[us...@httpd] openssl_pkcs7_sign error

2009-09-10 Thread Hoang, Le Vu
Hello, My server is running Apache 2.2.9, PHP 5.2.9, OpenSSL 0.9.8j, Zend Optimizer 3.3.0. Everything is fine. I don’t get any error. After I upgraded Apache to 2.2.13 (and reboot server), I can’t use this PHP function: openssl_pkcs7_sign The PHP error is: Warning: openssl_pkcs7_sign()

[us...@httpd] A question about configuring Apache Http Server

2009-09-10 Thread thomas2004
Hi all, I installed the Apache Http Web Server on RH-Linux and want to configure it so that the incoming browsing will be forward to the application deployted on Jboss. I do followings: 1. Set the ip-address in /etc/sysconfig/network-scripts/ifcfg-eth0:xx 2. Create a .conf file which looks as

Re: [us...@httpd] A question about configuring Apache Http Server

2009-09-10 Thread André Warnier
thomas2004 wrote: I installed the Apache Http Web Server what version of Apache ? on RH-Linux and want to configure it so that the incoming browsing will be forward to the application deployted on Jboss. Where is that Jboss server running ? I do followings: 1. Set the ip-address in

[us...@httpd] proxy server

2009-09-10 Thread idan72
Hi, I have web application writing in Flex. The clients are from different location(countries). I want that when client try to reach the URL of application he will get it from local server and not from the main server. Also if possible that if there is update in main server the update will be

Re: [us...@httpd] openssl_pkcs7_sign error

2009-09-10 Thread Krist van Besien
On Thu, Sep 10, 2009 at 12:11 PM, Hoang, Le Vu hoang...@vietunion.com.vn wrote: Hello, My server is running Apache 2.2.9, PHP 5.2.9, OpenSSL 0.9.8j, Zend Optimizer 3.3.0. Everything is fine. I don’t get any error. After I upgraded Apache to 2.2.13 (and reboot server), I can’t use this PHP

Re: [us...@httpd] proxy server

2009-09-10 Thread Krist van Besien
On Thu, Sep 10, 2009 at 3:26 PM, idan72 is...@cisco.com wrote: I have web application writing in Flex. The clients are from different location(countries). I want that when client try to reach the URL of application he will get it from local server and not from the main server. Also if

Re: [us...@httpd] proxy server

2009-09-10 Thread idan72
Thanks for your quick reply. Can you explain how do I do the mirroring part ? Is it with proxy server ? Can you give example for one or more ? Can't I configure in client side to use the local server and not the main server (where I put my app)? Thanks Krist van Besien wrote: On Thu, Sep

Re: [us...@httpd] proxy server

2009-09-10 Thread Krist van Besien
On Thu, Sep 10, 2009 at 3:44 PM, idan72 is...@cisco.com wrote: Thanks for your quick reply. Can you explain how do I do the mirroring part ? Is it with proxy server ? Can you give example for one or more ? Mirrororing basically means copying all the content that exists on one server on

[us...@httpd] Downloaded java applet bypasses proxy

2009-09-10 Thread Eric Jacobs
We were trying to add an extra layer of security in front of some financial apps with a reverse proxy (which required a login). It worked until we tried restricting access to financial apps only to proxy server. Turns out, after the initial connection, browsers downloaded applets which then

Re: [us...@httpd] A question about configuring Apache Http Server

2009-09-10 Thread thomas2004
what version of Apache ? It is httpd-2.0.46-46.2.ent Where is that Jboss server running ? On RH-Linux on other machine. that has nothing to do with either Apache or Jboss. You are right. This is configuration of the machine. I have to do this since the machine will listen to this ip. That is

[us...@httpd] Apache Tuning

2009-09-10 Thread Daniel Viana Auler(Plebeuz)
Hello, I have a question about MaxClients and maxservers, when i tuning i found in apache that to calculate maxclients i need to calculate the SO used memory-total memory divided by the memory witch each apache process use, but how can i know how to do it correctly, because apache

Re: [us...@httpd] Downloaded java applet bypasses proxy

2009-09-10 Thread Nick Kew
Eric Jacobs wrote: We were trying to add an extra layer of security in front of some financial apps with a reverse proxy (which required a login). It worked until we tried restricting access to financial apps only to proxy server. Turns out, after the initial connection, browsers downloaded

[us...@httpd] Case sensitive URLs

2009-09-10 Thread Andrew Hole
Hi guys! How can I ensure case sensitive URLs? I've test.html at DocumentRoot. I want a File not found error when I invoke http://host/TEST.html. Thanks a lot A.

Re: [us...@httpd] A question about configuring Apache Http Server

2009-09-10 Thread André Warnier
thomas2004 wrote: ... That either means that the host web-mycompany.com is not running, or that it is not listening on port 80. It looks like you are not even getting as far as connecting to your Apache webserver. Could be. That's the reason I ask this question. :) Where and how can I

Re: [us...@httpd] Case sensitive URLs

2009-09-10 Thread Tom Evans
On Thu, 2009-09-10 at 15:40 +0100, Andrew Hole wrote: Hi guys! How can I ensure case sensitive URLs? I've test.html at DocumentRoot. I want a File not found error when I invoke http://host/TEST.html. Thanks a lot A. You need to use a case sensitive file system, ie not windows. Cheers

Re: [us...@httpd] Case sensitive URLs

2009-09-10 Thread Nick Kew
Andrew Hole wrote: Hi guys! How can I ensure case sensitive URLs? I've test.html at DocumentRoot. I want a File not found error when I invoke http://host/TEST.html. You'll get that as standard. Just don't use any of the hacks that make them appear case-insensitive, like mod_speling. The

Re: [us...@httpd] Is it okay to not use exportable ciphers?

2009-09-10 Thread Matus UHLAR - fantomas
On 20.08.09 15:16, Brian Mearns wrote: For the sake of security, I'd like to configure my SSL/TLS server to not allow export level ciphers (using the SSLCipherSuite directive). Is this going to realistically limit the number of people who can use a secure connection to my site? Specifically,

[us...@httpd] .htaccess does not work

2009-09-10 Thread testwreq wreq
Hello, My goal is to password protect a few pages in one of the userdir (/home/users/vinda). And, I cannot get this to work. Any suggestions will be welcomed! Below is the configuration in my httpd.conf file: Directory /home/*/*/public_html Options -Indexes FollowSymLinks IncludesNoExec Options

RE: [us...@httpd] openssl_pkcs7_sign error

2009-09-10 Thread Hoang, Le Vu
I'm using Centos 5.2. I compile Apache from source with: 1. make clean 2. make dist clean 3. ./configure 4. make 5. make install After that, I restart the apache and reboot the server Hoang Vu Le (Mr.) System Operator Mobile: 0905 644 777 Email: hoang...@vietunion.com.vn

Re: [us...@httpd] Limited TextArea buffer

2009-09-10 Thread Eric Covener
On Thu, Sep 10, 2009 at 12:02 PM, n...@sosnow.ws wrote:   Hi,        I have a problem with a limited carry over buffer size with   TextArea being limited to around 6,500-7,000 bytes.   I placed the directive LimitRequestBody 0 in my apache2.conf   (don't use httpd.conf) but it makes no

Re: [us...@httpd] .htaccess

2009-09-10 Thread Bob Ionescu
2009/9/7 Jos Chrispijn apa...@webrz.net: Is there a way of forcing webbrowser to present a login popup every time they enter a protected URL? Now I login once and until I delete my cookies, I can go to the URL without having a username and password filled out, even not having the 'remember

[us...@httpd] Re: Refreshing renewed SSL certificate

2009-09-10 Thread Andy Hawkins
Hi, In article 4aa7cecd.9020...@newmediagateway.com, Justin Pasherjust...@newmediagateway.com wrote: FWIW, in my experience, installing or changing an SSL cert on an Apache 1 server requires a stop and start (restart/reload won't work). Now this is using apache-ssl (as opposed to

Re: [us...@httpd] .htaccess does not work

2009-09-10 Thread Jonathan Zuckerman
On Thu, Sep 10, 2009 at 8:56 AM, testwreq wreq testw...@gmail.com wrote: Hello, My goal is to password protect a few pages in one of the userdir (/home/users/vinda). And, I cannot get this to work. Any suggestions will be welcomed! Below is the configuration in my httpd.conf file: Directory

Re: [us...@httpd] .htaccess does not work

2009-09-10 Thread André Warnier
testwreq wreq wrote: The error in the eerror log is: [debug] mod_auth_pgsql.c(774): [client 10.105.9.103] [mod_auth_pgsql.c] - missing configuration parameters And where does that come from ? Hint : mod_auth_pgsql.c ? - The

Re: [us...@httpd] Limited TextArea buffer

2009-09-10 Thread André Warnier
Eric Covener wrote: On Thu, Sep 10, 2009 at 12:02 PM, n...@sosnow.ws wrote: Hi, I have a problem with a limited carry over buffer size with TextArea being limited to around 6,500-7,000 bytes. I placed the directive LimitRequestBody 0 in my apache2.conf (don't use httpd.conf) but

Re: [us...@httpd] .htaccess

2009-09-10 Thread André Warnier
Jos Chrispijn wrote: Is there a way of forcing webbrowser to present a login popup every time they enter a protected URL? Now I login once and until I delete my cookies, I can go to the URL without having a username and password filled out, even not having the 'remember password' option active.

Re: [us...@httpd] .htaccess does not work

2009-09-10 Thread testwreq wreq
I figured out the small typo in the path. Thanks for reading my request and suggestions. On Thu, Sep 10, 2009 at 1:02 PM, Jonathan Zuckerman j.zucker...@gmail.comwrote: On Thu, Sep 10, 2009 at 8:56 AM, testwreq wreq testw...@gmail.com wrote: Hello, My goal is to password protect a few pages

Re: [us...@httpd] Excluding String from access log

2009-09-10 Thread André Warnier
Mohit, Mohit Anchlia wrote: All I want is to remove that info message from the access log. So basically I don't want to see that in access or error log read this : http://httpd.apache.org/docs/2.2/mod/core.html#loglevel You can stop all [info] messages from appearing in the error log. As to

[us...@httpd] About apache2 vulnerability with apr and apr-utils. How bad is it?

2009-09-10 Thread David Taveras
Hello, I run apache 2.2.9 apache 2.2.11 both with apr-1.2.11p2 apr-util-1.2.10p2 According to the CVE at http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2412 only 0.9.x and 1.3.x are affected . Could anybody confirm that this is so? If not.. how bad is this vulnerability to a

Re: [us...@httpd] About apache2 vulnerability with apr and apr-utils. How bad is it?

2009-09-10 Thread William A. Rowe, Jr.
David Taveras wrote: I run apache 2.2.9 apache 2.2.11 both with apr-1.2.11p2 apr-util-1.2.10p2 According to the CVE at http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2412 only 0.9.x and 1.3.x are affected . Could anybody confirm that this is so? If not.. how bad is this

Re: [us...@httpd] About apache2 vulnerability with apr and apr-utils. How bad is it?

2009-09-10 Thread David Taveras
Hello William. You mentioned as far as APR causing a DoS, how about the execution of arbitrary code through apache as the CVE says..? Thank you Daniel On Thu, Sep 10, 2009 at 6:54 PM, William A. Rowe, Jr. wr...@rowe-clan.netwrote: David Taveras wrote: I run apache 2.2.9 apache 2.2.11

Re: [us...@httpd] About apache2 vulnerability with apr and apr-utils. How bad is it?

2009-09-10 Thread William A. Rowe, Jr.
David Taveras wrote: You mentioned as far as APR causing a DoS, how about the execution of arbitrary code through apache as the CVE says..? No, you misinterpreted; the application developer must expose a DoS/memory exhaustion vector; where that exists, and the affected version of APR is used,

Re: [us...@httpd] Limited TextArea buffer

2009-09-10 Thread Nick
Thanks for the comeback... I have a problem with a limited carry over buffer size with TextArea being limited to around 6,500-7,000 bytes. I placed the directive LimitRequestBody 0 in my apache2.conf (don't use httpd.conf) but it makes no difference. When I paste 12,000+