Re: [users@httpd] RE: Web sockets & proxypass - No protocol handler was valid for the URL

2017-09-10 Thread Damien Clark
Hi Eric, Thanks so much for taking the time to generate a working config. Initially it didn’t work (the RewriteCond was not matching), so I performed a packet capture on the request leaving my browser, and compared it with a packet capture arriving at the apache process. This revealed that the

Re: [users@httpd] RE: Web sockets & proxypass - No protocol handler was valid for the URL

2017-09-10 Thread Damien Clark
G’day Eric, Thanks so much for taking the time to generate a working config. Initially it didn’t work. So I performed a packet capture outbound from my browser (which showed the Upgrade header), and also inbound to the apache process and determined that the ‘Upgrade’ header was lost somewhere

Re: [users@httpd] MPM Modules Rule of Thumb

2017-09-10 Thread Frank
On 06/09/17 10:23 PM, Tony DiLoreto wrote: A quick update here, I'm starting to believe there is a memory leak in either the way I've configured or compiled httpd on AWS EC2. I'm running a t2.small with 4GB memory with LAMP installed and 4 very small (< 5 hits a day) sites running on it. In my

Re: [users@httpd] RE: Web sockets & proxypass - No protocol handler was valid for the URL

2017-09-10 Thread Eric Covener
For me, the setenvif worked but the overall test failed. I had misread something in how mod_proxy and mod_rewrite depend on eachother. I don't know why your SetEnvIf didn't fire. Here's what seemed to work for me: RewriteEngine ON RewriteCond %{HTTP:Upgrade} "(?i)websocket" RewriteRule ^/

Re: [users@httpd] Offtopic: Apache Struts vulnerability: how to detect Struts & will DB encryption help

2017-09-10 Thread Yehuda Katz
Post Apache Struts questions on the Struts mailing list: http://struts.apache.org/mail.html It also happens that you are wrong about where HTTPD runs. Plenty of people have it running perfectly well on Windows. - Y Sent from a device with a very small keyboard and hyperactive autocorrect. On S

[users@httpd] Offtopic: Apache Struts vulnerability: how to detect Struts & will DB encryption help

2017-09-10 Thread Sunhux G
Understand Apache web servers (runs on Unix only) & Apache Struts (can run in Windows & appliances) are different things: Q1: Can the various VA scanners (like Nessus & McAfee Vulnerability Manager) detect the presence of Struts or you'll need to login to individual servers/ endpoints or have an a

Re: [users@httpd] mod_lua and subprocess_env

2017-09-10 Thread Andrei Ivanov
Yann? What's the next step? Your message didn't seem to draw attention from others and it's been almost 2 months 😞 On Mon, Aug 7, 2017 at 3:30 PM, Andrei Ivanov wrote: > Hmm, if nobody comments on your proposal does it mean you get an implicit > commit acceptance after 1 month? 😀 > > On Sat, Jul