Re: [users@httpd] old solaris box (but heavily used)

2016-05-24 Thread james pruett
quick reply. I got taken off this task for now, but I plan on compiling 2.4.
Thanks for the help guys!
Jim


On Fri, May 20, 2016 at 5:40 PM, Nick Kew  wrote:

> On Thu, 2016-05-19 at 11:03 -0500, james pruett wrote:
> > Hi,
> >
> >
> > My boss wants us to provide a redirect page for use during
> > site-maintanance.
> >
> >
> > I assume this means I need to add mod_rewrite.
>
> Nothing remotely so complex!
>
> Just put your maintenance page somewhere, and start the
> server with -f pointing to a trivial config that just serves
> the page in response to everything.
>
> Or set it as a FallbackResource or ErrorDocument, and
> suppress your regular contents while under maintenance.
> Useful if you want to continue serving some vhosts
> while taking others out.
>
> --
> Nick Kew
>
>
>
> -
> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
> For additional commands, e-mail: users-h...@httpd.apache.org
>
>


Re: [users@httpd] rewrite in .htaccess

2016-05-24 Thread Miguel González
On 05/24/16 1:51 PM, Yehuda Katz wrote:
> Because the rewrite rule above it says it uses the last rule to run if
> it matches (that is what [L] means). Put your new config above the
> WordPress rule.


Now it works!

Thanks!

Miguel

-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [users@httpd] Change TMP dir

2016-05-24 Thread Paolo Giammarco
Ops

I tried so also:

sudo TMP=/newtmp apachectl start

apache start but always writes in /tmp




*Rispetta l'ambiente. Non stampare questa mail se non è necessario.*

2016-05-24 10:56 GMT+02:00 Paolo Giammarco :

> Thanks for the reply.
>
> I do not have the LD_LIBRARY_PATH in envvars files but I commented out
> APACHE_RUN_USER and APACHE_RUN_GROUP, and Apache did not start.
>
> Then the file is the right one
>
>
>
>
> *Rispetta l'ambiente. Non stampare questa mail se non è necessario.*
>
> 2016-05-24 10:18 GMT+02:00 Nick Kew :
>
>> On Tue, 2016-05-24 at 05:45 +0200, Paolo Giammarco wrote:
>> > I configured apache as a reverse proxy, and when I do an upload it
>> > writes in the /tmp directory but is too small.
>>
>> OK, what you originally tried with envvars should work.
>> Either your syntax is at odds with the shell, or you've
>> edited the wrong file.  Anything in /etc/ comes from
>> your distro package or a customised install, so
>> you'd have to check elsewhere for whether it's right.
>>
>> If you try to break it completely using envvars
>> (like, break LD_LIBRARY_PATH), what happens?
>>
>> --
>> Nick Kew
>>
>>
>>
>> -
>> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
>> For additional commands, e-mail: users-h...@httpd.apache.org
>>
>>
>


Re: [users@httpd] Change TMP dir

2016-05-24 Thread Paolo Giammarco
I tried so also:

sudo TMP=/newtmp apachectl

apache start but always writes in /tmp



*Rispetta l'ambiente. Non stampare questa mail se non è necessario.*

2016-05-24 10:56 GMT+02:00 Paolo Giammarco :

> Thanks for the reply.
>
> I do not have the LD_LIBRARY_PATH in envvars files but I commented out
> APACHE_RUN_USER and APACHE_RUN_GROUP, and Apache did not start.
>
> Then the file is the right one
>
>
>
>
> *Rispetta l'ambiente. Non stampare questa mail se non è necessario.*
>
> 2016-05-24 10:18 GMT+02:00 Nick Kew :
>
>> On Tue, 2016-05-24 at 05:45 +0200, Paolo Giammarco wrote:
>> > I configured apache as a reverse proxy, and when I do an upload it
>> > writes in the /tmp directory but is too small.
>>
>> OK, what you originally tried with envvars should work.
>> Either your syntax is at odds with the shell, or you've
>> edited the wrong file.  Anything in /etc/ comes from
>> your distro package or a customised install, so
>> you'd have to check elsewhere for whether it's right.
>>
>> If you try to break it completely using envvars
>> (like, break LD_LIBRARY_PATH), what happens?
>>
>> --
>> Nick Kew
>>
>>
>>
>> -
>> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
>> For additional commands, e-mail: users-h...@httpd.apache.org
>>
>>
>


Re: [users@httpd] mod_proxy_wstunnel with Unix domain sockets

2016-05-24 Thread Michael Fladischer
On 2016-05-22 15:49, Reko Turja wrote:
> The app in question was IP-socket based, but I think the basic idea is
> the same, both reverse and forward proxying has to be configured as well
> as secured channel if needed.

I added ProxyPassReverse but that did not have any effect. As I would
need to run quite a few instances of this ws-application I would like to
avoid cluttering my TCP ports.

Cheers,
-- 
Michael Fladischer
Fladi.at



signature.asc
Description: OpenPGP digital signature


Re: [users@httpd] mod_proxy_wstunnel with Unix domain sockets

2016-05-24 Thread Michael Fladischer
On 2016-05-22 20:51, Jim Jagielski wrote:
> What version of httpd are you using?

I'm using 2.4.18 from Debian/testing on amd64.

Cheers,
-- 
Michael Fladischer
Fladi.at



signature.asc
Description: OpenPGP digital signature


Re: [users@httpd] mod_proxy_wstunnel with Unix domain sockets

2016-05-24 Thread Michael Fladischer
On 2016-05-22 15:19, Eric Covener wrote:
> I got marginally farther (wstunnell connected to example.com so
> something is still amiss).

My tornado application listening on the UDS does not see any incoming
connections. So it seems that it hangs somewhere in Apache.

>  Are you sure your curl test had an Upgrade: WebSocket header?  That
> is one thing that makes wstunnell decline to handle the request.

You are right, curl missed the required headers. I went on to test it
with `wscat`[0] and Echo Test[1]. Both work when I use nginx to proxy
the connection to my UDS. But no response when using it with Apache.

[0] http://websockets.github.io/ws/
[1] http://www.websocket.org/echo.html

Cheers,
-- 
Michael Fladischer
Fladi.at



signature.asc
Description: OpenPGP digital signature


Re: [users@httpd] TLS 1.1 and 1.2 and SNI support

2016-05-24 Thread linux.il
Eric and Igor, you're right - SNI works nice with TLS1.x.
In my case it was some weird compatibility issues, not related to SNI.
Thank you very much!
Vitaly

On Tue, May 24, 2016 at 9:37 AM, linux.il  wrote:

>
>> > On Mon, May 23, 2016 at 5:16 PM, Eric Covener 
>> wrote:
>> >>
>> >> > For some reason if I add "-TLSv1" to SSLProtocol directive in my
>> default
>> >> > SSL vhost, SNI isn't working anymore:
>> >> >
>> >> >  "SSLProtocol All -SSLv2 -SSLv3 -TLSv1"
>> >> >
>> >>
>> >> What protocol is used? Does the client send the SNI extension?
>> >>
>> > I'm using  the same "curl" and "wget" for testing. As far as I disable
>> TLS v1.0, I get "curl: (35) SSL connect error" and
>> > "ERROR: certificate common name “mydefault-ssl-vhost-name” doesn’t
>> match requested host name “my-vhost-name”"
>> > in wget.
>> > BTW, similar issue reported here
>> http://serverfault.com/questions/700143/does-sni-really-require-tlsv1-insecure
>>
>>
>> You need to use sni capable client. For example use -H to set the Host
>> header for curl when trying to connect to non-default vhost.
>>
>
> Sure, agree.
> Of course, I can re-read changelogs and run sniffer, but IMHO my clients
> do support SNI  - I use the same two clients. SNI works well when server
> supports TLS 1.0, and doesn't work without TLS1.0.
>
>


[users@httpd] rewrite in .htaccess

2016-05-24 Thread Miguel González
Hi all,

  I´m having issues with a migration to a new domain redirecting all
URLs to the new domain.

  My .htaccess looks like this:



RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]


# END WordPress

RewriteCond %{HTTP_HOST} ^oldomain\.com$ [OR]
RewriteCond %{HTTP_HOST} ^www.olddomain.com$
RewriteRule ^(.*)$ http://www.newdomain.com/$1 [R=302,L]


For the time being I´m using a 302 redirect until I made sure it works.

My main problem is that if I tyope old.domain.com I get redirected to
www.newdomain.com. But if type some sections, I don´t get any redirection:

olddomain.com/team/
olddomain.com/contact/
etc

I have purged the Varnish cache in case there is any issue because the
only section that gets redirected is oldomain.com/wp-admin/ (which is
bypassed by Varnish).


I have Apache 2.4.18 from Cpanel and behind Varnish

Thanks,

Miguel

-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [users@httpd] Change TMP dir

2016-05-24 Thread Paolo Giammarco
Thanks for the reply.

I do not have the LD_LIBRARY_PATH in envvars files but I commented out
APACHE_RUN_USER and APACHE_RUN_GROUP, and Apache did not start.

Then the file is the right one




*Rispetta l'ambiente. Non stampare questa mail se non è necessario.*

2016-05-24 10:18 GMT+02:00 Nick Kew :

> On Tue, 2016-05-24 at 05:45 +0200, Paolo Giammarco wrote:
> > I configured apache as a reverse proxy, and when I do an upload it
> > writes in the /tmp directory but is too small.
>
> OK, what you originally tried with envvars should work.
> Either your syntax is at odds with the shell, or you've
> edited the wrong file.  Anything in /etc/ comes from
> your distro package or a customised install, so
> you'd have to check elsewhere for whether it's right.
>
> If you try to break it completely using envvars
> (like, break LD_LIBRARY_PATH), what happens?
>
> --
> Nick Kew
>
>
>
> -
> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
> For additional commands, e-mail: users-h...@httpd.apache.org
>
>


Re: [users@httpd] Change TMP dir

2016-05-24 Thread Marat Khalili

One other thought.  If the proxy's backend supports HTTP/1.1
then there's no reason to spool any tempfile in the first place.
Check out proxy-sendchunked vs proxy-sendcl in the docs.
I'd also check if it's Apache creating temporary files and not user 
agent. E.g. Windows WebClient may do it.


--

With Best Regards,
Marat Khalili



[users@httpd] unsubscibe

2016-05-24 Thread Daniel Betz



Re: [users@httpd] Change TMP dir

2016-05-24 Thread Nick Kew
On Tue, 2016-05-24 at 05:45 +0200, Paolo Giammarco wrote:
> I configured apache as a reverse proxy, and when I do an upload it
> writes in the /tmp directory but is too small.

One other thought.  If the proxy's backend supports HTTP/1.1
then there's no reason to spool any tempfile in the first place.
Check out proxy-sendchunked vs proxy-sendcl in the docs.

-- 
Nick Kew



-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Re: [users@httpd] Change TMP dir

2016-05-24 Thread Nick Kew
On Tue, 2016-05-24 at 05:45 +0200, Paolo Giammarco wrote:
> I configured apache as a reverse proxy, and when I do an upload it
> writes in the /tmp directory but is too small.

OK, what you originally tried with envvars should work.
Either your syntax is at odds with the shell, or you've
edited the wrong file.  Anything in /etc/ comes from
your distro package or a customised install, so
you'd have to check elsewhere for whether it's right.

If you try to break it completely using envvars
(like, break LD_LIBRARY_PATH), what happens?

-- 
Nick Kew



-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org