modperl security model question

2001-04-14 Thread Thomas K. Burkholder
Thanks again for the help - I have another one- My application consists of perl modules with file permissions set only to a particular user 'burkhold'. The database password is kept in plaintext in one of those modules. I use the User: and Group: directives in access.conf to cause the uid of th

Re: ssl advice? modssl vs. apache-ssl vs. ?

2001-04-14 Thread G.W. Haywood
Hi there, On Sat, 14 Apr 2001, Wim Kerkhoff wrote: > > Apache-1.3.19 > > mod_ssl-2.8.1-1.3.19 > > mod_perl-1.25 (DSO!) > > openssl-0.9.4 > > Linux_2.2.16 > > glibc 2.1.3 (*important*) > > Why is using glibc 2.1.3 important? It works fine for me with glibc > 2.2.2. I'm using the latest versions

Re: ssl advice? modssl vs. apache-ssl vs. ?

2001-04-14 Thread iain truskett
* Michael Robinton ([EMAIL PROTECTED]) [14 Apr 2001 17:23]: > > I've just taken a quick look at the modssl site and the apache-ssl > > site. Does anyone want to comment on the pros and cons of these 2 > > approaches? > > > > Can mod_perl co-exist with either or both of these? [...] > Don't know an

Re: ssl advice? modssl vs. apache-ssl vs. ?

2001-04-14 Thread Michael Robinton
> I've just taken a quick look at the modssl site and the apache-ssl site. > Does anyone want to comment on the pros and cons of these 2 approaches? > > Can mod_perl co-exist with either or both of these? > > All responses welcome, including "don't do it, go back, save yourself!". > Don't know

Re: is Apache::Request upload->fh lazy or not?

2001-04-14 Thread Todd Finney
At 05:17 AM 4/14/01, Thomas K. Burkholder wrote: >I'd like to write upload code that shows progress (via a fork and >refresh header trick - don't worry about that). What I'm wondering >is, >by the time I get $fh above (or even by the time I'm in the handler >for >all I know) do I already have t

Re: is Apache::Request upload->fh lazy or not?

2001-04-14 Thread Chris Winters
* Thomas K. Burkholder ([EMAIL PROTECTED]) [010414 04:28]: > ... > > I'd like to write upload code that shows progress (via a fork and > refresh header trick - don't worry about that). What I'm wondering is, > by the time I get $fh above (or even by the time I'm in the handler for > all I know) d

is Apache::Request upload->fh lazy or not?

2001-04-14 Thread Thomas K. Burkholder
Hi again, Thanks to those who helped me with the install issue. I've mostly resolved that, and now have a new question that seems much more mod-perl-ish: I have code that does essentially this: sub handler { my $r = shift; $r = Apache::Request->new($r); my $handle = $r->upload('filename'

Re: ssl advice? modssl vs. apache-ssl vs. ?

2001-04-14 Thread Wim Kerkhoff
"G.W. Haywood" wrote: > > Hi there, > > On Fri, 13 Apr 2001, Fred Toth wrote: > > > I've just taken a quick look at the modssl site and the apache-ssl site. > > Does anyone want to comment on the pros and cons of these 2 approaches? > > Recently I installed mod_ssl for the first time and altho

Re: ssl advice? modssl vs. apache-ssl vs. ?

2001-04-14 Thread G.W. Haywood
Hi there, On Fri, 13 Apr 2001, Fred Toth wrote: > I've just taken a quick look at the modssl site and the apache-ssl site. > Does anyone want to comment on the pros and cons of these 2 approaches? Recently I installed mod_ssl for the first time and although it took several attempts to get thing