Re: [users@httpd] failure using wss proxy

2020-12-16 Thread @lbutlr
On 16 Dec 2020, at 08:03, Guennadi Liakhovetski wrote: > that the server was only accepting TLSv1.3 I would consider that to be a misconfiguration at this point. TLSv1.2 is fully supported and current and a server that requires TLSv1.3 is doing something wrong. -- I get the feeling that som

[users@httpd] How to implement Digest authentication on Apache behind a proxy

2020-12-16 Thread kev jr
Hi everyone, I try to implement digest authentication on Apache. The architecture is the following : Server A is the client Server B is the proxy (a API solution which only transmits the request as a proxy) Server C is my Apache server where I configure the Digest authentification I have the fo

Re: [users@httpd] Disable HTTP2 connection coalescing for different virtual hosts/domains

2020-12-16 Thread Yves Goergen
With unproxied sites, the domain is correctly switched. I see the content for the domain I requested. With proxied sites, all requests seem to go to the same backend. But each backend is only handling a single site. So a backend app server for site A then receives requests for site B that shou

Re: [users@httpd] failure using wss proxy

2020-12-16 Thread Guennadi Liakhovetski
On Tue, 15 Dec 2020, Guennadi Liakhovetski wrote: > Hi, > > I'm trying to set up a ws -> wss proxy to my.webhookrelay.com : > > > ServerName local.name > SSLProxyEngine On > RewriteEngine on > ProxyRequests Off > ProxyPass /wsrelay wss://my.webhookrelay.com/v1/socket > P

[users@httpd] Does .NET support OCSP stapling configured on Apache web server?

2020-12-16 Thread luigi.sorrent...@fujitsu.com
Hello, Our .NET 3.5 application uses the HttpWebRequest class to establish TLS connections to hosted backend services and it does not make use of our Apache web server's stapled response (to confirm whether or not the SSL certificate is valid). The application itself performs client-driven CRL

[users@httpd] mod_security in Apache HTTP server

2020-12-16 Thread Sathish Vijayan
Hello, Currently I am using the Apache server 2.4.43 in RHEL8 and like to audit log the Apache server with mod_security to log the PAYLOAD for each http request. If anyone already used the "mod_security" in Apache server. Please share some reference articles or sample configurations related to