RE: [users@httpd] CAC Card Client Certificate Auth and Crypto Suites

2015-03-23 Thread Jason Pyeron
> -Original Message- > From: McGregor, Donald (Don) (CIV) > Sent: Monday, March 23, 2015 15:22 > > > I'm attempting to get smart cards (DoD CAC) working with > apache 2.2 (CentOS 6). > > It works on some browsers-Chrome, Safari-but not Firefox > 36.0.3 and IE 11.0.9600.1760 on Windows

Re: [users@httpd] A very strange "minor" issue with PHP-FPM with Apache 2.4 (security, privacy related)

2015-03-23 Thread hushthatbush
Well... um... what do you suggest I change it to? (I have read the other guy's suggestion and will be trying it as well.) On 2015-03-23 at 4:45 PM, "Eric Covener" wrote: > >On Fri, Mar 20, 2015 at 10:01 PM, >wrote: >> RewriteCond %{REQUEST_FILENAME} -f > > >in vhost context, REQUEST_FILENAME

Re: [users@httpd] Selecting SSLProxyMachineCertificateFile based on destination address

2015-03-23 Thread Daniel
2015-03-23 20:01 GMT+01:00 Abdelouahed Haitoute : > Hello, > > I’m trying to setup a proxy server which selects the correct certificate > based on destination IP-address. I’m using apache 2.4 on CentOS 6.6. > > I’m using the following configuration: > > > SSLProxyEngine On > SSLProxyVerify re

[users@httpd] CAC Card Client Certificate Auth and Crypto Suites

2015-03-23 Thread McGregor, Donald (Don) (CIV)
I’m attempting to get smart cards (DoD CAC) working with apache 2.2 (CentOS 6). It works on some browsers—Chrome, Safari—but not Firefox 36.0.3 and IE 11.0.9600.1760 on Windows 8.1. Firefox doesn’t work on OS X, either. The root cause of the problem seems to be the SSL negotiation. The SSLProto

[users@httpd] Selecting SSLProxyMachineCertificateFile based on destination address

2015-03-23 Thread Abdelouahed Haitoute
Hello, I’m trying to setup a proxy server which selects the correct certificate based on destination IP-address. I’m using apache 2.4 on CentOS 6.6. I’m using the following configuration: SSLProxyEngine On SSLProxyVerify require SSLProxyVerifyDepth 10 SSLProxyMachineCertificateFil

Re: [users@httpd] A very strange "minor" issue with PHP-FPM with Apache 2.4 (security, privacy related)

2015-03-23 Thread Eric Covener
On Fri, Mar 20, 2015 at 10:01 PM, wrote: > RewriteCond %{REQUEST_FILENAME} -f in vhost context, REQUEST_FILENAME is just the URL. It hasn't been mapped to the filesystem yet. -- Eric Covener cove...@gmail.com - To unsubscrib

Re: [users@httpd] A very strange "minor" issue with PHP-FPM with Apache 2.4 (security, privacy related)

2015-03-23 Thread Scott (firstclasswatches.co.uk)
Although I am not sure why it is not defaulting to 404 either. Kind Regards, Scott First Class Watches 9 Warwick Road Kenilworth CV8 1HD Warwickshire United Kingdom On 23 March 2015 at 15:23, Scott (firstclasswatches.co.uk) < scott.lu...@firstclasswatches.co.uk> wrote: > Hello, > > Ok fair eno

Re: [users@httpd] A very strange "minor" issue with PHP-FPM with Apache 2.4 (security, privacy related)

2015-03-23 Thread Scott (firstclasswatches.co.uk)
Hello, Ok fair enough. I don't think what I have is exotic, SetHandler is usually how PHP is traditionally implemented in non FPM setups and this extends it to mod_proxy_fcgi. If anybody spots any problems with my approach I would love to hear about it but so far it has been stable. For what you

Re: [users@httpd] A very strange "minor" issue with PHP-FPM with Apache 2.4 (security, privacy related)

2015-03-23 Thread hushthatbush
Hey. I'm not saying that your method wouldn't work, but I feel very uncomfortable deviating so far from the official guide. I don't want an exotic, special configuration that is prone to break in the future. I really want to know what's wrong with what I have, if anyone is able to tell. I really

[users@httpd] RewriteMap look up produces error message

2015-03-23 Thread Daniel Schmidt
Hi, When I do a look up via RewriteMap, I get the message “Error” in the console/error log file. The look up still works like expected, but I don’t know why I get the error message and I would like to get rid of it. If I would add a second look up, I get a second “Error” in the console/error l

Re: [users@httpd] A very strange "minor" issue with PHP-FPM with Apache 2.4 (security, privacy related)

2015-03-23 Thread Scott (firstclasswatches.co.uk)
Hello, I believe that using a SetHandler approach (in my case with a UDS) is the most reliable way to use mod_proxy_fcgi with PHP-FPM as I believe this requires resolution of the script before it is passed to PHP-FPM. ProxyErrorOverride On

Re: [users@httpd]

2015-03-23 Thread Rainer M. Canavan
On Mar 20, 2015, at 21:45 , el kalin wrote: > 60-0 - 0/0/2 . 0.01102281 0 0.0 0.000.00 > 127.0.0.1 my.domain.com:80OPTIONS * HTTP/1.0 > 61-0 - 0/0/1 . 0.00102274 0 0.0 0.000.00 > 127.0.0.1 my.domain.c