RE: [users@httpd] Rookie Question on Define and Testing the value

2016-05-31 Thread Darryl Philip Baker
Rick said: I currently specify the variables I want to check as flags from whatever logic I want external to the httpd binary, then test for the existence of the appropriate flag using IfDefine. For example, I replaced apachectl with a custom version that can determine which datacenter I'

RE: [users@httpd] Rookie Question on Define and Testing the value

2016-05-31 Thread Houser, Rick
I currently specify the variables I want to check as flags from whatever logic I want external to the httpd binary, then test for the existence of the appropriate flag using IfDefine. For example, I replaced apachectl with a custom version that can determine which datacenter I'm running in and

Re: [users@httpd] Rookie Question on Define and Testing the value

2016-05-31 Thread Eric Covener
On Tue, May 31, 2016 at 3:32 PM, Darryl Philip Baker wrote: > I’m trying to do some conditional configuration settings. I know that I can > use “Define variable value” to set up a variable. I know that “ [!}variable>” can be used to test to see if a variable is set or not. I > looked at “” as a po

[users@httpd] Rookie Question on Define and Testing the value

2016-05-31 Thread Darryl Philip Baker
I'm trying to do some conditional configuration settings. I know that I can use "Define variable value" to set up a variable. I know that "" can be used to test to see if a variable is set or not. I looked at "" as a possibility but since what I am setting are really configuration change and "If

RE: [users@httpd] Problems with Event MPM Performance Tuning in 2.4.18

2016-05-31 Thread Houser, Rick
Thank you very much for the quick response, Luca. It definitely sounds like that could be related to the problems I’m having. Looking at the patch, however, both the original and the replacement seem to be enforcing a minimum value to MinSpareThreads that would correspond to at least one compl

Re: [users@httpd] Problems with Event MPM Performance Tuning in 2.4.18

2016-05-31 Thread Luca Toscano
Hi Rick! 2016-05-31 15:57 GMT+02:00 Houser, Rick : > I have to deal with mod_cluster, and it is extremely memory hungry (in the > GB range per process). As mitigation, I’m trying to get down to a single > apache worker process per host when we aren’t under heavy load. That would > save me about

[users@httpd] RE: SSL client auth, accept only one specific intermediate CA

2016-05-31 Thread David Balažic
David Balažic wrote: > > How to set up apache mod_ssl to accept client certificates issued by one > specific intermediate? > > Let's have certificates (ordered by issuer): > - root CA > - intermediate 1 > - client 11 > - client 12 >- intermediate 2 > - client 21 >

[users@httpd] Problems with Event MPM Performance Tuning in 2.4.18

2016-05-31 Thread Houser, Rick
I have to deal with mod_cluster, and it is extremely memory hungry (in the GB range per process). As mitigation, I'm trying to get down to a single apache worker process per host when we aren't under heavy load. That would save me about 6GB per host. We have several hosts running the exact

[users@httpd] SSL client auth, accept only one specific intermediate CA

2016-05-31 Thread David Balažic
Hi! How to set up apache mod_ssl to accept client certificates issued by one specific intermediate? Let's have certificates (ordered by issuer): - root CA - intermediate 1 - client 11 - client 12 - intermediate 2 - client 21 - client 22 I want to allow certific

Re: [users@httpd] Two way SSL authentication between apache proxy server and tomcat

2016-05-31 Thread Mohanavelu Subramanian
Hi, Thanks a lot. I just gone through the link. I understand the configuration mentioned in link would automatically read information from HTTP headers and insert it into request. >From request, I can fetch like this. request.getAttribute("javax.servlet.request.X509Certificate"); Please correc

RE: [users@httpd] Two way SSL authentication between apache proxy server and tomcat

2016-05-31 Thread David Balažic
To make tomcat evaluate the SSL_CLIENT_CERT , you must configure a SSLValve, see: https://tomcat.apache.org/tomcat-7.0-doc/api/org/apache/catalina/valves/SSLValve.html David Balažic Software Engineer www.comtrade.com From: Mohanavelu Subramanian [mailto:mhnv...@gmail.com] Sent: 30. May 2016 20: