[users@httpd] Harvesting ssl chain from SSLCACertificateFile

2019-03-04 Thread Jan Vávra
Hello,  I have a version: Server version: Apache/2.4.38 (Win64) Apache Lounge VC15 Server built:   Feb 28 2019 11:40:54 Server's Module Magic Number: 20120211:83 Server loaded:  APR 1.6.5, APR-UTIL 1.6.1 Compiled using: APR 1.6.5, APR-UTIL 1.6.1 SSLCertificateFile C C is son of authority A SSLCer

Re: [users@httpd] Access control advice needed

2014-04-09 Thread Jan Vávra
Hello, try to use an IP address or subnet instead of .broad.pt.fj.dynamic.163data.com.cn Jan. Access control advice needed I have a website running drupal which is currently under a continuous botnet attack, which is causing major performance issues. I'm trying to use apache's access control

Re: [users@httpd] Multiple authencation prompts

2014-01-03 Thread Jan Vávra
Hello, I have observed that browsers cache http basic authentication credentials for the first word after the hostname in a url. Eg. Caches credentials for http://hostname/word1/.../... and requires inputting creadentials again for http://hostname/word2/.../... So you can try move your a

Re: [users@httpd] wrong certs

2013-10-24 Thread Jan Vávra
, you should then get 1.crt from either port, and never get 2.crt, which seems like a bug. On Wed, Oct 23, 2013 at 3:14 AM, Jan Vávra <mailto:va...@602.cz>> wrote: Hello, it is obvious you are using port based virtual host. My question was for assuring you have configur

Re: [users@httpd] PHP variables for mod_proxy_ajp

2013-10-23 Thread Jan Vávra
Hello, if there is defined a context for reverse proxy (eg. /tomcat_part), no php is executed on /tomcat_part. This thing you can do via redirect and pass the variable as url parameter, e.g. add param 'key' /tomcat_part/page.jsp?key=something The client calls /php_part/page.php and page.php t

Re: [users@httpd] wrong certs

2013-10-23 Thread Jan Vávra
corresponding port no matter what host header was passed. On Tue, Oct 22, 2013 at 4:50 PM, Jan Vávra <mailto:va...@602.cz>> wrote: Hello. For sure have you not forgotten specifying option SSLCertificateKeyFile ? What is the url you are using? If you use https://loc

Re: [users@httpd] wrong certs

2013-10-22 Thread Jan Vávra
Hello. For sure have you not forgotten specifying option SSLCertificateKeyFile ? What is the url you are using? If you use https://localost:424 instead of https://a:424, you can get weird results. I can also try it, if your problem persists. My last several years is full of creating and u

[users@httpd] reverse proxy, balancing and ssl client certificate authentication

2013-10-17 Thread Jan Vávra
Hello, I have an idea how to setup Apache for doing load balancer based on mod_proxy and mod_balance modules. But in my case the backend server requires ssl client certificate authentication and therefore the Apache Server cannot terminate the ssl connection. I do no need http session cookie

[users@httpd] client certificate revocation checking

2013-07-08 Thread Jan Vávra
Hi. in our application we use authentication based on client ssl certificate. I've found out that the checking of client cert revocation is not done automatically, if the Crl Distribution Point is present in client certificate. Is it an intention or only not done yet? The only way how to do

Re: [users@httpd] SSL authentication by clients certificates or by IP

2013-03-14 Thread Jan Vávra
Hello, for a) I'd use directives Order, Allow, Deny for Directory for b) I'd use SSLVerifyClient require This options allows only such clients with client certificate iisued in the list defined by SSLCACertificateFile For more filtering by the specific field of cert eg. Common Name set |SSL

[users@httpd] mod_proxy_ballancer, session stickyness

2012-12-12 Thread Jan Vávra
Hello, I have a question if mod_proxy_balancer can stick session via cookie name ? I've read at http://httpd.apache.org/docs/2.2/mod/mod_proxy_balancer.html , "Details on load balancer stickyness", that it can be done by cookie value suffix (value after char .). We are considering to use ba

[users@httpd] only one worker process

2011-09-06 Thread Jan Vávra
Hello, I'm developing a php module and I'd like to test if the module doesn't consume memory and doesn't make a seg fault. I'd like to make a multithreaded test and start only one worker process. Can anybody help me with the proper configuration? I have SLES11, 32bit. The server-tuning.conf I