RE: [users] WebDAV for managing web site content HTTPD 2.4.x (9 actually) SOLVED

2014-06-04 Thread Srinivasa Rao Katta
Thanks David for the information. Thanks for solved the problem. Thanks, Srinivas Srinivasa Rao Katta(System Administrator), skatt...@hotmail.com, Date: Wed, 4 Jun 2014 05:53:40 +0100 From: li...@datatone.co.uk To: users@httpd.apache.org Subject: Re: [users] WebDAV for managing

[users] Server-side include problem in Apache 2.4.9 --#if expr

2014-06-04 Thread roger morgan
I'm trying to migrate a website that worked under 2.2. The only change required seems to be in SSI, because the syntax changed from 2.2 to 2.4. I decided not to use the SSILegacyExprParser on option because that option might go away in the future. The site has a .shtml file that contained:

[users] Can't start httpd 2.4.9 with simplest SSL config

2014-06-04 Thread Sergey Shcherbakov
Hello all, I cannot start the httpd 2.4.9 (tried 2.4.x too) on CentOS 6.5 with the simplest SSL config possible. The openssl version installed on the machine is OpenSSL 1.0.1e-fips 11 Feb 2013 (I've upgraded it using 'yum update' to the latest patched version as well) I have compiled and

Re: [users] Can't start httpd 2.4.9 with simplest SSL config

2014-06-04 Thread Balaji Katika
HI Sergey, The issue seems to be with the certificate you've generated. Looks like you've forgotten/skipped some steps. I think you've specified some passphrase for the certificate and apache is unable to locate that. Passphrase could be specified through SSLPassPhraseDialog which is missing in

Re: [users] Can't start httpd 2.4.9 with simplest SSL config

2014-06-04 Thread Sergey Shcherbakov
Hello Balaji! Thanks for your comments! The SSLPassPhraseDialog is present in my config. I've followed the steps in your article and still get the same errors as above. I don't think that your steps are much different than those specified on CentOs HowTo and httpd docs pages (except that there is

Re: [users] Can't start httpd 2.4.9 with simplest SSL config

2014-06-04 Thread Balaji Katika
server.crt/server.key in your case translates to ca.crt/ca.key Btw, ssl.crt and ssl.key are the names of the folder/directory here. The author did refer to the newly copied files through step 6 in the article. Btw, I hope you have updated the names of the crt/key files accordingly before starting

Re: [users] [users@httpd] mod_dbd and ssl

2014-06-04 Thread Andrea Gabellini - SC
Hello, I performed several tests. Starting with a fresh installation of CentOS 6.5 and a fresh compilation of the latest MySQL 5.5 and Apache (with latest apr and apr-util) Minimal changes to the default configuration, without adding or removing apache modules, to permit the use of mod_dbd and

Re: [users] Only allow access from specific domains?

2014-06-04 Thread Walter H.
On 03.06.2014 21:05, Brad Harris wrote: I've been trying to configure a website to send a 403 forbidden error unless the user comes from a specific website/domain, which is a logon page hosted on another server. Design error, because, the Referer is fakeable and makes the logon page not

Re: [users] Can't start httpd 2.4.9 with simplest SSL config

2014-06-04 Thread Sergey Shcherbakov
Haven't seen any mention of ca.crt/ca.key yet. Where do these come from? Alright, I see now. The ssl.crt and ssl.key are preexisting folders in the example. I don't have them created after installing the httpd. So I left the generated server.crt and server.key in the /usr/local/apache2/conf

Re: [users] Can't start httpd 2.4.9 with simplest SSL config

2014-06-04 Thread Sergey Shcherbakov
Sorry, I see now, where the ca.crt/ca.key are coming from. That was my copy/paste error in the initial email. The config I've been testing at the beginning is: Listen 443 SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5 SSLPassPhraseDialog builtin SSLSessionCache

RE: [users] Only allow access from specific domains?

2014-06-04 Thread Brad Harris
the match strings are wrong, should be!^http://$ Thanks Walter, I tried your suggestion but get the same result. I inherited this site from another company and I've already let my users know that it's an insecure way of doing it and demonstrated with a simple Chrome extension how

[users] Apache consultant needed ASAP

2014-06-04 Thread Álvaro Nunes Lemos Melo
Hi, Our company runs a PHP application over a Apache HTTP (Linux) server. It's been running in our environment for years. Since yesterday, the server is having serious performance issues. It's load goes sky high and the server stops responding. We are having a hard time to find a Apache

Re: [users] Only allow access from specific domains?

2014-06-04 Thread Walter H.
On 04.06.2014 14:33, Brad Harris wrote: the match strings are wrong, should be!^http://$ Thanks Walter, I tried your suggestion but get the same result. I inherited this site from another company and I've already let my users know that it's an insecure way of doing it and demonstrated

[users] https and DHE-RSA-AES256-SHA

2014-06-04 Thread MM
Hi, I run a personal https at home with no official certificate. The hostname I use is a dynamic dns hostname. Apache/2.4.9 OpenSSL/1.0.1e-fips PHP/5.5.12 SVN/1.8.8 mod_perl/2.0.9-dev Perl/v5.18.2 On ssl_request I see a couple of entries like this: TLSv1 DHE-RSA-AES256-SHA GET /vtigercrm/

Re: [users] https and DHE-RSA-AES256-SHA

2014-06-04 Thread Mauricio Tavares
On Wed, Jun 4, 2014 at 2:55 PM, MM finjulh...@gmail.com wrote: Hi, I run a personal https at home with no official certificate. The hostname I use is a dynamic dns hostname. Apache/2.4.9 OpenSSL/1.0.1e-fips PHP/5.5.12 SVN/1.8.8 mod_perl/2.0.9-dev Perl/v5.18.2 On ssl_request I see a couple

Re: [users] [users@httpd] mod_dbd and ssl

2014-06-04 Thread Nick Kew
On 4 Jun 2014, at 12:03, Andrea Gabellini - SC wrote: Hello, I performed several tests. This is interesting, and your reports are sufficiently specific to look more like a bug than a PBKAC. Unfortunately I'm not in a position to reproduce it, and I don't think I can really offer any more