[users@httpd] mod_proxy on Apache 2.2 Debian troubles

2014-10-13 Thread Francesco Di Mizio
Hello, not sure if this is the right place, if not please point to me to the right one. I am using buildbot ( trac.buildbot.net ) to which clients connect through a proxy (installed on the same machine as buildbot server). Buildbot has an internal webserver of its own. To make it clear: client

[users@httpd] Security Vulnerability issues

2014-10-13 Thread pratibha.dhankhar
Hi Team, We are getting below vulnerabilities on our production web servers. Please share how to resolve the same. 1) Oracle WebLogic Server Plug-in Remote Overflow (1166189) 2) Apache HTTP Server httpOnly Cookie Information Disclosure. -- Regards Pratibha The information contained

AW: [users@httpd] Security Vulnerability issues [wd-vc]

2014-10-13 Thread Bremser, Kurt (AMOS Austria GmbH)
Oracle: see Oracle. apache: as of http://httpd.apache.org/security/vulnerabilities_22.html, fixed with 2.2.22 Kurt Bremser AMOS Austria Newton was wrong. There is no gravity. The Earth sucks. Von: pratibha.dhank...@wipro.com [pratibha.dhank...@wipro.com]

Re: [users@httpd] downing

2014-10-13 Thread georg chambert
The machine goes into some unreachable state, where it has to be hard-reset to boot again. So has anyone a pointer to where in the linux some useful eventlogg couldbefournd ? (ok linux is not on list, but I suspect the downing is via httpd) Regrds Georg - Original Message - From:

[users@httpd] Re: Cannot get certificate chain to work.

2014-10-13 Thread dE
On 10/06/14 21:21, dE wrote: Hi. I'm in a situation where I got 3 certificates server.pem -- the end user certificate which's sent by the server to the client. intermediate.pem -- server.pem is signed by intermediate.pem's private key. issuer.pem -- intermediate.pem is signed by

[users@httpd] Make logging decision using two environment variables

2014-10-13 Thread Truesdell Douglas A
I am trying to add replace the address field in a log when there is an X-Forwarded-For header following the notes in http://www.techstacks.com/howto/log-client-ip-and-xforwardedfor-ip-in-apache.html. This reference shows how to create and use the necessary condition on the CustomLog directive.

Re: [users@httpd] Make logging decision using two environment variables

2014-10-13 Thread Eric Covener
On Mon, Oct 13, 2014 at 2:11 PM, Truesdell Douglas A truesdelldougl...@johndeere.com wrote: I am trying to add replace the address field in a log when there is an X-Forwarded-For header following the notes in http://www.techstacks.com/howto/log-client-ip-and-xforwardedfor-ip-in-apache.html.

[users@httpd] authorization (beginner)

2014-10-13 Thread Patton, Billy
I’m upgrading an app and have copied it from a production server to my macbook pro. On the production server when going to the site, it requires a login. On my mac It doesn’t and it also doesn’t get very far because it has no user in the system. Here’s the possibilities that I can conceive of 1.

Re: [users@httpd] downing

2014-10-13 Thread Edgar Pettijohn
/var/log will have your logs. Does the server crash when apache is disabled? On 10/13/2014 08:45 AM, georg chambert wrote: The machine goes into some unreachable state, where it has to be hard-reset to boot again. So has anyone a pointer to where in the linux some useful eventlogg

Re: [users@httpd] Re:

2014-10-13 Thread muthamilan Sargunaanandan
Hello All, Becuase of OpenSSL Multiple Remote SecurityVulnerabilities.,I'm planning to update my Apache from httpd-2.2.22-win32-x86-openssl-0.9.8t http://httpd-2.2.22-win32-x86-openssl-0.9.8t.as/ . Please suggest me, which version will the best/stable version to update from 2.2.22. Thanks in

AW: [users@httpd] Re: [wd-vc]

2014-10-13 Thread Bremser, Kurt (AMOS Austria GmbH)
If you need to stay at 2.2, take the most recent version there. Otherwise migrate to the most recent version of 2.4. AFAIK, that means 2.2.27 or 2.4.10 at the moment. Kurt Bremser AMOS Austria Newton was wrong. There is no gravity. The Earth sucks. Von: