Re: [users@httpd] how to get apr_pool_t when need to call ap_md5

2017-09-07 Thread Eric Covener
On Thu, Sep 7, 2017 at 12:07 PM, eeadev dev wrote: > In my function I need to get the checksum using md5. > > I saw that there is this function ap_md5(apr_pool_t *a, const unsigned char > *string); > > but it needs apr_pool_t > > how can I get it? > > char key[] = "abc"; > >

Re: [users@httpd] RE: Web sockets & proxypass - No protocol handler was valid for the URL

2017-09-07 Thread Damien Clark
> On 8 Sep 2017, at 2:04 am, Eric Covener wrote: > > On Thu, Sep 7, 2017 at 10:19 AM, Damien Clark wrote: >> >>> On 7 Sep 2017, at 11:53 pm, Eric Covener wrote: >>> I am wondering whether the use of a rewriterule with

Re: [users@httpd] CSP nonces in apache

2017-09-07 Thread Luis Speciale
Le 07/09/2017 à 20:57, Daniel Gruno a écrit : Try: Substitute "s/<(style|script)((?!\s*src=).*)>/<$1 nonce-${numbnonce} $2>/i" Now it substitutes

Re: [users@httpd] CSP nonces in apache

2017-09-07 Thread Daniel Gruno
On 09/07/2017 08:54 PM, Luis Speciale wrote: > Le 07/09/2017 à 20:36, Daniel Gruno a écrit : >> On 09/07/2017 08:30 PM, Luis Speciale wrote: >>> Le 07/09/2017 à 19:53, Daniel Gruno a écrit : >>> >>> Thank you for your answer. >>> Quick spot-check says you should probably change '.)*)' to

Re: [users@httpd] CSP nonces in apache

2017-09-07 Thread Luis Speciale
Le 07/09/2017 à 20:36, Daniel Gruno a écrit : On 09/07/2017 08:30 PM, Luis Speciale wrote: Le 07/09/2017 à 19:53, Daniel Gruno a écrit : Thank you for your answer. Quick spot-check says you should probably change '.)*)' to ').*)' I tried this but it doesn't seem to work. Also, the env

Re: [users@httpd] CSP nonces in apache

2017-09-07 Thread Daniel Gruno
On 09/07/2017 08:30 PM, Luis Speciale wrote: > Le 07/09/2017 à 19:53, Daniel Gruno a écrit : > > Thank you for your answer. > >> Quick spot-check says you should probably change '.)*)' to ').*)' > > I tried this but it doesn't seem to work. > >> Also, the env vars need to be ${}'ed. > > Ok,

Re: [users@httpd] CSP nonces in apache

2017-09-07 Thread Luis Speciale
Le 07/09/2017 à 19:53, Daniel Gruno a écrit : Thank you for your answer. Quick spot-check says you should probably change '.)*)' to ').*)' I tried this but it doesn't seem to work. Also, the env vars need to be ${}'ed. Ok, I got it. Assuming you want to inject nonce-foo into all

Re: [users@httpd] CSP nonces in apache

2017-09-07 Thread Daniel Gruno
On 09/07/2017 07:46 PM, Luis Speciale wrote: > Hello; > > I wanted to have CSP nonces in apache. Something like this in NGINX > https://scotthelme.co.uk/csp-nonce-support-in-nginx/ > The idea is to generate a number, put this number in the CSP nonce (the > header) and then replicate this number

[users@httpd] CSP nonces in apache

2017-09-07 Thread Luis Speciale
Hello; I wanted to have CSP nonces in apache. Something like this in NGINX https://scotthelme.co.uk/csp-nonce-support-in-nginx/ The idea is to generate a number, put this number in the CSP nonce (the header) and then replicate this number in every inline script. So in my httpd-vhosts.conf I

[users@httpd] how to get apr_pool_t when need to call ap_md5

2017-09-07 Thread eeadev dev
In my function I need to get the checksum using md5. I saw that there is this function ap_md5(apr_pool_t *a, const unsigned char *string); but it needs apr_pool_t how can I get it? char key[] = "abc"; key_md5 = ap_md5(mem_pool, key);

Re: [users@httpd] RE: Web sockets & proxypass - No protocol handler was valid for the URL

2017-09-07 Thread Eric Covener
On Thu, Sep 7, 2017 at 10:19 AM, Damien Clark wrote: > >> On 7 Sep 2017, at 11:53 pm, Eric Covener wrote: >> >>> >>> I am wondering whether the use of a rewriterule with the “P” flag is the >>> reason the upgrade header hasn’t been included. I wonder

Re: [users@httpd] RE: Web sockets & proxypass - No protocol handler was valid for the URL

2017-09-07 Thread Damien Clark
> On 7 Sep 2017, at 11:53 pm, Eric Covener wrote: > >> >> I am wondering whether the use of a rewriterule with the “P” flag is the >> reason the upgrade header hasn’t been included. I wonder this because it is >> pretty widely reported to work fine when using ProxyPass to

Re: [users@httpd] RE: Web sockets & proxypass - No protocol handler was valid for the URL

2017-09-07 Thread Damien Clark
> On 7 Sep 2017, at 11:53 pm, Eric Covener wrote: > >> >> I am wondering whether the use of a rewriterule with the “P” flag is the >> reason the upgrade header hasn’t been included. I wonder this because it is >> pretty widely reported to work fine when using ProxyPass to

Re: [users@httpd] RE: Web sockets & proxypass - No protocol handler was valid for the URL

2017-09-07 Thread Eric Covener
> I’m using an adaptation of Eric’s rewrite rule from the bottom of this email > (only difference is just http and ws, rather than https and wss). > > RewriteEngine on > RewriteCond %{HTTP:Upgrade} "(?i)websocket" > RewriteRule ^/(.*)$ ws://localhost:3000/$1 [P] > ProxyPass/

[users@httpd] RE: Web sockets & proxypass - No protocol handler was valid for the URL

2017-09-07 Thread Damien Clark
Hi Eric/Adam, Just reviving an old thread. Here is the full thread archive if it helps. http://apache-http-server.18135.x6.nabble.com/Web-sockets-amp-proxypass-No-protocol-handler-was-valid-for-the-URL-td5033887.html I am using Apache virtual host as frontend, and Node.js as backend running

[users@httpd] Apache assertion

2017-09-07 Thread David Hodgkinson
I'm trying to add a directive to apache's httpd.conf, straight out of the page at http://perl.apache.org/docs/2.0/user/config/custom.html#Creating_and_Using_Custom_Configuration_Directives

Re: [users@httpd] Why Apache does not save some records to error log

2017-09-07 Thread Daniel
Because those are not httpd errors, errors from a backend such as when using php-cgi as a backend in a wrapper should be logged in their own php logging, and as you showed php error_log file has not been defined. El 7 sept. 2017 12:51 a. m., "Анатолий Кирсанов"