AW: [users@httpd] bad record mac error with nCipher nFast

2013-05-13 Thread Abfalterer, Armin
Hi, changing the UID of the running Apache processes to 0 (root) showed that it is a matter of privileges. # /usr/bin/pcred -u 0 Regards, Armin > -Ursprüngliche Nachricht- > Von: Abfalterer, Armin > Gesendet: Montag, 13. Mai 2013 09:59 > An: users@httpd.apache.org >

[users@httpd] bad record mac error with nCipher nFast

2013-05-13 Thread Abfalterer, Armin
Hi all, we run a nCipher nFast card under Solaris and we've embedded the private key of our Apache server on this card. Apache is configured to use the Open SSL "chil" engine and the embedded key. When we want to connect to the Apache server we run into a "bad record mac" error. [Wed May 08 1

AW: [users@httpd] Cross-Site Request Forgery

2012-02-20 Thread Abfalterer, Armin
> Does anyone know of ANY web server that > provides > > CSRF protection at the web server level?  I'm curious. > > Take a look at mod_security that provides CSRF prevention mechanism by means of JS injection. smime.p7s Description: S/MIME cryptographic signature

[users@httpd] Broken pipe erros causing high system load

2012-01-24 Thread Abfalterer, Armin
Hi all, I have encountered a performance problem (high system load, slow response times) when making lots of requests that drop the TCP connection while reading the response. That is, a client reads some bytes of the response and cuts the transmission with a TCP RST. In my tests I have used 100 c