Re: [users@httpd] https

2014-04-03 Thread Yehuda Katz
On Fri, Apr 4, 2014 at 12:55 AM, Andy Canfield wrote: > There are several lines in places that read > > There is no file on my hard disk named "mod_ssl.c". There is, however, a > file named > /usr/lib/apache2/modules/mod_ssl.so > Is there some magic connection between "mod_ssl.c" and "mo

Re: [users@httpd] https

2014-04-03 Thread Andy Canfield
There are several lines in places that read There is no file on my hard disk named "mod_ssl.c". There is, however, a file named /usr/lib/apache2/modules/mod_ssl.so Is there some magic connection between "mod_ssl.c" and "mod_ssl.so"? Like was the ssl module written in C? On 04/03/2014 09:4

[users@httpd] Apache HTTPD SHA256

2014-04-03 Thread Jerry Blasdel
We have built the following: httpd-2.4.6 openssl-1.0.1.e openssl-fips-2.05 for both Windows and Solaris so we can leverage SHA256. For both environments I have Apache configured with the following: SSLProtocol +TLSv1 +TLSv1.1 +TLSv1.2 On Windows, this works. I can use a Browser to hit the ser

Re: [users@httpd] High CPU Usage in Amazon EC2

2014-04-03 Thread Jason Cillo
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hmmm. Sorry, I think I typed a reply on the wrong post. Someone had posted a question about setting up https from http, that is what I meant to reply to, since I had just that same problem and find this guide useful. I've already deleted that person

Re: [users@httpd] High CPU Usage in Amazon EC2

2014-04-03 Thread Christopher Schultz
Jason, On 4/3/14, 11:35 AM, Jason Cillo wrote: > Have you looked at OpenSSL Cookbook? It's free. I find it very > useful. (I even bought the larger book of which it is a chapter.) Did you have something in particular that you thought would be relevant from that book? -chris signature.asc Desc

Re: [users@httpd] High CPU Usage in Amazon EC2

2014-04-03 Thread Christopher Schultz
All, This is the current status map on me server: Total accesses: 14118 - Total Traffic: 3.9 GB CPU Usage: u404.04 s9.82 cu0 cs0 - .956% CPU load .326 requests/sec - 94.4 kB/second - 289.5 kB/request 6 requests currently being processed, 15 idle workers .__..._.._.R_R_.._...__.._._R_.R...R..

Re: [users@httpd] High CPU Usage in Amazon EC2

2014-04-03 Thread Jason Cillo
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Have you looked at OpenSSL Cookbook? It's free. I find it very useful. (I even bought the larger book of which it is a chapter.) ...Jason On Apr 3, 2014, at 10:23 AM, Christopher Schultz wrote: > All, > > I forgot to mention that most of our traf

Re: [users@httpd] https

2014-04-03 Thread Yehuda Katz
Debian/Ubuntu have a slightly different default layout and include some tools to help you work with it. The tools just create the symlinks for you, but the major benefit is that all of them support tab-completion, so you know what is available. a2enmod / a2dismod: enable or disable apache modules

Re: [users@httpd] High CPU Usage in Amazon EC2

2014-04-03 Thread Christopher Schultz
Oscar, On 4/3/14, 10:33 AM, Oscar Knorn wrote: > Sounds like apache is waiting for a response or a means to forward the > request via stunnel. > Is /dev/random or /dev/urandom providing sufficient random to the process? I'm not sure how to check that. Any ideas? In either case above, wouldn't th

Re: [users@httpd] High CPU Usage in Amazon EC2

2014-04-03 Thread Oscar Knorn
Sounds like apache is waiting for a response or a means to forward the request via stunnel. Is /dev/random or /dev/urandom providing sufficient random to the process? Cheers Oscar On 4/3/14, 40:23 PM, Christopher Schultz wrote: > All, > > I forgot to mention that most of our traffic is over SSL.

Re: [users@httpd] High CPU Usage in Amazon EC2

2014-04-03 Thread Christopher Schultz
All, I forgot to mention that most of our traffic is over SSL. OpenSSL version is OpenSSL 1.0.1e-fips 11 Feb 2013. Thanks, -chris On 4/3/14, 10:04 AM, Christopher Schultz wrote: > All, > > I'm having a problem in production I've never seem before. We are > running a pair of AWS EC2 m1.micro web

[users@httpd] High CPU Usage in Amazon EC2

2014-04-03 Thread Christopher Schultz
All, I'm having a problem in production I've never seem before. We are running a pair of AWS EC2 m1.micro web servers where only one of them in really in service at any given time. The httpd instance serves some static content and forwards a great deal of traffic via stunnel to a single back-end T

Re: [users@httpd] DirectoryIndex

2014-04-03 Thread Eric Covener
On Wed, Apr 2, 2014 at 10:52 PM, Tony Kwan wrote: > Hi, > > I have tried "DirectoryIndex index.html index.php" but it still recognized > the index.html only (first one). Any other suggestions? > if index.php requires authentication, and you strip out the Authorization header, it makes sense that

Re: [users@httpd] https

2014-04-03 Thread Andy Canfield
Files: -rw-r--r-- 1 root 859 Apr 3 11:45 /etc/apache2/ssl/crt/vhost1.crt -rw-r--r-- 1 root 916 Apr 3 11:45 /etc/apache2/ssl/key/vhost1.key So AFAIK I've got a certificate I've generated myself. Nobody vouches for me but it shoud enable encryption and make my TCP/IP packets hard to read. Cont

Re: [users@httpd] https

2014-04-03 Thread Oren
Hi Andy. Process basically include getting/creating a certificate, define it on your site and reload apache. here is a centos manual which is not exactly the same on ubuntu but pretty much explains the order of things http://wiki.centos.org/HowTos/Https on ubuntu you will have to open the 443

[users@httpd] https

2014-04-03 Thread Andy Canfield
I have been using apache for maybe ten years now, and maintain two servers in addition to the apache on my notebook computer for testing. All using Ubuntu Linux *.04 LTS. It now appears that I ought to convert from http to https. But the documentation is insane. A piece here, a piece there, have t