Re: [CentOS] Apache mpm itk

2023-05-17 Thread Gionatan Danti
Il 2023-05-17 01:12 Chris Adams ha scritto: The package was orphaned in Fedora, so there's no maintainer to create and manage builds. Hi, I did not know that. Thanks for sharing. -- Danti Gionatan Supporto Tecnico Assyoma S.r.l. - www.assyoma.it email: g.da...@assyoma.it - i...@assyoma.it GPG

Re: [CentOS] Apache mpm itk

2023-05-16 Thread Chris Adams
Once upon a time, Gionatan Danti said: > Il 2022-09-23 19:06 Gionatan Danti ha scritto: > >Hi all, > >the EPEL repository for CentOS7 contains httpd-itk, an apache module > >for running different vhosts under specific user/group ID. > > > >For RHEL8 I can find it only in 3rd party repos, while I m

Re: [CentOS] Apache mpm itk

2023-05-16 Thread Gionatan Danti
Il 2022-09-23 19:06 Gionatan Danti ha scritto: Hi all, the EPEL repository for CentOS7 contains httpd-itk, an apache module for running different vhosts under specific user/group ID. For RHEL8 I can find it only in 3rd party repos, while I misses it entirely for RHEL9. Is the module deprecated?

Re: [CentOS] Apache APISIX on CentOS Linux release 7.9.2009 (Core)

2022-04-14 Thread Anand Buddhdev
On 14/04/2022 20:03, Kaushal Shriyan wrote: Kaushal, [root@]#journalctl -u apisix.service Apr 14 23:29:42 apacheapisixapigateway apisix[1798]: /usr/local/openresty/luajit/bin/luajit ./apisix/cli/apisix.lua start Apr 14 23:29:42 apacheapisixapigateway apisix[1798]: etcd cluster version 3.3.0 is

Re: [CentOS] Apache shows PHP code instead of executing it

2021-01-06 Thread Kaushal Shriyan
On Wed, Jan 6, 2021 at 11:49 PM Alexander Dalloz wrote: > Am 06.01.2021 um 19:10 schrieb Kaushal Shriyan: > > On Wed, Jan 6, 2021 at 9:48 PM Christopher Wensink < > > cwens...@five-star-plastics.com> wrote: > > > >> Does the file have execute permissions, what is the file's permissions > >> and i

Re: [CentOS] Apache shows PHP code instead of executing it

2021-01-06 Thread Alexander Dalloz
Am 06.01.2021 um 19:10 schrieb Kaushal Shriyan: On Wed, Jan 6, 2021 at 9:48 PM Christopher Wensink < cwens...@five-star-plastics.com> wrote: Does the file have execute permissions, what is the file's permissions and is it owned by the user running apache? Chris Hi Chris, I have added the be

Re: [CentOS] Apache shows PHP code instead of executing it

2021-01-06 Thread Kaushal Shriyan
On Wed, Jan 6, 2021 at 9:48 PM Christopher Wensink < cwens...@five-star-plastics.com> wrote: > Does the file have execute permissions, what is the file's permissions > and is it owned by the user running apache? > > Chris > Hi Chris, I have added the below in /etc/httpd/conf/httpd.conf. The issu

Re: [CentOS] Apache shows PHP code instead of executing it

2021-01-06 Thread Christopher Wensink
Does the file have execute permissions, what is the file's permissions and is it owned by the user running apache? Chris On 1/6/2021 10:13 AM, Kaushal Shriyan wrote: Hi, I am running the below php, httpd and CentOS Linux version. # rpm -qa | grep php php73-mbstring-7.3.25-1.el7.ius.x86_64 ph

Re: [CentOS] Apache shows PHP code instead of executing it

2021-01-06 Thread Leon Fauster via CentOS
Am 06.01.21 um 17:13 schrieb Kaushal Shriyan: Hi, I am running the below php, httpd and CentOS Linux version. # rpm -qa | grep php php73-mbstring-7.3.25-1.el7.ius.x86_64 php73-json-7.3.25-1.el7.ius.x86_64 php73-fpm-7.3.25-1.el7.ius.x86_64 php73-pdo-7.3.25-1.el7.ius.x86_64 php73-gd-7.3.25-1.el7.

Re: [CentOS] Apache HTTPD not picking up environment variables.

2020-10-23 Thread Harold Pritchett
Thank you very much. That did it! Hal -Original Message- From: CentOS On Behalf Of Jonathan Billings Sent: Friday, October 23, 2020 1:06 PM To: CentOS mailing list Subject: Re: [CentOS] Apache HTTPD not picking up environment variables. [EXTERNAL SENDER - PROCEED CAUTIOUSLY] On

Re: [CentOS] Apache HTTPD not picking up environment variables.

2020-10-23 Thread Jonathan Billings
On Fri, Oct 23, 2020 at 04:27:34PM +, Harold Pritchett wrote: > I'm trying to install DB2 on a CentOS 7 server. The problem I'm > seeing is that the Apache httpd server fails to pick up the db2 > environment variables. On an older version running under CentOS 5 > this was done by inserting th

Re: [CentOS] Apache umask

2020-07-21 Thread Emmett Culley via CentOS
On 7/21/20 12:22 PM, Emmett Culley via CentOS wrote: On 7/21/20 9:59 AM, Simon Matter wrote: On 7/19/20 10:41 PM, Simon Matter via CentOS wrote: On 7/13/20 6:40 PM, Emmett Culley via CentOS wrote: I need to set the umask for apache to 002.  I've tried every idea I've found on the internet, but

Re: [CentOS] Apache umask

2020-07-21 Thread Emmett Culley via CentOS
On 7/21/20 9:59 AM, Simon Matter wrote: On 7/19/20 10:41 PM, Simon Matter via CentOS wrote: On 7/13/20 6:40 PM, Emmett Culley via CentOS wrote: I need to set the umask for apache to 002.  I've tried every idea I've found on the internet, but nothing make a difference.  Most suggest that I put "

Re: [CentOS] Apache umask

2020-07-21 Thread Simon Matter via CentOS
> On 7/19/20 10:41 PM, Simon Matter via CentOS wrote: >>> On 7/13/20 6:40 PM, Emmett Culley via CentOS wrote: I need to set the umask for apache to 002.  I've tried every idea I've found on the internet, but nothing make a difference.  Most suggest that I put "umask 002" in /etc

Re: [CentOS] Apache umask

2020-07-20 Thread Emmett Culley via CentOS
On 7/19/20 10:41 PM, Simon Matter via CentOS wrote: On 7/13/20 6:40 PM, Emmett Culley via CentOS wrote: I need to set the umask for apache to 002.  I've tried every idea I've found on the internet, but nothing make a difference.  Most suggest that I put "umask 002" in /etc/sysconfig/httpd, but t

Re: [CentOS] Apache umask

2020-07-19 Thread Simon Matter via CentOS
> On 7/13/20 6:40 PM, Emmett Culley via CentOS wrote: >> I need to set the umask for apache to 002.  I've tried every idea I've >> found on the internet, but nothing make a difference.  Most suggest that >> I put "umask 002" in /etc/sysconfig/httpd, but that doesn't seem to make >> a difference.  O

Re: [CentOS] Apache umask

2020-07-19 Thread Chris Schanzle via CentOS
On 7/13/20 6:40 PM, Emmett Culley via CentOS wrote: > I need to set the umask for apache to 002.  I've tried every idea I've found > on the internet, but nothing make a difference.  Most suggest that I put > "umask 002" in /etc/sysconfig/httpd, but that doesn't seem to make a > difference.  Othe

Re: [CentOS] Apache umask

2020-07-18 Thread Emmett Culley via CentOS
On 7/15/20 12:21 PM, Leon Fauster via CentOS wrote: Am 15.07.20 um 20:02 schrieb Emmett Culley via CentOS: On 7/15/20 2:39 AM, Gianluca Cecchi wrote: On Wed, Jul 15, 2020 at 2:39 AM Emmett Culley via CentOS mailto:centos@centos.org>> wrote:     Thanks for the info.  I hadn't seen that before

Re: [CentOS] Apache umask

2020-07-15 Thread Leon Fauster via CentOS
Am 15.07.20 um 20:02 schrieb Emmett Culley via CentOS: On 7/15/20 2:39 AM, Gianluca Cecchi wrote: On Wed, Jul 15, 2020 at 2:39 AM Emmett Culley via CentOS mailto:centos@centos.org>> wrote:     Thanks for the info.  I hadn't seen that before nor many of the links.  I had seen the suggested sy

Re: [CentOS] Apache umask

2020-07-15 Thread Emmett Culley via CentOS
On 7/15/20 2:39 AM, Gianluca Cecchi wrote: On Wed, Jul 15, 2020 at 2:39 AM Emmett Culley via CentOS mailto:centos@centos.org>> wrote: Thanks for the info.  I hadn't seen that before nor many of the links.  I had seen the suggested systemd fix, but have never been able got them to work. An

Re: [CentOS] Apache umask

2020-07-15 Thread Gianluca Cecchi
On Wed, Jul 15, 2020 at 2:39 AM Emmett Culley via CentOS wrote: > > Thanks for the info. I hadn't seen that before nor many of the links. I > had seen the suggested systemd fix, but have never been able got them to > work. And I've tried many combinations. Still no luck. > > There has to be a

Re: [CentOS] Apache umask

2020-07-14 Thread Emmett Culley via CentOS
On 7/13/20 4:21 PM, Phoenix, Merka wrote: I need to set the umask for apache to 002. I've tried every idea I've found on the internet, but nothing make a difference. Most suggest that I put "umask 002" in /etc/sysconfig/httpd, but that doesn't seem to make a difference.>> Other's suggest a

Re: [CentOS] Apache umask

2020-07-13 Thread Phoenix, Merka
>> I need to set the umask for apache to 002. I've tried every idea I've found >> on the internet, but nothing make a difference. Most suggest that I put >> "umask 002" in /etc/sysconfig/httpd, but that doesn't seem to make a >> difference.>> >> Other's suggest adding something to the httpd.

Re: [CentOS] Apache (httpd) fails to start at boot - Centos 8.1

2020-06-19 Thread Anthony K
On 16/6/20 5:34 pm, Anthony K wrote: The new way to do this is exactly what Gordon suggested - using `systemctl edit ` creates an override in `/etc/systemd/system/httpd.service.d/override.conf`. The only issue is that there is no `systemctl` related command to remove this override - you will

Re: [CentOS] Apache (httpd) fails to start at boot - Centos 8.1

2020-06-16 Thread Alan McRae via CentOS
Thank you Gordon. That works for me. 8.2 needs the same fix. Alan On 16/06/2020 16:21, Gordon Messmer wrote: On 6/15/20 7:06 PM, Jay Hart wrote: If I do 'systemctl start httpd', apache will start right up.  But during boot, it doesn't and I get the resulting errors below. Jun 15 21:17:28 dre

Re: [CentOS] Apache (httpd) fails to start at boot - Centos 8.1

2020-06-16 Thread Jay Hart
Thanks to all that responded. Gordon's suggestion worked brilliantly. I ran the suggested command, saved the file, rebooted, apache came right up. Can't thank you guys enough. Now, lets try to solve my intermittent connectivity issue, more on that later... Jay > On 16/6/20 4:15 pm, Alessandro

Re: [CentOS] Apache (httpd) fails to start at boot - Centos 8.1

2020-06-16 Thread Anthony K
On 16/6/20 4:15 pm, Alessandro Baggi wrote: Note: when you will get update for httpd package all could be reverted to the original status, so to avoid that your modified httpd.service will get an overwrite, create an alternative httpd.service in /etc/systemd/system (if I'm not wrong). Proba

Re: [CentOS] Apache (httpd) fails to start at boot - Centos 8.1

2020-06-16 Thread John Pierce
Just a wild guess, but it sounds like Apache is being started before the network is online.Is this host simple static Ethernet or DHCP, or is it something more complicated like WiFi? I believe you can set service dependencies with systemd, ideally your apache service isn't started before the n

Re: [CentOS] Apache (httpd) fails to start at boot - Centos 8.1

2020-06-16 Thread Simon Matter via CentOS
> > > Il 16/06/20 08:11, Alessandro Baggi ha scritto: >> >> >> Il 16/06/20 06:21, Gordon Messmer ha scritto: >>> On 6/15/20 7:06 PM, Jay Hart wrote: If I do 'systemctl start httpd', apache will start right up.  But during boot, it doesn't and I get the resulting errors below. >>

Re: [CentOS] Apache (httpd) fails to start at boot - Centos 8.1

2020-06-15 Thread Alessandro Baggi
Il 16/06/20 08:11, Alessandro Baggi ha scritto: Il 16/06/20 06:21, Gordon Messmer ha scritto: On 6/15/20 7:06 PM, Jay Hart wrote: If I do 'systemctl start httpd', apache will start right up.  But during boot, it doesn't and I get the resulting errors below. Jun 15 21:17:28 dream httpd[15

Re: [CentOS] Apache (httpd) fails to start at boot - Centos 8.1

2020-06-15 Thread Alessandro Baggi
Il 16/06/20 06:21, Gordon Messmer ha scritto: On 6/15/20 7:06 PM, Jay Hart wrote: If I do 'systemctl start httpd', apache will start right up.  But during boot, it doesn't and I get the resulting errors below. Jun 15 21:17:28 dream httpd[1534]: (99)Cannot assign requested address: AH00072:

Re: [CentOS] Apache (httpd) fails to start at boot - Centos 8.1

2020-06-15 Thread Gordon Messmer
On 6/15/20 7:06 PM, Jay Hart wrote: If I do 'systemctl start httpd', apache will start right up. But during boot, it doesn't and I get the resulting errors below. Jun 15 21:17:28 dream httpd[1534]: (99)Cannot assign requested address: AH00072: make_sock: could not bind to address 10.20.30.11:

Re: [CentOS] Apache (httpd) fails to start at boot - Centos 8.1

2020-06-15 Thread Kenneth Porter
On 6/15/2020 7:06 PM, Jay Hart wrote: Jun 15 21:17:28 dream httpd[1534]: (99)Cannot assign requested address: AH00072: make_sock: could not bind to address 10.20.30.11:80 Could some transient service be holding port 80 at that time? You could probably arrange to run a script that runs "lsof -

Re: [CentOS] Apache (httpd) fails to start at boot - Centos 8.1

2020-06-15 Thread Alan McRae via CentOS
I have always had exactly the same problem. I had to write a script and run it at boot time: sleep 10 /usr/bin/systemctl start httpd Must be some timing problem with the interface addresses not being set up in time. Alan On 16/06/2020 14:06, Jay Hart wrote: If I do 'systemctl start httpd',

Re: [CentOS] Apache and web content permissions

2017-12-04 Thread Nicolas Kovacs
Le 02/12/2017 à 16:25, Brian Mathis a écrit : > You could write a script to open the permissions, apply updates using > something like http://wp-cli.org/, then close the permissions again. Run > it through cron so you get updates in a timely manner. I just published a detailed blog post about upg

Re: [CentOS] Apache and web content permissions

2017-12-04 Thread Nicolas Kovacs
Le 04/12/2017 à 13:58, Nicolas Kovacs a écrit : > find $WPDIR -type f -exec chmod 0664 {} \; Oops. 644, not 664. :o) -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Blog : https://blog.microlinux.fr Mail : i...@microlinu

Re: [CentOS] Apache and web content permissions

2017-12-04 Thread Nicolas Kovacs
Le 02/12/2017 à 16:25, Brian Mathis a écrit : > You could write a script to open the permissions, apply updates using > something like http://wp-cli.org/, then close the permissions again. Run > it through cron so you get updates in a timely manner. Here's a little script I wrote to automatically

Re: [CentOS] Apache and web content permissions

2017-12-04 Thread Nicolas Kovacs
Le 03/12/2017 à 23:59, Pete Travis a écrit : > TL;DR my process is: > - Make a list of real humans that need to work on the site > - Assume the web server user should have at least read access on all > files in the site documentroot, or we'd put them somewhere else. > - Make a list of directories (

Re: [CentOS] Apache and web content permissions

2017-12-03 Thread Pete Travis
Hi Niki, The principle to work by here is 'least required access'. There's two functional types of users we care about, the one executing the PHP code (probably apache or php-fpm) and admins like yourself with FTP/shell access. Upstream wordpress documents application write requirements at https

Re: [CentOS] Apache and web content permissions

2017-12-03 Thread Nicolas Kovacs
Le 02/12/2017 à 16:25, Brian Mathis a écrit : > You could write a script to open the permissions, apply updates using > something like http://wp-cli.org/, then close the permissions again. Run > it through cron so you get updates in a timely manner. This is EXACTLY what I've been looking for. I'v

Re: [CentOS] Apache and web content permissions

2017-12-02 Thread Leon Fauster
> Am 02.12.2017 um 22:14 schrieb Nicolas Kovacs : > > Le 02/12/2017 à 10:30, Nicolas Kovacs a écrit : > > ==> Reminder: this is actually the question I'm asking in my post. Oh, we all read (only) what we want :-) > So I'm finally coming to my question. How problematic is it really to >> have

Re: [CentOS] Apache and web content permissions

2017-12-02 Thread Richard
> Date: Saturday, December 02, 2017 22:14:19 +0100 > From: Nicolas Kovacs > > Le 02/12/2017 à 10:30, Nicolas Kovacs a écrit : > > ==> Reminder: this is actually the question I'm asking in my post. > >> So I'm finally coming to my question. How problematic is it really >> to have the apache use

Re: [CentOS] Apache and web content permissions

2017-12-02 Thread Nicolas Kovacs
Le 02/12/2017 à 10:30, Nicolas Kovacs a écrit : ==> Reminder: this is actually the question I'm asking in my post. > So I'm finally coming to my question. How problematic is it really to > have the apache user and group owning the stuff under /var/www? :o) -- Microlinux - Solutions informatiqu

Re: [CentOS] Apache and web content permissions

2017-12-02 Thread Leon Fauster
Am 02.12.2017 um 14:27 schrieb Nicolas Kovacs : > > Le 02/12/2017 à 14:19, Leon Fauster a écrit : >> I would build a rpm package of wordpress (everything can be defined >> there like permissions etc) > > The initial question was: WHAT permissions? The application design should have considered

Re: [CentOS] Apache and web content permissions

2017-12-02 Thread Brian Mathis
You could write a script to open the permissions, apply updates using something like http://wp-cli.org/, then close the permissions again. Run it through cron so you get updates in a timely manner. ~ Brian Mathis @orev On Sat, Dec 2, 2017 at 8:27 AM, Nicolas Kovacs wrote: > Le 02/12/2017 à 14:

Re: [CentOS] Apache and web content permissions

2017-12-02 Thread Nicolas Kovacs
Le 02/12/2017 à 14:19, Leon Fauster a écrit : > I would build a rpm package of wordpress (everything can be defined > there like permissions etc) The initial question was: WHAT permissions? > and disabling the automatic update > function in wordpress. Build once it can be installed on all (two >

Re: [CentOS] Apache and web content permissions

2017-12-02 Thread Leon Fauster
> Am 02.12.2017 um 10:30 schrieb Nicolas Kovacs : > > Hi, > > Until a few months ago, when I had to setup a web server under CentOS, I > assigned (I'm not sure about the correct english verb for "chown"ing) > all the web pages to the apache user and group. To give you an example, > let's say I h

Re: [CentOS] Apache Compression

2017-09-22 Thread Frank Cox
On Fri, 22 Sep 2017 16:41:51 -0500 Matt wrote: > I have a centos 7 install with apache running. How do I get apache to > use gzip compression on html and text based content? I don't know how definitive it is, but this is what I use here: AddOutputFilterByType DEFLATE text/text AddOutputFilterB

Re: [CentOS] Apache 2.2 EOL - what is Red Hat's story for RHEL6?

2017-09-13 Thread Johnny Hughes
On 09/13/2017 08:10 AM, Alan McKay wrote: >> I don't have any official knowledge, but I would suspect that they will >> maintain httpd-2.2 throughout the lifetime of RHEL6. Security issues >> would be backported. (If older versions of RHEL are any indication) > > The basic problem is though that

Re: [CentOS] Apache 2.2 EOL - what is Red Hat's story for RHEL6?

2017-09-13 Thread Alan McKay
So looks like the definitive answer is here for those who have access https://access.redhat.com/solutions/2595461 What I don't understand is in the top left it says "solution unverified" and I"m not sure what that means. Basic summary is that RH will continue to support apache 2.2 to the end of

Re: [CentOS] Apache 2.2 EOL - what is Red Hat's story for RHEL6?

2017-09-13 Thread James Hogarth
On 13 September 2017 at 14:10, Alan McKay wrote: > > I don't have any official knowledge, but I would suspect that they will > > maintain httpd-2.2 throughout the lifetime of RHEL6. Security issues > > would be backported. (If older versions of RHEL are any indication) > > The basic problem is

Re: [CentOS] Apache 2.2 EOL - what is Red Hat's story for RHEL6?

2017-09-13 Thread Alan McKay
> I don't have any official knowledge, but I would suspect that they will > maintain httpd-2.2 throughout the lifetime of RHEL6. Security issues > would be backported. (If older versions of RHEL are any indication) The basic problem is though that there won't be any security fixes for 2.2 How ca

Re: [CentOS] Apache 2.2 EOL - what is Red Hat's story for RHEL6?

2017-09-13 Thread Leon Fauster
> Am 13.09.2017 um 01:04 schrieb Johnny Hughes : > > On 09/12/2017 02:58 PM, Stephen John Smoogen wrote: >> On 12 September 2017 at 15:29, Alan McKay wrote: >>> Hi folks, >>> >>> I have been googling for a few weeks now and not finding anything. >>> Apache 2.2 is EOL at the end of this year. >>>

Re: [CentOS] Apache 2.2 EOL - what is Red Hat's story for RHEL6?

2017-09-12 Thread Johnny Hughes
On 09/12/2017 02:58 PM, Stephen John Smoogen wrote: > On 12 September 2017 at 15:29, Alan McKay wrote: >> Hi folks, >> >> I have been googling for a few weeks now and not finding anything. >> Apache 2.2 is EOL at the end of this year. >> >> Has Red Hat announced a plan yet on what they are doing i

Re: [CentOS] Apache 2.2 EOL - what is Red Hat's story for RHEL6?

2017-09-12 Thread Rainer Duffner
> Am 12.09.2017 um 21:34 schrieb Warren Young : > > I’d assume they’re just going to make their own fixes, I would be really surprised if they wouldn’t be among the main contributors already (if not the main contributor) - or at least have staff that are very familiar with the source.

Re: [CentOS] Apache 2.2 EOL - what is Red Hat's story for RHEL6?

2017-09-12 Thread Stephen John Smoogen
On 12 September 2017 at 15:29, Alan McKay wrote: > Hi folks, > > I have been googling for a few weeks now and not finding anything. > Apache 2.2 is EOL at the end of this year. > > Has Red Hat announced a plan yet on what they are doing in RHEL6? > > I am assuming they will up-version from 6.9 to

Re: [CentOS] Apache 2.2 EOL - what is Red Hat's story for RHEL6?

2017-09-12 Thread Warren Young
On Sep 12, 2017, at 1:29 PM, Alan McKay wrote: > > I have been googling for a few weeks now and not finding anything. > Apache 2.2 is EOL at the end of this year. > > Has Red Hat announced a plan yet on what they are doing in RHEL6? > > I am assuming they will up-version from 6.9 to 6.10 and as

Re: [CentOS] Apache + mod_evasive : problem with test.pl

2017-07-09 Thread Nicolas Kovacs
Le 09/07/2017 à 13:17, Alexander Dalloz a écrit : > What does apache log? I guess it logs more than just HTTP status 400. I wonder if something is wrong with the test.pl script. Here's what I have: #!/usr/bin/perl # test.pl: small script to test mod_dosevasive's effectiveness use IO::Socket; us

Re: [CentOS] Apache + mod_evasive : problem with test.pl

2017-07-09 Thread Nicolas Kovacs
Le 09/07/2017 à 13:17, Alexander Dalloz a écrit : > What does apache log? I guess it logs more than just HTTP status 400. Unfortunately the Apache logs don't tell much. 192.168.2.5 - - [09/Jul/2017:13:01:27 +0200] "GET /?91 HTTP/1.0" 400 226 "-" "-" 192.168.2.5 - - [09/Jul/2017:13:01:27 +0200] "G

Re: [CentOS] Apache + mod_evasive : problem with test.pl

2017-07-09 Thread Alexander Dalloz
Am 09.07.2017 um 13:06 schrieb Nicolas Kovacs: I tried this on two sandbox machine, one on my LAN, one on a public server, and both times I got the same result. Any suggestions? Niki What does apache log? I guess it logs more than just HTTP status 400. Alexander

Re: [CentOS] Apache + SSL: default configuration rated "C" by Qualys Labs

2017-04-29 Thread Walter H.
On 26.04.2017 08:58, Nicolas Kovacs wrote: Hi, I'm currently experimenting with a public server running CentOS 7. I have half a dozen production servers all running Slackware Linux, and I intend to progressively migrate them to CentOS, for a host of reasons (support cycle, package availability,

Re: [CentOS] Apache + SSL: default configuration rated "C" by Qualys Labs

2017-04-26 Thread Nicolas Kovacs
Le 26/04/2017 à 16:16, James Hogarth a écrit : > I'm not 100% on any differences in ciphers available, but I don't > think there should be much difference between EL7 and Fedora. > > This config gets my an A+ rating on the sslabs test: > > SSLEngine on > SSLProtocol all -SSLv2 -SSLv3 > SSLCipherS

Re: [CentOS] Apache + SSL: default configuration rated "C" by Qualys Labs

2017-04-26 Thread Leon Fauster
> Am 26.04.2017 um 17:17 schrieb Fabian Arrotin : > > On 26/04/17 16:16, James Hogarth wrote: >> On 26 April 2017 at 13:16, Steven Tardy wrote: >>> On Apr 26, 2017, at 2:58 AM, Nicolas Kovacs wrote: The site is rated "C" >>> >>> The RHEL/CentOS out-of-the-box apache tls is a li

Re: [CentOS] Apache + SSL: default configuration rated "C" by Qualys Labs

2017-04-26 Thread Fabian Arrotin
On 26/04/17 16:16, James Hogarth wrote: > On 26 April 2017 at 13:16, Steven Tardy wrote: >> >>> On Apr 26, 2017, at 2:58 AM, Nicolas Kovacs wrote: >>> >>> The site is rated "C" >> >> The RHEL/CentOS out-of-the-box apache tls is a little old but operational. >> This Mozilla resource is excellent

Re: [CentOS] Apache + SSL: default configuration rated "C" by Qualys Labs

2017-04-26 Thread James Hogarth
On 26 April 2017 at 13:16, Steven Tardy wrote: > >> On Apr 26, 2017, at 2:58 AM, Nicolas Kovacs wrote: >> >> The site is rated "C" > > The RHEL/CentOS out-of-the-box apache tls is a little old but operational. > This Mozilla resource is excellent for getting apache tls config up-to-date. > > htt

Re: [CentOS] Apache + SSL: default configuration rated "C" by Qualys Labs

2017-04-26 Thread Steven Tardy
> On Apr 26, 2017, at 2:58 AM, Nicolas Kovacs wrote: > > The site is rated "C" The RHEL/CentOS out-of-the-box apache tls is a little old but operational. This Mozilla resource is excellent for getting apache tls config up-to-date. https://wiki.mozilla.org/Security/Server_Side_TLS

Re: [CentOS] Apache + SSL: default configuration rated "C" by Qualys Labs

2017-04-26 Thread Tru Huynh
Hi, On Wed, Apr 26, 2017 at 08:58:39AM +0200, Nicolas Kovacs wrote: ... > * This server is vulnerable to the POODLE attack. If possible, disable > SSL 3 to mitigate. Grade capped to C." https://wiki.centos.org/Security/POODLE <...> Tru -- Tru Huynh http://pgp.mit.edu:11371/pks/lookup?op=get&se

Re: [CentOS] Apache logs missing

2016-04-28 Thread Александр Кириллов
Adrian Jenzer писал 2016-04-28 11:04: It looks like logrotate changed behaviour and started to delete old logs instead of compressing them. As you can see it just wiped away the one from 20160327, and that with all configs on default. Does someone know how to fix this?? https://bugzilla.redhat.

Re: [CentOS] Apache logs missing

2016-04-28 Thread Adrian Jenzer
e logs. It keeps the logs now but doesn't compress them anymore. Thanks Regards Adrian -Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of James Washington Sent: Donnerstag, 21. April 2016 17:16 To: CentOS mailing list Subject: Re: [Cent

Re: [CentOS] Apache/PHP Installation - opinions

2016-04-27 Thread Alice Wonder
On 04/27/2016 08:46 AM, Valeri Galtsev wrote: On Wed, April 27, 2016 10:29 am, m.r...@5-cent.us wrote: Alice Wonder wrote: On 04/27/2016 01:21 AM, Brandon Vincent wrote: On Wed, Apr 27, 2016 at 1:10 AM, Rob Kampen wrote: Sounds good, but how many domain MX servers have set up these fingerp

Re: [CentOS] Apache/PHP Installation - opinions

2016-04-27 Thread m . roth
Valeri Galtsev wrote: > On Wed, April 27, 2016 10:29 am, m.r...@5-cent.us wrote: >> Alice Wonder wrote: >>> On 04/27/2016 01:21 AM, Brandon Vincent wrote: On Wed, Apr 27, 2016 at 1:10 AM, Rob Kampen >> wrote: > Sounds good, but how many domain MX servers have set up these > finge

Re: [CentOS] Apache/PHP Installation - opinions

2016-04-27 Thread Valeri Galtsev
On Wed, April 27, 2016 10:29 am, m.r...@5-cent.us wrote: > Alice Wonder wrote: >> On 04/27/2016 01:21 AM, Brandon Vincent wrote: >>> On Wed, Apr 27, 2016 at 1:10 AM, Rob Kampen > wrote: Sounds good, but how many domain MX servers have set up these fingerprint keys - 1%, maybe 2%, so how

Re: [CentOS] Apache/PHP Installation - opinions

2016-04-27 Thread m . roth
Alice Wonder wrote: > On 04/27/2016 01:21 AM, Brandon Vincent wrote: >> On Wed, Apr 27, 2016 at 1:10 AM, Rob Kampen wrote: >>> Sounds good, but how many domain MX servers have set up these >>> fingerprint keys - 1%, maybe 2%, so how do you code for that? I guess I'm thinking >>> it uses it if avai

Re: [CentOS] Apache/PHP Installation - opinions

2016-04-27 Thread Paul Heinlein
On Tue, 26 Apr 2016, Tim Dunphy wrote: So what I'd like to know is it better in your opinion to install from repos than to install by source as a best practice? "Better" all depends on your workflow and your customers' concerns. If you are always available to update all your customers' insta

Re: [CentOS] Apache/PHP Installation - opinions

2016-04-27 Thread Alice Wonder
On 04/27/2016 01:21 AM, Brandon Vincent wrote: On Wed, Apr 27, 2016 at 1:10 AM, Rob Kampen wrote: Sounds good, but how many domain MX servers have set up these fingerprint keys - 1%, maybe 2%, so how do you code for that? I guess I'm thinking it uses it if available. So even if you do post it o

Re: [CentOS] Apache/PHP Installation - opinions

2016-04-27 Thread Alice Wonder
On 04/27/2016 01:19 AM, Alice Wonder wrote: On 04/27/2016 01:06 AM, Brandon Vincent wrote: On Wed, Apr 27, 2016 at 1:04 AM, Alice Wonder wrote: Not with a smtp that enforces DANE. I'm aware of how DANE works. The only problem is no MTA outside of Postfix implements it. You can thank the ha

Re: [CentOS] Apache/PHP Installation - opinions

2016-04-27 Thread Brandon Vincent
On Wed, Apr 27, 2016 at 1:10 AM, Rob Kampen wrote: > Sounds good, but how many domain MX servers have set up these fingerprint > keys - 1%, maybe 2%, so how do you code for that? I guess I'm thinking it > uses it if available. So even if you do post it on your DNS, how many > clients out there are

Re: [CentOS] Apache/PHP Installation - opinions

2016-04-27 Thread Alice Wonder
On 04/27/2016 01:06 AM, Brandon Vincent wrote: On Wed, Apr 27, 2016 at 1:04 AM, Alice Wonder wrote: Not with a smtp that enforces DANE. I'm aware of how DANE works. The only problem is no MTA outside of Postfix implements it. You can thank the hatred of DNSSEC for that. I never understoo

Re: [CentOS] Apache/PHP Installation - opinions

2016-04-27 Thread Rob Kampen
On 04/27/2016 07:50 PM, Alice Wonder wrote: On 04/27/2016 12:41 AM, Alice Wonder wrote: On 04/27/2016 12:30 AM, James Hogarth wrote: *snip* Unless you have a very specific requirement for a very bleeding edge feature it's fundamentally a terrible idea to move away from the distribution package

Re: [CentOS] Apache/PHP Installation - opinions

2016-04-27 Thread Brandon Vincent
On Wed, Apr 27, 2016 at 1:04 AM, Alice Wonder wrote: > Not with a smtp that enforces DANE. I'm aware of how DANE works. The only problem is no MTA outside of Postfix implements it. You can thank the hatred of DNSSEC for that. Brandon Vincent ___ Cent

Re: [CentOS] Apache/PHP Installation - opinions

2016-04-27 Thread Alice Wonder
On 04/27/2016 12:59 AM, Brandon Vincent wrote: On Wed, Apr 27, 2016 at 12:50 AM, Alice Wonder wrote: That is the only reliable way to avoid MITM with SMTP. Except I can just strip STARTTLS and most MTAs will continue to connect. No you can't. Not with a smtp that enforces DANE. If my pos

Re: [CentOS] Apache/PHP Installation - opinions

2016-04-27 Thread Brandon Vincent
On Wed, Apr 27, 2016 at 12:50 AM, Alice Wonder wrote: > That is the only reliable way to avoid MITM with SMTP. Except I can just strip STARTTLS and most MTAs will continue to connect. Brandon Vincent ___ CentOS mailing list CentOS@centos.org https://li

Re: [CentOS] Apache/PHP Installation - opinions

2016-04-27 Thread Alice Wonder
On 04/27/2016 12:41 AM, Alice Wonder wrote: On 04/27/2016 12:30 AM, James Hogarth wrote: *snip* Unless you have a very specific requirement for a very bleeding edge feature it's fundamentally a terrible idea to move away from the distribution packages in something as exposed as a webserver ...

Re: [CentOS] Apache/PHP Installation - opinions

2016-04-27 Thread Andreas Benzler
Another way i choose is install what i need in opt a php cli and configure apache. What is the different? I drive php 5.3, 5.6 side by side. It always depends of your needs. How configure this stuff on my virtual host? ISP-Config make it easy for me. Can be a solution for you. RPM isn’t that bad

Re: [CentOS] Apache/PHP Installation - opinions

2016-04-27 Thread Alice Wonder
On 04/27/2016 12:30 AM, James Hogarth wrote: *snip* Unless you have a very specific requirement for a very bleeding edge feature it's fundamentally a terrible idea to move away from the distribution packages in something as exposed as a webserver ... I use to believe that. However I no longer

Re: [CentOS] Apache/PHP Installation - opinions

2016-04-27 Thread James Hogarth
On 26 Apr 2016 23:28, "Tim Dunphy" wrote: > > Hey guys, > > I tend to work on small production environments for a large enterprise. > > Never more than 15 web servers for most sites. > > But most are only 3 to 5 web servers. Depends on the needs of the > client.I actually like to install Apache an

Re: [CentOS] Apache/PHP Installation - opinions

2016-04-26 Thread Alice Wonder
On 04/26/2016 03:27 PM, Tim Dunphy wrote: Hey guys, I tend to work on small production environments for a large enterprise. Never more than 15 web servers for most sites. But most are only 3 to 5 web servers. Depends on the needs of the client.I actually like to install Apache and PHP from sou

Re: [CentOS] Apache/PHP Installation - opinions

2016-04-26 Thread Gordon Messmer
On 04/26/2016 03:27 PM, Tim Dunphy wrote: So what I'd like to know is it better in your opinion to install from repos than to install by source as a best practice? Your tools should save you time. Building packages should involve three steps: download the source, update the version number in

Re: [CentOS] Apache/PHP Installation - opinions

2016-04-26 Thread Kahlil Hodgson
If you need more recent versions checkout softwarecollections.org. It has more recent rebuilds of the big package suites that install under /opt and don't collide with the system installed packages. There is a CentOS specific channel in there somewhere. _

Re: [CentOS] Apache/PHP Installation - opinions

2016-04-26 Thread John R Pierce
On 4/26/2016 3:27 PM, Tim Dunphy wrote: I like to use the latest, stable versions of apache and php for my clients without having to create a custom RPM every time a new version comes out. So what I'd like to know is it better in your opinion to install from repos than to install by source as a

Re: [CentOS] Apache logs missing

2016-04-21 Thread James Washington
Adrian, I’ve had huge problems with log rotate recently. For some reason, since the period you have mentioned, I have to restart rsyslog on my CentOS 6.7 servers after logrotate runs either through a cronjob or manually (even on the standard config). I’m not sure if you’ve experienced this to o

Re: [CentOS] Apache doesn't display "It works page" under CentOS 7

2016-01-29 Thread reynie...@gmail.com
On Fri, Jan 29, 2016 at 11:56 AM, Michael H wrote: > I've setup several web servers this week, if this isn't working, you > broke something. We always use minimal installs. > No problem, it works! Thx ___ CentOS mailing list CentOS@centos.org https://l

Re: [CentOS] Apache doesn't display "It works page" under CentOS 7

2016-01-29 Thread Michael H
On 29/01/16 16:52, reynie...@gmail.com wrote: > On Fri, Jan 29, 2016 at 11:48 AM, Michael H wrote: > >> Selinux has been around for a while. >> > > Yes, I know this but ... > > >> >> setsebool - set selinux boolean >> > > What I am asking is if the command above is part of SELinux since I doe

Re: [CentOS] Apache doesn't display "It works page" under CentOS 7

2016-01-29 Thread reynie...@gmail.com
I should add this is a minimal CentOS perhaps it's lacks a few packages and I am not aware of which ones On Fri, Jan 29, 2016 at 11:52 AM, reynie...@gmail.com wrote: > > On Fri, Jan 29, 2016 at 11:48 AM, Michael H wrote: > >> Selinux has been around for a while. >> > > Yes, I know this but ...

Re: [CentOS] Apache doesn't display "It works page" under CentOS 7

2016-01-29 Thread reynie...@gmail.com
On Fri, Jan 29, 2016 at 11:48 AM, Michael H wrote: > Selinux has been around for a while. > Yes, I know this but ... > > setsebool - set selinux boolean > What I am asking is if the command above is part of SELinux since I doesn't use before because it's a VM running on my PC so I not need su

Re: [CentOS] Apache doesn't display "It works page" under CentOS 7

2016-01-29 Thread Michael H
On 29/01/16 16:45, reynie...@gmail.com wrote: > On Fri, Jan 29, 2016 at 11:41 AM, Michael H wrote: > >> setsebool -P httpd_can_network_connect on >> firewall-cmd --add-service=http --permanent >> > > I have ran those two and still can't access. I have restarted httpd and > iptables services afte

Re: [CentOS] Apache doesn't display "It works page" under CentOS 7

2016-01-29 Thread reynie...@gmail.com
On Fri, Jan 29, 2016 at 11:41 AM, Michael H wrote: > setsebool -P httpd_can_network_connect on > firewall-cmd --add-service=http --permanent > I have ran those two and still can't access. I have restarted httpd and iptables services after ran those lines. BTW, what those means? setsebool is part

Re: [CentOS] Apache doesn't display "It works page" under CentOS 7

2016-01-29 Thread Michael H
On 29/01/16 16:35, reynie...@gmail.com wrote: > I have Apache/2.4.6 installed in a minimal CentOS 7 VM. I am trying to > access the default page when Apache is installed by accessing the CentOS IP > as http://192.168.3.130 (is a host only interface) but I got "This webpage > is not available: ERR_C

Re: [CentOS] apache mysterious 404 error

2015-08-28 Thread Tim Dunphy
Guys, We actually found the problem. The problem was actually in a javascript file. It was referring to it's parent directory as mycompanyStore. So once I noticed that, I went into that directory and created a symlink. ln -s . mycompanyStore from within that directory. That let the java script kn

Re: [CentOS] apache mysterious 404 error

2015-08-28 Thread Tony Mountifield
In article <0f55e883640c125375c75...@ritz.innovate.net>, Richard wrote: > > Also need to see the error_log entries from the back-end httpd > server that's serving from the documentroot. The proxy server's logs > (whether it should be there or not) only show the proxy issues, not > the issues that

  1   2   3   4   5   6   7   >