the access log

2007-01-05 Thread Joshua Slive

On 1/5/07, Steve Swift <[EMAIL PROTECTED]> wrote:

I'm getting "child pid 32719 exit signal Segmentation fault (11)" in our
error_log but whatever is causing it, it is not generating corresponding
entries in the access_log.
I suspect that the child pid is failing to update the access_log because of
the segmentation fault.

Is there some way to force the update of the access_log to be committed
before the process starts handling the request?


See mod_log_forensic which is designed to handle exactly this sort of problem.

Joshua.

-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [EMAIL PROTECTED] Verisign signatures with Apache server

2007-01-05 Thread Roger Hendrix at Baldor-IS
Nancy:
 
You need to go the Verisign web site, find the pages that define the types of 
certificates, decide which type you want to use, then follow the instructions 
for generating the certificate files.
 
On completing this process you should have three (3) files like the following 
example:
 
(name).crt=> certificate file
(name).key  => key file
(name).csr   => certificate chain file
 
 
(name)  is a name of you choosing that matches the URL that apache server 
is serving.
 
 
You will need to move these files to a folder on the computer on which the 
Apache server is running.
 
You will then need to modify the apache configuration file containing the 
virtual host definition to contain the following entries:
 
SSLEngine On
SSLProtocol All
SSLCipherSuite HIGH:MEDIUM
 
SSLCertificateFile(folder location)/(name).crt
SSLCertificateKeyFile  (folder location)/(name).key
SSLCertificateChainFile   (folder location)/(name).csr
 
 
The final step will be to restart the apache server.
 
Good Luck.  
 
Roger Hendrix 
Information Services 
Baldor Electric Co. 
-Original Message-
From: Booterbaugh, Nancy [mailto:[EMAIL PROTECTED]
Sent: Friday, January 05, 2007 1:15 PM
To: users@httpd.apache.org
Subject: [EMAIL PROTECTED] Verisign signatures with Apache server



This is my first posting.  I don't know much about this server, so please be 
patient. 

My company has an Apache server which is used to send and receive AS2 messages. 
 The server was set up with a virtual host to allow both inbound and outbound 
processing on the same instance.

The server was originally set up with self-signed certificates and is working 
fine.  However, now we have a requirement from our users to replace with 
Verisign certificates.  Can the Apache server be set up to use Verisign 
certificates?  If so, how can this be done?

Thanks for your help! 



[EMAIL PROTECTED] dyld: Undefined symbols: _compress _uncompress

2007-01-05 Thread Spence

I'm running Apache/2.2.3 (Unix) DAV/2 mod_perl/2.0.2 Perl/v5.8.1 configured
on OS X 10.3.9.  The server will start and everything appears fine, but when
I try to gracefully restart, the server stops.

The only error message I have is:

dyld: /usr/local/apache2/bin/httpd Undefined symbols:
_compress
_uncompress

According to a couple of php forums, this is a problem with the mysql client
libraries using zlib.  So I tried reinstalling mysql with a link
(--with-zlib-dir=/opt/local/) to the latest version of zlib which I
installed from DarwinPorts, but this did nothing.  Starting MySQL with
DYLD_LIBRARY_PRINT=1 seems to suggest that zlib is not even being loaded by
MySQL.  Starting Apache with DYLD_LIBRARY_PRINT=1 also suggests that Apache
is not loading zlib.

Am I totally on the wrong track with the mysql client libraries?  Can
someone point me in the right direction?
-- 
View this message in context: 
http://www.nabble.com/dyld%3A-Undefined-symbols%3A-_compress-_uncompress-tf2927673.html#a8184902
Sent from the Apache HTTP Server - Users mailing list archive at Nabble.com.


-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Perpetural SIGSEV in Apache 1.3.27

2007-01-05 Thread Urie, Todd
I have run into a problem where http processes eventually get into a
state where they are continually getting and handling SIGSEV signals.
truss -p  shows:

Incurred fault #6, FLTBOUNDS  %pc = 0xFF0AF18C
  siginfo: SIGSEGV SEGV_MAPERR addr=0x0054
Incurred fault #6, FLTBOUNDS  %pc = 0xFF0AF18C
  siginfo: SIGSEGV SEGV_MAPERR addr=0x0054
Incurred fault #6, FLTBOUNDS  %pc = 0xFF0AF18C
  siginfo: SIGSEGV SEGV_MAPERR addr=0x0054

This continues forever and ever.  Eventually all http procs get into
this state and Apache stops serving pages.  The address is the same
everytime.  I am still working on troubleshooting this.  If anyone can
point to me to some references that might help me out, I would be very
grateful.

One other piece of information.  We have 10 hosts that serve our
intranet website behind an F5 load balancer.  We have seen this problem
all week and it has been the same host in all cases.  Even after
bouncing Apache completely it came back to the same host.  None of the
other 9 are affected by this problem.

pmap shows that 0xFF0AF18C is somewhere in libpthreads.so.1.
addr=0x0054 is in the httpd binary.

Todd Urie
Unix Admin
Blackrock Financial Mgmt
302-797-6039


THE INFORMATION CONTAINED IN THIS MESSAGE AND ANY ATTACHMENT MAY BE PRIVILEGED, 
CONFIDENTIAL, PROPRIETARY OR OTHERWISE PROTECTED FROM DISCLOSURE. If the reader 
of this message is not the intended recipient, you are hereby notified that any 
dissemination, distribution, copying or use of this message and any attachment 
is strictly prohibited. If you have received this message in error, please 
notify us immediately by replying to the message and permanently delete it from 
your computer and destroy any printout thereof.

RE: [EMAIL PROTECTED] Verisign signatures with Apache server

2007-01-05 Thread Booterbaugh, Nancy
Thanks, Roger.
I did all that, but am still getting the error, 

Private key not found

Have I missed something?



From: Roger Hendrix at Baldor-IS [mailto:[EMAIL PROTECTED] 
Sent: Friday, January 05, 2007 2:54 PM
To: users@httpd.apache.org
Subject: RE: [EMAIL PROTECTED] Verisign signatures with Apache server


Nancy:
 
You need to go the Verisign web site, find the pages that define the
types of certificates, decide which type you want to use, then follow
the instructions for generating the certificate files.
 
On completing this process you should have three (3) files like the
following example:
 
(name).crt=> certificate file
(name).key  => key file
(name).csr   => certificate chain file
 
 
(name)  is a name of you choosing that matches the URL that apache
server is serving.
 
 
You will need to move these files to a folder on the computer on which
the Apache server is running.
 
You will then need to modify the apache configuration file containing
the virtual host definition to contain the following entries:
 
SSLEngine On
SSLProtocol All
SSLCipherSuite HIGH:MEDIUM
 
SSLCertificateFile(folder location)/(name).crt
SSLCertificateKeyFile  (folder location)/(name).key
SSLCertificateChainFile   (folder location)/(name).csr
 
 
The final step will be to restart the apache server.
 
Good Luck.  
 
Roger Hendrix 
Information Services 
Baldor Electric Co. 
-Original Message-
From: Booterbaugh, Nancy [mailto:[EMAIL PROTECTED]
Sent: Friday, January 05, 2007 1:15 PM
To: users@httpd.apache.org
Subject: [EMAIL PROTECTED] Verisign signatures with Apache server



This is my first posting.  I don't know much about this server, so
please be patient. 

My company has an Apache server which is used to send and receive AS2
messages.  The server was set up with a virtual host to allow both
inbound and outbound processing on the same instance.

The server was originally set up with self-signed certificates and is
working fine.  However, now we have a requirement from our users to
replace with Verisign certificates.  Can the Apache server be set up to
use Verisign certificates?  If so, how can this be done?

Thanks for your help! 



Re: [EMAIL PROTECTED] PHP configuration error

2007-01-05 Thread Jay Chandler

Richard Lynch wrote:

On Fri, January 5, 2007 1:34 am, Jay Chandler wrote:
  

Using FreeBSD 6.1 here with Apache 2.2 and PHP 5 (both installed from
ports)-- trying to get it to render .php pages correctly, but instead
it
insists on trying to save the files instead.

I've added the following lines to httpd.conf:

LoadModule php5_module libexec/apache22/libphp5.so
DirectoryIndex index.html index.php
AddType application/x-httpd-php .php
AddType application/x-httpd-php-source .phps



Check your error.log file right after startup of Apache, and see if it
complains about libphp5.so not being there, or something similar...

Paths, permissions, or a failed compilation of PHP could yield various
different error messages there.

Most of them are more or less clear to read/understand...

  

[Fri Jan 05 15:23:11 2007] [notice] SIGHUP received.  Attempting to restart
[Fri Jan 05 15:23:12 2007] [notice] Digest: generating secret for digest 
authentication ...

[Fri Jan 05 15:23:12 2007] [notice] Digest: done
[Fri Jan 05 15:23:13 2007] [notice] Apache/2.2.3 (FreeBSD) mod_ssl/2.2.3 
OpenSSL/0.9.7e-p1 DAV/2 PHP/5.2.0 with Suhosin-Patch configured -- 
resuming normal operations


And that's it-- nothing else.

--
Jay Chandler
Network Administrator, Chapman University
714.628.7249 / [EMAIL PROTECTED]
Today's Excuse: endothermal recalibration 



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [EMAIL PROTECTED] Verisign signatures with Apache server

2007-01-05 Thread Sander Temme

Hi Nancy,

On Jan 5, 2007, at 2:55 PM, Booterbaugh, Nancy wrote:


I did all that, but am still getting the error,
Private key not found


If you compare your (working) configuration for the self-signed  
certificate with the new configuration, what are the differences?   
Look especially at the SSLCertificateKeyFile directive and its  
parameter. Does it point to the correct file that contains you  
private key?  Does that file have read permissions for the user ID  
that starts your web server?

Have I missed something?


You give us very little information.  If you are still running into  
problems, could you post the relevant section of your Apache  
configuration file?


Note: be sure to obfuscate or omit portions that you don't want to  
communicate to a public mailinglist!


Thanks,

S.

--
[EMAIL PROTECTED]http://www.temme.net/sander/
PGP FP: 51B4 8727 466A 0BC3 69F4  B7B8 B2BE BC40 1529 24AF




smime.p7s
Description: S/MIME cryptographic signature


[EMAIL PROTECTED] Apache cannot accept request from Proxy

2007-01-05 Thread DEVAL SHAH

Hello,
We are getting request from a proxy server and somehow that proxy server 
gets an internal server error.

This is the configuration:
Apache web server connected to Tomcat via mod_jk.

RewriteRule /url1(.*)/$  /TomcatWebApp/Servlet1

Now from the browser if I do
https://abc.com/url1/ it works fine.

If the request is made through proxy it gets an "500 Internal Server error". 
Do I have to enable anything on Apache server to accept connection from 
proxy. It looks I am missing something in Apache server confg. I can't find 
any error in the log files.


Any help on this?

Thank you in advance.



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[EMAIL PROTECTED] Apache not accepting request from proxy

2007-01-05 Thread DEVAL SHAH

Hello,
We are getting request from a proxy server and somehow that proxy server 
gets an internal server error.

This is the configuration:
Apache web server connected to Tomcat via mod_jk.

RewriteRule /url1(.*)/$  /TomcatWebApp/Servlet1

Now from the browser if I do
https://abc.com/url1/ it works fine.

If the request is made through proxy it gets an "500 Internal Server error". 
Do I have to enable anything on Apache server to accept connection from 
proxy. It looks I am missing something in Apache server confg. I can't find 
any error in the log files.


Any help on this?

Thank you in advance.



-
The official User-To-User support forum of the Apache HTTP Server Project.
See http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]