[us...@httpd] CVE-2009-3555 and Opera

2010-04-15 Thread Andre Hübner
Hello, did on my Server update of openssl from 0.9.8a to 0.9.8n and compiled apache 2.2.15 against the new libs. Apache is running and CVE-2009-3555 security warning in newest firefox is gone but still appears in newest opera-browser. Somebody knows what they want to be updated? Thanks,

[us...@httpd] AddOutputFilterByType vs. SSI/php-cgi

2009-08-24 Thread Andre Hübner
linux, apache 2.2.10 Hello, my situation is as follows. i have activated mod_deflate by: LoadModule deflate_module /usr/lib/apache/mod_deflate.so IfModule mod_deflate.c AddOutputFilterByType DEFLATE text/html text/plain text/xml application/x-javascript text/x-js text/javascript

[us...@httpd] mod_deflate mod_php/php-cgi

2009-06-10 Thread Andre Hübner
Hello, i did some Tests with apache22 and mod_deflate in standardsettings. With deflate enabled i called a simple phpinfo.php to watch what happens. When phpinfo.php was processed by mod_php the content was deliverd gziped but wenn php running with fastcgi it was not. Ist this a generall

Re: [us...@httpd] mod_deflate mod_php/php-cgi

2009-06-10 Thread Andre Hübner
Tough to guess. Relevant Config, logs, and the request/response are a good start. oh, it works now. if called php-script ist parsed by php-cgi it is not enough to write AddOutputFilterByType in .htaccess if i activated AddOutputFilterByType directly in httpd.conf it works. with mod_php

Re: [us...@httpd] mod_deflate mod_php/php-cgi

2009-06-10 Thread Andre Hübner
I don't know why that would make a difference, but if you have access to the main httpd.conf file, you should never use .htaccess. It is less efficient than putting it in the main httpd.conf, has various 'gotchas' and slight differences in syntax that are easy to catch you out. yes, but there

[us...@httpd] SSL-cert based User-Auth

2009-01-16 Thread Andre Hübner
Hello, today i heared of this topic of authenticating users by their client certs. ( I think establishing ssl-connect with mysql works like this) Can this be done with apache or additional moduls? I do not really know how to search for links to this topic. I already use classical SSL, server is

[us...@httpd] sethandler server-status

2008-12-29 Thread Andre Hübner
Hello, im looking for a way to disable the posibility for users to activate a server-status page within own virtual host. For now it is enough to add a .htaccess with content sethandler server-status i do not want that my users can see all what happens at apache-traffic. i can just only hide

[EMAIL PROTECTED] Apache 1.3.37 64bit

2008-10-17 Thread Andre Hübner
Hi List, try to compile older Apache 1.3.37 on opensuse 11 64bit. I have some Problems with my configure-line. configure tries to find my base-libs in wrong folders: Error: Cannot find SSL library files in any of the following dirs: Error: . /lib /usr/lib /usr/local/lib SSL is installed but

[EMAIL PROTECTED] disable to responded to an unrequested SSL Certificate

2008-09-30 Thread Andre Hübner
Hi List, costumer did a nessus pci-scan to fit worldpay requirements. Result was a security risk at ssl section: Family: Remote Shell Access Critical 443/tcp 11875 Description: The remote host responded to an unrequested SSL Certificate. The remote SSL server should have sent back an Error

SSL - angefragter hostname

2008-09-29 Thread Andre Hübner
Hallo Liste, hab sowas in meiner httpd.conf um einen Host unter SSL erreichbar zu machen. VirtualHost ip.ad.re.ss:443 SuexecUserGroup user user Serveradmin [EMAIL PROTECTED] DocumentRoot /www/htdocs/user/ ServerName www.hostname.com php_admin_value open_basedir

Re: SSL - angefragter hostname

2008-09-29 Thread Andre Hübner
Hallo, Dir ist klar das der apache das was er sendet über nur über den hostnamen senden kann, der angefragt wurde? hilft RewriteCond Dir weiter? http://httpd.apache.org/docs/2.2/mod/mod_rewrite.html falk ja, das ist mir klar. Der Server sollte aber eine art errorcode von sich aus senden

[EMAIL PROTECTED] alias with subfolders

2008-07-30 Thread Andre Hübner
apache 2.2.9 Hi, try to use Alias /folder1/folder2 /local/path/local/path in my httpd.conf. All i get is an 404 error. If i change to: Alias /folder1 /local/path/local/path /folder1 is correct maped to /local/path/local/path and requests are ok I did not found any hint that aliasing with

Re: [EMAIL PROTECTED] alias with subfolders

2008-07-30 Thread Andre Hübner
Hi, quote For this reason, when two or more of these directives apply to the same sub-path, you must list the most specific path first in order for all the directives to have an effect. For example, the following configuration will work as expected: Alias /foo/bar /baz Alias /foo /gaq

[EMAIL PROTECTED] KeepAliveTimeout too small?

2008-06-27 Thread Andre Hübner
Hi List, have a odd issue with apache when using external link-checker to follow links with http://validator.w3.org/checklink i want to check my page, depth is 1. In terminal i watch incoming requests in access_log all is fine, but sometimes the linkchecker shows 500er server error on some

[EMAIL PROTECTED] RE: Apache Log File 2GB

2008-06-10 Thread Andre Hübner
Servus, To rotate the logs you can use Apaches piped rotatelogs: http://httpd.apache.org/docs/2.2/programs/rotatelogs.html Put something like the following in your httpd.conf (or whereever your logging is define), 'CustomLog | APACHE_HOME/bin/rotatelogs -l

[EMAIL PROTECTED] Re: Apache Log File 2GB

2008-06-04 Thread Andre Hübner
Servus, What is the advantage of having larger log files? Why not rotate daily? You don't want to rotate once it reaches 2GB. You should be doing it way before then. Large log files are harder to search through and make sense of. sense is to have one file that can be webalized cause

[EMAIL PROTECTED] Apache Log File 2GB

2008-06-03 Thread Andre Hübner
Hi List, i have access_logs 2GB and Apache 2.2.8 want restart in correct way. Is there a hint to let LogFiles grow larger or is the only way to rotate at reaching 2GB? Thank you Andre - The official User-To-User support

[EMAIL PROTECTED] Re: Apache Security Problem

2008-05-19 Thread Andre Hübner
Hi, You can do restrictions of particular options using the technique shown her= e: http://httpd.apache.org/docs/2.2/howto/htaccess.html#how But I have a feeling that there are other ways around your separation. It depends on exactly the details of how you are running your scripts.

[EMAIL PROTECTED] Re: Apache Security Problem

2008-05-15 Thread Andre Hübner
Hi, I'm a little confused by exactly what problem you are trying to solve. Am I right that you could do exactly the same thing by just having your CGI script copy the relevant file into the webspace rather than using a symlink? If so, then this is just the standard issue with privilege

[EMAIL PROTECTED] Options +Indexes - viewing foldername of ptotected subfolders

2008-03-26 Thread Andre Hübner
Hi List, i have a problem with Options directive. I have folder in which are some other folders located. All of these subfolders are .htaccess protected by basic authentication. Also there is a .htaccess with Options +Indexes to view foldercontent in browser. With apache1.3 als works fine. I

Re: [EMAIL PROTECTED] Options +Indexes - viewing foldername of ptotected subfolders

2008-03-26 Thread Andre Hübner
26, 2008 at 10:07 AM, Andre Hübner [EMAIL PROTECTED] wrote: Hi List, i have a problem with Options directive. I have folder in which are some other folders located. All of these subfolders are .htaccess protected by basic authentication. Also there is a .htaccess with Options +Indexes to view

[EMAIL PROTECTED] SSI resolve IP to hostname

2008-02-29 Thread Andre Hübner
Suse 10.1 Apache 2.2.8 Hello List, i have just a little problem with name resolution using SSI. Customer of me is using !--#echo var=REMOTE_ADDR-- and !--#echo var=REMOTE_HOST-- to show IP and Hostname of Client. It works without any error, I tried with different ISP. Customer says that his

Re: [EMAIL PROTECTED] SSI resolve IP to hostname

2008-02-29 Thread Andre Hübner
: Torsten Foertsch [EMAIL PROTECTED] To: users@httpd.apache.org Cc: Andre Hübner [EMAIL PROTECTED] Sent: Friday, February 29, 2008 3:10 PM Subject: Re: [EMAIL PROTECTED] SSI resolve IP to hostname On Fri 29 Feb 2008, Andre Hübner wrote: i have just a little problem with name resolution using SSI

[EMAIL PROTECTED] Apache 2.2.8 - Segmentation fault

2008-02-26 Thread Andre Hübner
Apache2.2.8/php5.2.5 Suse10.1 Hi List, i have a problem with segfaults in my ApacheInstallation after running a few days/hours I switched LogLevel to debug and thats what i got: [Mon Feb 25 03:22:36 2008] [debug] proxy_util.c(1670): proxy: grabbed scoreboard slot 0 in child 27415 for worker

[EMAIL PROTECTED] Apache 2.2.8 - Segmentation fault II

2008-02-26 Thread Andre Hübner
Hi, sorry for next quick post, but here better example for segfault. more then 4 hours between scriptstart and segfault, but i found also line where start and kill was between only a few seconds [Mon Feb 25 00:04:49 2008] [debug] proxy_util.c(1670): proxy: grabbed scoreboard slot 0 in child

[EMAIL PROTECTED] prespawn of cgi-apps

2008-02-04 Thread Andre Hübner
Hello List, i use mod_fcgid to start my cgi-applications. http://fastcgi.coremail.cn/ I tried to answer my question with fcgid-documentation. But i think the docs are a little bit spartan ;) Is there a possibility to prespawn some apps, for instance php? i have the problem that some of my users

[EMAIL PROTECTED] apache 2.2.6 modul-versions mod_rewrite

2008-01-31 Thread Andre Hübner
Hi List, is there a way to find out versions of includet modules for apache 2.2.6(linux)? Particularly i'm interessted of version of mod_rewrite. I was looking for versionnumber in sources but did not found any note. How to find out? Thanks Andre

[EMAIL PROTECTED] httpd 2.2.6 - double cronolog in pstree

2007-09-27 Thread Andre Hübner
Hello List, i send this the 2nd time. Is there anybody recieving me or is something wrong in my email too? Any idea what i should do to get answers? I updatet Apache from 2.2.4 to 2.2.6. I used same ConfigureLine etc., only new sources. Now i see in pstree (suse linux) double entries of

[EMAIL PROTECTED] httpd 2.2.6 - double cronolog in pstree

2007-09-17 Thread Andre Hübner
Hello List, i updatet Apache from 2.2.4 to 2.2.6. I used same ConfigureLine etc., only new sources. Now i see in pstree (suse linux) double entries of conolog for errorlog: |-cronolog . . . |-httpd-+-2*[cronolog] | `-7*[httpd] If i remove the Line for errorlog from httpd.conf only

[EMAIL PROTECTED] httpd 2.2.6 - double cronolog in pstree

2007-09-13 Thread Andre Hübner
Hello List, i updatet Apache from 2.2.4 to 2.2.6. I used same ConfigureLine etc., only new sources. Now i see in pstree (suse linux) double entries of conolog for errorlog: |-cronolog . . . |-httpd-+-2*[cronolog] | `-7*[httpd] If i remove the Line for errorlog from httpd.conf only