Re: [users@httpd] Apache and nextcloud - insecure ?

2020-09-01 Thread Lentes, Bernd
- On Sep 1, 2020, at 1:32 PM, Martin Drescher dresc...@inter.net wrote: > Hi Bernd, > > very short answer to 1.: > Yes, you want to write data there. Hence you need rite privileges. Make sure, > privileges of www-data are restricted to that directory, you will be fine. > > Off topic

Re: [users@httpd] Debugging a reverse proxy using TLS

2020-09-01 Thread Tom Browder
On Tue, Sep 1, 2020 at 10:18 Eric Covener wrote: > On Tue, Sep 1, 2020 at 10:58 AM Tom Browder wrote: > > Is there any way with the Apache logs to see (and capture) the raw data > being received on the backside of a reverse proxy using TLS? > > I assume

Re: [users@httpd] Debugging a reverse proxy using TLS

2020-09-01 Thread Eric Covener
On Tue, Sep 1, 2020 at 10:58 AM Tom Browder wrote: > > Is there any way with the Apache logs to see (and capture) the raw data being > received on the backside of a reverse proxy using TLS? I assume https://httpd.apache.org/docs/2.4/mod/mod_dumpio.html will have it. > > If so, is there any way

[users@httpd] Debugging a reverse proxy using TLS

2020-09-01 Thread Tom Browder
Is there any way with the Apache logs to see (and capture) the raw data being received on the backside of a reverse proxy using TLS? If so, is there any way to unenccode the data offline with OpenSSL if one has the public and private keys? Thanks so much. Best regards, -Tom

Re: [users@httpd] Apache and nextcloud - insecure ?

2020-09-01 Thread Martin Drescher
Hi Bernd, very short answer to 1.: Yes, you want to write data there. Hence you need rite privileges. Make sure, privileges of www-data are restricted to that directory, you will be fine. Off topic about 2.: Consider using ownCloud, because it has .deb repo, you can get updates if you want to.

[users@httpd] Apache and nextcloud - insecure ?

2020-09-01 Thread Lentes, Bernd
Hi, i'm planning to install Nextcloud on an Ubuntu 20.04 with Apache. But the recommendations from Nextcloud to configure Apache don't appeal to me. 1. https://docs.nextcloud.com/server/19/admin_manual/installation/source_installation.html#installation-wizard The recommendation is to change the