Re: [users@httpd] Segmentation fault

2022-03-12 Thread Dino Ciuffetti
dvantages by moving to the fpm pools model, and your httpd will use less memory as well. On Wed, 9 Mar 2022 at 20:15, Dino Ciuffetti mailto:d...@tuxweb.it)> wrote: Already tried to disable the opcache PHP extension? # sudo phpdismod opcache It should be your problem. Also, it seems you are on pref

Re: [users@httpd] Segmentation fault

2022-03-09 Thread Dino Ciuffetti
Already tried to disable the opcache PHP extension? # sudo phpdismod opcache It should be your problem. Also, it seems you are on prefork, please try to set MaxConnectionsPerChild to something near 1 when you are using mod_php or big modules like this to avoid any memory leak building

Re: [users@httpd] Could not find worker

2022-02-13 Thread Dino Ciuffetti
Please, try to add this on top of your workers.properties: # Status (RO worker) worker.list=jk-status worker.jk-status.type=status worker.jk-status.read_only=true # Manager (RW worker) worker.list=jk-manager worker.jk-manager.type=status Then, on your httpd.conf check for the presence of those

Re: [users@httpd] Is it possible to install/configure SSL certificates on a server behind a reverse proxy?

2022-01-13 Thread Dino Ciuffetti
‐ Original Message ‐‐‐ On Wednesday, January 12th, 2022 at 5:23 PM, Dino Ciuffetti mailto:d...@tuxweb.it)> wrote: My question:Would it have been possible to install the SSL certificates in the virtual machines? YES. It's possibile to send Internet HTTPS traffic to an internal HTTPS service behind

Re: [users@httpd] Is it possible to install/configure SSL certificates on a server behind a reverse proxy?

2022-01-12 Thread Dino Ciuffetti
My question:Would it have been possible to install the SSL certificates in the virtual machines? YES. It's possibile to send Internet HTTPS traffic to an internal HTTPS service behind apache httpd as a reverse proxy. You eventally need to install same SSL certificates (but you don't have

Re: [users@httpd] timeout and keepalive parameter in ProxyPass

2021-10-13 Thread Dino Ciuffetti
The global "Timeout" parameter is needed to set the length of time Apache httpd will wait for I/O in various circumstances. https://httpd.apache.org/docs/2.4/mod/core.html#timeout (https://httpd.apache.org/docs/2.4/mod/core.html#timeout) The "keepalive" attribute of ProxyPass can be used to fool

Re: [users@httpd] Re: [External] : [users@httpd] Problems compiling under Solaris 10

2021-08-30 Thread Dino Ciuffetti
If you don't need ab (Apache Benchmark): cd support ; touch ab ; cd .. ; make This way you will skip the ab compilation. 30 agosto 2021 13:47, "Ran Mozes" mailto:ran.mo...@oracle.com?to=%22Ran%20Mozes%22%20)> wrote: Hi Nigel, all, I am experiencing the exact same errors while trying to compile

Re: [users@httpd] Fwd: apache2 / httpd graceful/reload failures on Ubuntu 21.04

2021-08-27 Thread Dino Ciuffetti
Reading the source code: >From mod_slotmem_shm: ... 401 apr_shm_remove(fname, pool); 402 rv = apr_shm_create(, size, fname, gpool); ... 408 ap_log_error(APLOG_MARK, rv == APR_SUCCESS ? APLOG_DEBUG : APLOG_ERR, 409 rv, ap_server_conf,

Re: [users@httpd] Different security warnings for a site with Chrome on Linux, Windows, and iOS

2021-08-09 Thread Dino Ciuffetti
> Firefox on linux indicates that "Parts of this page are not secure". > I think the issue may be that your o'reilly graphic is served via > http. Richard is right. It's this image in your HTML that is loading via HTTP instead of HTTPS:

Re: [users@httpd] PHP-FPM with Reverse Proxy via cannot get to Post

2021-08-01 Thread Dino Ciuffetti
> After many tests, I have concluded that what is happening is that header is > not being sent to > PHP-FPM since we use authorization and access, no response payload is being > provided on POST with > PHP-FPM (my findings). > > The app does header authentication via JWT and outside of the

Re: [users@httpd] DKIM misconfiguration of this mailing list

2021-05-19 Thread Dino Ciuffetti
Hi. I don't see any problem at all with DKIM from the list. (I'm not the person who implemented or configured it but) This list manager is well configured imho. Please check your incoming emails coming from the list. They are not "forwarded" breaking DKIM or SPF but they are rewritten with a

Re: [users@httpd] Why so much difference in memory used per process in apache2 between two different systems

2021-05-17 Thread Dino Ciuffetti
Try to comment out mod_security, it's a module that use enough memory. Also on server2 there are modules not loaded on server1. BTW what's your problem? Your server is plenty of ram and RSS memory is not creating any problem. Right? 17 maggio 2021 13:34, "Marc Serra"

Re: [users@httpd] checking for OpenSSL version >= 0.9.8a... FAILED

2021-05-10 Thread Dino Ciuffetti
./configure --prefix=/usr/local/apache2 --enable-deflate --enable-expires --enable-headers --enable-modules=reallyall --enable-ssl --enable-so --with-mpm=worker --enable-rewrite --with-apr=/usr/local/apr --with-apr-util=/usr/local/apr-util what are my options to resolve this ? please try to

Re: [users@httpd] port 80 curl connection refused.

2021-05-05 Thread Dino Ciuffetti
curl http://123.456.7.543 (http://123.456.7.543) (example ip address) curl: (7) Failed to connect to 123.456.7.543 port 80: Connection refused "Connection refused" means that your apache service is not bound to port TCP/80, it's down, or your routing send HTTP traffic to another host where

Re: [users@httpd] mod_jk hasn't worked

2021-04-30 Thread Dino Ciuffetti
How about this. If the software was robust and developed to a professional standard then I would know what to do because the software would detect the issues and give me solutions like any professional product. My friend, any product will give you any solution. You have to study, read the manual,

Re: [users@httpd] prebuilt mod_jk.so for apache2 2.4.46

2021-04-29 Thread Dino Ciuffetti
Where am I likely to find mod_jk.so for apache 2.4.46 ? Download source code from here: https://tomcat.apache.org/download-connectors.cgi (https://tomcat.apache.org/download-connectors.cgi) I tried to build it, first attempt ./configure --with-apache=/home/pi/Downloads/httpd-2.4.46 You are

Re: [users@httpd] util_pcre.c:58:10: fatal error: pcre.h: No such file or directory

2021-04-28 Thread Dino Ciuffetti
It is true there is no file pcre.h. but I do have a pcre2.h You need PCRE, not PCRE2. They are not compatible each other. Clean up your /usr/local/pcre directory, also remove any symlink you've manually created on /usr/include!! Download PCRE from here:

Re: [users@httpd] Related question on having multiple subdomains on one host

2021-04-09 Thread Dino Ciuffetti
9 aprile 2021 21:51, "H" wrote: > etc, I have separate conf files in /etc/httpd/conf.d/, one for each of site1, > site2 etc, using this > format: > > > ServerAdmin > ServerName x.x.x.x > DocumentRoot /var/www/html/ > Include /etc/httpd/conf.d/rh-php70-php-fpm.conf > ErrorLog

Re: [users@httpd] Running php 7.0 and 7.2 for different websites with apache

2021-04-09 Thread Dino Ciuffetti
> This is from ps aux | grep fpm: > > root 17004 0.0 0.6 339008 11244 ?Ss 01:18 0:00 php-fpm: > master process > (/etc/opt/rh/rh-php70/php-fpm.conf) > apache 17005 0.0 0.3 339112 7352 ?S01:18 0:00 php-fpm: > pool www > apache 17006 0.0 0.3 339112 7356 ?

Re: [users@httpd] What should be considered about the reverse proxy server?

2021-03-08 Thread Dino Ciuffetti
> > ProxyPreserveHost On > ProxyPass / http://Server-IP > ProxyPassReverse / http://Server-IP > > I have some questions: > > 1- the real work of a proxy server is just that lines? It's OK if you only have one backend HTTP worker without load balancing and no HTTPS. If you need load

Re: [users@httpd] result codes from Bash CGI

2021-02-18 Thread Dino Ciuffetti
I see that they are easy to use and understand, but I could not find any reference to them in the documentation. The fact that Bash can be used as a CGI language is in the documentation, but nothing on the helper functions -- not even that they exist. May be you'll not find how to write

Re: [users@httpd] result codes from Bash CGI

2021-02-18 Thread Dino Ciuffetti
Is there documentation for any of these methods? If you can point me to the proper section of the code base I can probably figure it out and document if necessary. Claude The code is super simple, does not require any dependency and is auto explicative. You are not calling any method. There

Re: [users@httpd] result codes from Bash CGI

2021-02-15 Thread Dino Ciuffetti
So I would do something like echo "Status: 410 Gone" to create a "410 Gone" result code and message? Claude Yes. You got the point. Please check this CGI bash script I made for you as an example: https://gist.github.com/dam2k/5df0d8d3fdabc41e8ce2c799734f65d4

Re: [users@httpd] silent redirecting

2021-02-09 Thread Dino Ciuffetti
> I have situation where we have, let us say alpha.example.com > bravo.example.com, we want to redirect them and example.com to > zulu.example.com _but_ for that and every page under, they > retain address bar of their original request hostname You could enable mod_proxy, mod_proxy_http,

Re: [users@httpd] Which parameters must be set to solve these Vulnerabilities?

2021-02-08 Thread Dino Ciuffetti
> Hello, > I scanned my Apache web server and below Vulnerabilities discovered: There are many ways of solving those vulnerabilities. Most of them can be fixed patching your applications. As rule of thumb, your application should: - not use frames or iframes at all - use only HTTPS everywhere,

Re: [users@httpd] Reverse proxy to a tor .onion-site?

2021-02-06 Thread Dino Ciuffetti
> https://www.example.com to localhost:9050 (default port for tor's SOCks > proxy) and change the address to http://xyz.onion. Is that possible? I don't think it's possible to use apache as a reverse proxy behind a SOCKS forward proxy since the ProxyRemote directive doesn't seem to support SOCKS

Re: [users@httpd] Is it possible to exclude a directory from listing?

2021-01-21 Thread Dino Ciuffetti
> Is it possible to disable Directory Listing for a directory and its > sub-directory except one of > them? Sure. You can do something like this. Pls set your correct paths. # Disable directory listing for myparentdir and all of its subdirs Options -Indexes Require all granted # Just